{ "Event": { "published": true, "date": "2021-04-17", "threat_level_id": 2, "info": "MalwareBazaar malware samples for 2021-04-17", "timestamp": 1618704182, "analysis": 1, "event_creator_email": "bazaar@abuse.ch", "distribution": 3, "uuid": "2210946e-7a81-477c-b274-922d50ea1b8e", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f1b1c1b-9fd5-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618702433, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702433, "uuid": "a4a63c9d-65f6-4d3f-a6f5-fe232e092778", "comment": "Malware payload", "value": "76046b571d306912e8f0c499599ea2ab", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702433, "uuid": "325ae36d-cbe7-42ec-8f6e-544effc1d1ce", "comment": "Malware payload", "value": "005947de2432fb46afe728562758e55c88864ffa2992d65f258c4a216ad52c43", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702433, "uuid": "76aa7102-693a-4245-a51f-945e72f28ae9", "comment": "Malware payload", "value": "1b70e6a340a250a4b376c702462d7c194600aec2", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702433, "uuid": "6d34ebdc-673d-4164-9df9-6758b847f66c", "comment": "Malware payload", "value": "beaa1908c8ac9f3644b7bc88ff1fb512d7aa90faa51414471cbccacaf2f97279e188a10d902c1aae35342438a3af05ad", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702433, "uuid": "517cd3ac-f7de-43e2-85d9-a7584cd178e7", "value": "CAF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702433, "uuid": "bb7d0f26-4d93-4005-a03e-aa8ad977cc71", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702433, "uuid": "47ba6bd7-fe44-4a7c-bdf2-15ffa79f730c", "value": "3072:alpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:alo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618702433, "uuid": "a72630a8-92f5-43a9-97b5-f2a89fe0fded", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618702433, "uuid": "b1937a5d-c8c4-44da-b600-fb8d250e2018", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702433, "uuid": "0491375f-521e-4fd3-874e-01284ae96ab9", "value": "005947de2432fb46afe728562758e55c88864ffa2992d65f258c4a216ad52c43", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "206458f1-9fcd-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618698892, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698892, "uuid": "b03b5cc3-b253-4012-9f15-c19d4387c0a6", "comment": "Malware payload", "value": "06d6fefb708d61f16842e43fbc1150cd", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698892, "uuid": "950284b5-21c5-44d6-8f33-ffacce8af25b", "comment": "Malware payload", "value": "005f31c5c6472f361255b3c615b9d1d0295061dcc0e0baab066e830264e246a2", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698892, "uuid": "696bc7aa-f323-4284-a37e-34b9428871f2", "comment": "Malware payload", "value": "aa6182e513b0a686af59db3b4dca4502b792938d", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698892, "uuid": "96a9c562-2f88-4375-a783-fdb5c4c4348a", "comment": "Malware payload", "value": "288ba2c973ed54afb1bfdd0b3e26485cba629b0ec4c82171cbe85ebe64cb9cece576bf722f2291acca24a43ab7813e15", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698892, "uuid": "c130447c-757e-4dff-937b-13459966231c", "value": "DCF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698892, "uuid": "8013e2df-fb4c-45de-ae18-f14cde8b4421", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698892, "uuid": "b2f8a0ac-6094-4fb0-a161-34ba3d0df0b8", "value": "3072:gGlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:gGlo0gw4ZMypZp45g51aXotOxwVeXm7l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618698892, "uuid": "9082207f-fd02-4842-9552-c289580adaab", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618698892, "uuid": "7e29b27d-5636-474f-9190-ec84749a8317", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698892, "uuid": "a480fe6a-2039-4d01-892a-82552812d887", "value": "005f31c5c6472f361255b3c615b9d1d0295061dcc0e0baab066e830264e246a2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0e7393e-9f59-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618649340, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618649340, "uuid": "5da4d660-cb69-4a25-af7f-27645dd288c4", "comment": "Malware payload (Dridex)", "value": "f94ddcbcb0d23b59a8519f8067879899", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618649340, "uuid": "975db0bc-7e29-4d31-9984-2b0605767764", "comment": "Malware payload (Dridex)", "value": "007448e88566f73a1ce013804b18c48d03c3e1a7a6297908b77010cef1457b84", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618649340, "uuid": "4e81094a-a4da-436c-8bf4-64134bb710d6", "comment": "Malware payload (Dridex)", "value": "675c9aef717358ad0c5f13fd3dd62bac1199adfb", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618649340, "uuid": "94a1d49c-36ee-4ca4-a91a-bdccf88bbc10", "comment": "Malware payload (Dridex)", "value": "afb4c3002047365f1dfb00687f68674a7162c7645fcc5dd18f10b1db939f75d2bb52f582b78f69b131bf8f4c16bd25a2", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618649340, "uuid": "63dacfd0-4164-4ca0-8f55-ec108aaff6c9", "value": "3CF3D088CBB3E4E6EFB3D37866F85E1B461174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618649340, "uuid": "4064f933-41a7-4ddb-a9cd-1d72c6ea1949", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618649340, "uuid": "d9a7bdb3-d200-4778-85f8-b916f04acc8e", "value": "3072:XmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:2Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618649340, "uuid": "41c12499-c9f7-4e2a-82bc-1c4270034461", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618649340, "uuid": "25e5926c-f9fe-409d-a5f4-602d02df28e7", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618649340, "uuid": "06375814-2bc2-4482-88db-2113ab9a957e", "value": "007448e88566f73a1ce013804b18c48d03c3e1a7a6297908b77010cef1457b84", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00f6d525-9fba-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618690679, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618690679, "uuid": "bc624324-80fb-4fd2-8f45-347e605d86a2", "comment": "Malware payload", "value": "4553c9990802f45661a23d529e1ff607", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618690679, "uuid": "f8051c7d-fb3e-46d6-b3d2-e5ae197d2986", "comment": "Malware payload", "value": "00b7492dd8bf73dbf9849d5aa257a9a5eea58d98085d628c5e0a982815c5fdee", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618690679, "uuid": "9fb1e05a-51ae-43d0-99cb-6979e26f4ed2", "comment": "Malware payload", "value": "070ec0f0cace2c87b324c612eadf4b9ad37e7cad", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618690679, "uuid": "135749ae-9d18-4014-9a3a-20854c0110c7", "comment": "Malware payload", "value": "cba340ae7b415b015c3ff89efafc5b9d9810b1785f94c9d3eb155ed6d8e9d69c31b4adeb14c6fa486ca2429799967a2d", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618690679, "uuid": "5fb04a4a-2e6a-4dde-bd10-ee7ce2742ef0", "value": "45F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618690679, "uuid": "3355f8ed-73a7-4174-aff3-5cac25c6483f", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618690679, "uuid": "fe18f910-7c37-4dc4-a85d-ba759dfb7626", "value": "3072:Vlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Vlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618690679, "uuid": "2616814d-ec98-4c61-b697-5ae3084123ab", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618690679, "uuid": "e68fabcd-9ebe-468c-a4af-ffc1e4ad0828", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618690679, "uuid": "5393c24f-d66e-4bfa-b5ab-93608cd27cdf", "value": "00b7492dd8bf73dbf9849d5aa257a9a5eea58d98085d628c5e0a982815c5fdee", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0917ea5c-9f37-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618634428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634428, "uuid": "552e542a-5208-42c1-8229-b17d61b5a315", "comment": "Malware payload (Dridex)", "value": "f017a97c8116075e5c0a0fa136205e8f", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634428, "uuid": "29bf2ea4-84d7-45bc-9c7a-4c652813d027", "comment": "Malware payload (Dridex)", "value": "00c003a0a74b038d023c30e4d4f49252c054e3e367b6a6dbfc721081d75592ed", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634428, "uuid": "dc1557af-3e0d-432c-8b88-8915a37e94c6", "comment": "Malware payload (Dridex)", "value": "e2115c605425c1c0b1eb638fbdeec9e7ac3c6c5e", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634428, "uuid": "ba9c4d3f-c908-4c6f-8c5b-083af06b12e3", "comment": "Malware payload (Dridex)", "value": "c346f90a129efc18bb2db0eecf7ee6e9501b5e0313555472c6b5e86b209abe5e824f1652a1992f007bf285f50b73f4b3", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634428, "uuid": "fa8cc2dc-57d9-4478-9947-80b39fd6a3db", "value": "ABF3D088CBB3E4E6EFB3D37866F85E1B461174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634428, "uuid": "600a797b-55ab-4b40-9bad-861bb89bd749", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634428, "uuid": "ce96e95d-99a9-443c-a967-bc15dcc997cc", "value": "3072:ZmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ILc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618634428, "uuid": "389b0565-c49a-459a-84dc-888d06285044", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618634428, "uuid": "cfcc5b4d-be64-4a1e-a926-79248a4e8661", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634428, "uuid": "336333b2-4525-4522-9154-35671bac56d7", "value": "00c003a0a74b038d023c30e4d4f49252c054e3e367b6a6dbfc721081d75592ed", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7dac1a3-9f2a-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618629165, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629165, "uuid": "4e954f33-28b0-4321-8220-07789bb39f8b", "comment": "Malware payload (Dridex)", "value": "5bac4d20179bbfa3116858612eea1722", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629165, "uuid": "7dde2167-2e06-4d62-bba1-51212d9cab10", "comment": "Malware payload (Dridex)", "value": "01628838c399c450c7ff984e0a443650bf04bafd33fbc065c5e38fcf967351cf", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629165, "uuid": "dca78b22-3d8c-4493-b268-e295d32fb71b", "comment": "Malware payload (Dridex)", "value": "11ad0c57d43d86e2b22415e70c07608c3ab860be", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629165, "uuid": "09d1636c-a306-4349-ba8f-9d5158214181", "comment": "Malware payload (Dridex)", "value": "5179657c53d810930fb3e90994b10443a6b0fc9800e8c5e8ef758beb04b56db5a93832b7e64bcc62750bc04446840095", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629165, "uuid": "7451c944-92f2-46e7-9385-c4ef03caf430", "value": "39F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629165, "uuid": "d2d2b53b-69c7-4254-8012-fb4b0bcf6cf8", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629165, "uuid": "3c1cdf37-e725-41b7-9ae9-e19e40f69ae0", "value": "3072:gmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:pLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618629165, "uuid": "b6084cfb-d5a0-4acc-b713-f16834e67115", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618629165, "uuid": "c4a754a6-6130-4ecd-91a6-65bc3f283e2d", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629165, "uuid": "d0c0d26f-3b65-4c32-be85-9722e549ebde", "value": "01628838c399c450c7ff984e0a443650bf04bafd33fbc065c5e38fcf967351cf", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07f0bc4b-9fa9-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618683389, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683389, "uuid": "dd0a3287-84f4-48c3-8fb2-dfce128284f9", "comment": "Malware payload", "value": "37c2973b6df3a2e2f08d5ef6eff65e13", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683389, "uuid": "d083dc2e-1167-43c5-96dc-af5bafe1aca4", "comment": "Malware payload", "value": "01baa2dd697a58e36ed0fac0b5a6b12d0435b055e9a3361ef3bb617fdd07138e", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683389, "uuid": "85e39a42-6249-4ff1-9b9d-f16cf1af39bc", "comment": "Malware payload", "value": "155b68611d21d44b30c6b71e61e60683391172c7", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683389, "uuid": "5dae533f-6ffc-4130-8164-9217f3fbd8ce", "comment": "Malware payload", "value": "a2cd6d89b4d791fcdb74e75c3569f9f7f0b252845ed91c4d5c304c92f21f79c64928173ec8d7e1fa1f51315d7f23bfb6", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683389, "uuid": "fd1d756c-e1e8-4fd4-8540-e9c87eaae449", "value": "98F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683389, "uuid": "d7c0beac-d5c5-4175-88bc-7a9189d7fe85", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683389, "uuid": "df750d1f-5a64-4c24-b4e1-8e91bb2fcdbf", "value": "3072:vlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:vlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618683389, "uuid": "0eedad60-2973-4a13-bae1-998cb3da2bce", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618683389, "uuid": "e2d3a1ef-3658-4933-b2d6-aa9db9700cb9", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683389, "uuid": "1596b71a-54c9-45f2-a279-b2afa8cf0f55", "value": "01baa2dd697a58e36ed0fac0b5a6b12d0435b055e9a3361ef3bb617fdd07138e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a567eb1-9f53-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618646456, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618646456, "uuid": "674f4673-fe39-4b25-9edf-22c56e4da878", "comment": "Malware payload (Dridex)", "value": "b6800eb66b1d641d7e46b9037d7f5f57", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618646456, "uuid": "ce54b690-aa59-43d7-9bc9-5d687f063251", "comment": "Malware payload (Dridex)", "value": "02514f15b90c51e4d92b71261e55f5cb4662d44f04c43b1339b62de7984c036d", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618646456, "uuid": "934eb459-bb70-427e-b68e-3e92a29c3c86", "comment": "Malware payload (Dridex)", "value": "447eb28096ebdc5a5395d794507a68982fbf3a92", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618646456, "uuid": "2debfb65-1886-4fee-8a4a-4b43ec72eb60", "comment": "Malware payload (Dridex)", "value": "98ab0c7312d7b6085a272b24cef5911287f906a879395f65c81ca9fe9c01c3ee2b0760000588ad3166395b899a7e5ad8", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618646456, "uuid": "02c1d482-6c32-47ef-956f-12db3f0579fa", "value": "C5F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618646456, "uuid": "9aca7e8c-5337-4cb9-9da2-ac86558d9b70", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618646456, "uuid": "7388e3e8-0568-4b8d-8083-ee6e8a0dcbb1", "value": "3072:8mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:lLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618646456, "uuid": "092f4967-e9a0-4e9a-9844-ddcc00a4d97a", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618646456, "uuid": "454fd877-4e44-41af-b2ed-9ae37882ad0d", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618646456, "uuid": "287b0363-9ca8-42e1-a02b-7121d9545ad7", "value": "02514f15b90c51e4d92b71261e55f5cb4662d44f04c43b1339b62de7984c036d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3720d4e0-9f2e-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618630640, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630640, "uuid": "2476aec5-78ac-472f-be9a-2f50ea0607c0", "comment": "Malware payload (Dridex)", "value": "19aafe81d4c0d79ed561dabe5cd271b4", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630640, "uuid": "d553a45d-7091-4878-a526-982300311568", "comment": "Malware payload (Dridex)", "value": "02b2ff7af5057a591f7d58ffc0e142a4d35993f7cbaeecf73c6d41284811403c", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630640, "uuid": "9ef8ac1c-2d09-419d-b27f-2f6a068930a4", "comment": "Malware payload (Dridex)", "value": "176a7969a8ea577e7a5836ee6c84f7a9894a8ed0", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630640, "uuid": "e08a3ce5-4fec-4276-a334-4ab9aba79795", "comment": "Malware payload (Dridex)", "value": "d7724eb823aed10a15f2309368e8539341e9dbdc366e116706cedec99291f7d5493da0b29dca39d93cd563fcc80e5267", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630640, "uuid": "58c2d9e0-6606-4245-915f-eaef5798509f", "value": "98F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630640, "uuid": "0b43af44-5cac-48b4-8af1-c96b965b4528", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630640, "uuid": "49255d15-7567-4580-a9c6-3175448402e0", "value": "3072:xlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:xlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618630640, "uuid": "887c91b6-cfe1-46ae-a232-227f6cf195af", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618630640, "uuid": "e0d25eba-1df0-42f4-a85b-179fb82d457f", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630640, "uuid": "fb9a8328-5229-46e5-bf65-9ededb4f665a", "value": "02b2ff7af5057a591f7d58ffc0e142a4d35993f7cbaeecf73c6d41284811403c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca3bfc07-9fb2-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618687581, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687581, "uuid": "49129820-d9da-4a9d-94b6-c5878ac31b16", "comment": "Malware payload", "value": "2fefdcfcef78f80e70bd58d6f68d6ab1", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687581, "uuid": "6e97d605-f357-4736-9190-d5b92b50608c", "comment": "Malware payload", "value": "03972f8d69f28eea580f6ad3459eed781b9255d7852150f883aacbcf0845f61e", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687581, "uuid": "8fb66d5a-62b2-4bee-993a-e0a542681ade", "comment": "Malware payload", "value": "d8d6e5849fc99e19eaaa8056091788bfb89bc2e2", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687581, "uuid": "f09fb355-1976-4672-8572-1672aaab6baa", "comment": "Malware payload", "value": "b5f06174dc6982d468c08ef0b9e3ecec59d91e7f0b0e27cf40a7d3f460b46073a2c0c75bff93a8d5e24ae908d41dba2f", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687581, "uuid": "40ab91de-7ab8-48e7-a4d6-4727468b4ea8", "value": "7FF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687581, "uuid": "6b5712d7-2992-4cc5-b309-92ba7047fb38", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687581, "uuid": "e1b8c578-f686-42cb-a014-146ade43e2e5", "value": "3072:Flpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Flo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618687581, "uuid": "27acff02-4b34-4947-baae-0f37c7de5a2a", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618687581, "uuid": "f7c5c59e-cb18-4916-b663-4921687947a8", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687581, "uuid": "7c68e8fb-d79b-4276-a5df-dd7344190930", "value": "03972f8d69f28eea580f6ad3459eed781b9255d7852150f883aacbcf0845f61e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63b6c877-9f60-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618652190, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652190, "uuid": "d3131cd5-2b94-459b-b761-d25352d68259", "comment": "Malware payload (Dridex)", "value": "2d127f13d9d8150dbf39587d99bb4064", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652190, "uuid": "e1a7147e-495f-44b7-9649-7edb9c406686", "comment": "Malware payload (Dridex)", "value": "0498283cff0eca1ccd98ef0fcbfedddd21ca338e857fabab94dca23309c637bd", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652190, "uuid": "ff69e1cc-a854-4692-862e-fdc3af5f18d7", "comment": "Malware payload (Dridex)", "value": "d5f1b267bd9cf563af61e06bf04f7df6d19e9860", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652190, "uuid": "b3fe8040-3982-45e6-ab61-4672d35f76b9", "comment": "Malware payload (Dridex)", "value": "ac1539fc78bf64e149156a5f18c0f150de79648a653b8110a56b23e14045105b45af7eb52ce53055295e6311680dbbdb", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652190, "uuid": "a6766727-4cdc-4d02-883f-fb159eae0859", "value": "D5F3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B496B1FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652190, "uuid": "e2401d61-e24f-4eae-9b3f-46a63f5090bc", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652190, "uuid": "bd5a1a39-c604-455c-8e28-25de08ec55fc", "value": "3072:3A6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:33J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618652190, "uuid": "56fa4a17-24e6-4c1d-9b23-21851637434b", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618652190, "uuid": "cb8f7192-14ca-4d53-a698-783264490246", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652190, "uuid": "430d2eb6-eccb-421d-bf2b-91473514a17f", "value": "0498283cff0eca1ccd98ef0fcbfedddd21ca338e857fabab94dca23309c637bd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3ac1c06-9f98-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618676376, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676376, "uuid": "78625386-3bbf-47d5-9269-3f41ce0958a6", "comment": "Malware payload", "value": "975b401329694f1ca0bde4339fd8578c", "object_relation": "md5", "Tag": [ { "name": "taurus", "colour": "#79D969", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676376, "uuid": "329a9d56-df2f-49a5-a5bb-48f5234d9294", "comment": "Malware payload", "value": "0595ed217175111f8512486a87acdf3dbde38bb7db819dc5f22df7d1ea8aa3a2", "object_relation": "sha256", "Tag": [ { "name": "taurus", "colour": "#79D969", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676376, "uuid": "83af2801-4ad3-442c-b7a4-f5f08ae32301", "comment": "Malware payload", "value": "eb9f077bd4779bb8d377aea0d05baec54b0d590d", "object_relation": "sha1", "Tag": [ { "name": "taurus", "colour": "#79D969", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676376, "uuid": "3be79376-48f8-42af-9b09-0dfcf897b41d", "comment": "Malware payload", "value": "7840bb62ccecc294b5c1f66363cdeddfc09ce4062e1d4dedb6797927bb7e6229f0c1fe24bf46b7f0e1f199bfb9f724b3", "object_relation": "sha3-384", "Tag": [ { "name": "taurus", "colour": "#79D969", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676376, "uuid": "41590dcf-a5fa-498e-912d-de9a4029dc1b", "value": "4A74C00173C0D133C48321759125C7B19EBEB475245AA98BFBC46EBA6F793E2E72170A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676376, "uuid": "ea28a0c6-2339-486c-b385-46250582a980", "value": "b0eb8cb1ecf999d74c83af780efdac4b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676376, "uuid": "05669560-aada-4166-a3a3-500295d21252", "value": "6144:+lvE5HFa+o5JrVv8xeM/WbtkTIluJAIUemO0yB:+lilaTHVETWtlXIUs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618676376, "uuid": "6a26b1a9-fa15-4b5a-96f4-eaedf4c840a7", "value": 337920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618676376, "uuid": "f2332591-15bd-41c3-bd34-4ac9dfd3e9c8", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676376, "uuid": "f265655e-f92f-41cb-9347-670c0d1ea9d7", "value": "Taurus_1.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc49616f-9f18-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618621415, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618621415, "uuid": "827feb5c-692a-44aa-964a-af8492fde0c2", "comment": "Malware payload (Dridex)", "value": "2981a815da0c251eb0a3dc07e7d4012e", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618621415, "uuid": "914f997d-d58e-495c-8c9a-8949a121e1ca", "comment": "Malware payload (Dridex)", "value": "06b0cad3637b5109eb885bea4e7263c7c5a05d9284e1ced249653bfe0f7cb233", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618621415, "uuid": "265b948b-54f5-4c9c-b9e8-9cc1ef84ce77", "comment": "Malware payload (Dridex)", "value": "668bfbef1b893158a2d852d1e1f2944615a103f0", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618621415, "uuid": "f6bb8e36-b606-4655-8216-225a0309939a", "comment": "Malware payload (Dridex)", "value": "0285a7b39b3fefc119b095c9005a0f8c4e9af741a5a2bbc83437468316fc1c706da4c81463a26193158596f0f74e7561", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618621415, "uuid": "e9f5773c-e53e-4a8b-9921-9e978b1f49d7", "value": "F2F3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618621415, "uuid": "526a16fb-bb9f-48ea-ab4b-ff5cd764ed2c", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618621415, "uuid": "e2696b3b-935d-4082-9d57-c6b3d9036f2d", "value": "3072:AiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:reAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618621415, "uuid": "5aec4c10-4aa4-42b8-a40e-041df52f93cb", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618621415, "uuid": "9ed9e417-7a3e-44ba-bdcc-5f17d9f4c921", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618621415, "uuid": "8dc7c9ed-523a-4a29-9819-8e9e70c521f5", "value": "06b0cad3637b5109eb885bea4e7263c7c5a05d9284e1ced249653bfe0f7cb233", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fcdf3519-9f61-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618652876, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652876, "uuid": "7d896846-01f8-496b-8edc-05e8417004a9", "comment": "Malware payload (Dridex)", "value": "72a1b7ba9def95bed1070cca667bba79", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652876, "uuid": "0ca92c3c-8b74-4a98-ab37-da87cd734b34", "comment": "Malware payload (Dridex)", "value": "074be297aa35cde2574cd0d60afb81e89222128f9c33353e4b9066a79c07920e", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652876, "uuid": "f6195a99-e1ab-4179-87f5-8da54306a42f", "comment": "Malware payload (Dridex)", "value": "0ce8a125b8d31ba36201c8656afff9e301587e82", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652876, "uuid": "902d7d73-a0ef-436c-a703-a30142527ea0", "comment": "Malware payload (Dridex)", "value": "0ee171471d3159e52b84c54818b8b76f1efc23ac84b9fad957a74445a55ffa17a0e388e30370b0130da03fd65a76c8b5", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652876, "uuid": "c9922bc8-dd67-45fb-80d3-9c840be8a6d2", "value": "FFF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652876, "uuid": "94582d62-e056-4cb0-893f-97a71ecac771", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652876, "uuid": "a69f942c-35bf-4f5e-a289-f2d2a0333b6f", "value": "3072:Mlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Mlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618652876, "uuid": "3f250b2c-7730-4f68-a266-fbb01086d1bf", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618652876, "uuid": "6833fd54-9231-4c00-97a8-37491a80822a", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652876, "uuid": "8b8ebcc9-a67e-48af-897d-d38580351ae3", "value": "074be297aa35cde2574cd0d60afb81e89222128f9c33353e4b9066a79c07920e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "840a8aa8-9f69-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618656110, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656110, "uuid": "f01160a3-771f-4b2f-adc3-ff8c93b85bc0", "comment": "Malware payload (Dridex)", "value": "ea61624f2e21cb04a17e8da4a2060d08", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656110, "uuid": "3ae4639c-a8fe-4415-ad13-01bc7fa78d3b", "comment": "Malware payload (Dridex)", "value": "077585c4277afa384448411b732a1245dc9365d64a1da77baf1caeda3082182c", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656110, "uuid": "25acec06-76b0-4287-bcb9-723813e9dc08", "comment": "Malware payload (Dridex)", "value": "cc56b051d6a04816dddd1303bc8ae9bd0f507121", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656110, "uuid": "ffbdb043-941d-4141-abd6-adc64a01af2a", "comment": "Malware payload (Dridex)", "value": "84a4ce8d375889381452ef1610d5edb0521bee859dbe7f696a1578894c5d3a12a9f3a26c30ea2ea0cd744fa56be16742", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656110, "uuid": "6351e299-87e1-4eb7-9428-c1a341e248a1", "value": "70F3C088CBB3E4E6EFB3937966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656110, "uuid": "3bb49203-14bd-4f5d-8b84-bd8a02aec66a", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656110, "uuid": "ee5b5b2c-a821-4a70-be78-59605c72e44b", "value": "3072:kmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:tLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618656110, "uuid": "e61221dc-1f14-401a-a96e-33969d9cac26", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618656110, "uuid": "727abbee-13e7-4cfc-9d9b-ee824c5e24f7", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656110, "uuid": "82ff53e0-e3b3-4036-a354-636c278efb31", "value": "077585c4277afa384448411b732a1245dc9365d64a1da77baf1caeda3082182c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64869a59-9f93-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618674096, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674096, "uuid": "2b8ab308-3044-4013-8990-527ed8e6327f", "comment": "Malware payload", "value": "9e5d9f4a9e2ed6095f9dd092f0d027b6", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674096, "uuid": "fb9bd318-8a4a-4fe4-90bb-453cbcf38eaa", "comment": "Malware payload", "value": "079f5d44dce417cb308a76c3a537295799eb98e9cfe953590d5da82d00ec8e2f", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674096, "uuid": "f14a449f-4f6a-4910-b325-307c653f0fb6", "comment": "Malware payload", "value": "755e18b711349776dd63cc3ef191ca90cde78c8c", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674096, "uuid": "09a1ad4d-729c-4b8f-a4f4-bb72845773d7", "comment": "Malware payload", "value": "1b3da1d4a357f7c8a94d54dd693b9935299a9be42a3471f4ae883f37b5f233756b761b183a5347783812a8e181b84e37", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674096, "uuid": "5efc4e67-f88f-40fa-ac87-6bc21ba70b1e", "value": "BBF3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B496B1FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674096, "uuid": "55fc3e9b-af0d-4ab7-852b-0953ae9cbbb8", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674096, "uuid": "c5bb6f04-724b-4559-986c-8a96a92c50d2", "value": "3072:FA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:F3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618674096, "uuid": "983b9edf-bf41-4f54-8b76-6265fda5ed09", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618674096, "uuid": "a527c389-f5c2-4429-a09b-9eabfb6b8aa8", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674096, "uuid": "b30aa74d-e2cc-442b-b68e-b6bb3d80ef77", "value": "079f5d44dce417cb308a76c3a537295799eb98e9cfe953590d5da82d00ec8e2f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f2331d3-9f80-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618665899, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665899, "uuid": "be69a80f-768d-4387-8746-949732637c22", "comment": "Malware payload", "value": "614995b029551beaf916e44394e0ca2c", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665899, "uuid": "c2725e66-a47f-4ef8-b9a7-57e9cf562376", "comment": "Malware payload", "value": "07a46f196464b33d516e00e39db9a36e069a690ac73c55511641ee4af813db83", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665899, "uuid": "38913a40-8a8f-4062-a921-2aa661377a7e", "comment": "Malware payload", "value": "ed7aac99aacbe23f81f20fa70146336ca8b5dc2d", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665899, "uuid": "5619cbd9-6f63-484f-849d-45f0f07f5750", "comment": "Malware payload", "value": "2ed936460c9dbc2c41b00e661368fe5c6b4f69e837c59708f3d8912d7fc556646dbcec8fd3f748bcea2310393373d4bf", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665899, "uuid": "38c9a5e8-c0b2-4889-ad99-f1ebc1c96150", "value": "91F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665899, "uuid": "8a0671c9-a950-4891-af47-5b8fdc3c7774", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665899, "uuid": "e1e64378-349c-48b7-9e15-9f857fd27090", "value": "3072:TmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:iLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618665899, "uuid": "1fe35f99-e119-45a1-93d8-0ffd66b93a87", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618665899, "uuid": "1f2d9386-ea50-4b92-bfb5-300831429f3e", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665899, "uuid": "f8d90f55-b014-4d5c-91da-817129366ac2", "value": "07a46f196464b33d516e00e39db9a36e069a690ac73c55511641ee4af813db83", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d59ec54-9f5f-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618651777, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618651777, "uuid": "6cf26630-b2bb-44c4-ab4d-87e4b21a3ffb", "comment": "Malware payload (Dridex)", "value": "5f654f4efbea1d8298de5d95ebdb584a", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618651777, "uuid": "cce3438b-3f0b-4afc-89b5-14433ec7af57", "comment": "Malware payload (Dridex)", "value": "07c1144ac7b59175d779337925d928ae0144da1fe6d5cf38a0e446ca67ecd3c8", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618651777, "uuid": "e2bad66f-9cb5-4830-80f3-5605f62c0cf9", "comment": "Malware payload (Dridex)", "value": "bd8fd4cfe9e813f7eac6f0553de23f9afb96b8ea", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618651777, "uuid": "ad3d87fe-d1ff-487e-9c8b-c9dacef6b109", "comment": "Malware payload (Dridex)", "value": "6d94ef7d704ead85db0dca4ae4959fdbfd86035c63acb950e28f82aada12e424e2d7297474593a9980fff63154149a40", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618651777, "uuid": "4d6f5c1a-d58d-4316-8420-22ef4c6aefb7", "value": "CAF3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618651777, "uuid": "61979f7f-0218-4e8c-b776-d7c83d951a50", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618651777, "uuid": "533d1b0d-43f3-4f50-b63f-95c3fc45680d", "value": "3072:/mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:eLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618651777, "uuid": "5867b9b6-cef5-4800-9c3e-b06dd2548206", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618651777, "uuid": "9c6bfa42-7dd8-4f4e-b824-482ce1cb2160", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618651777, "uuid": "4400ed52-c864-477f-938d-7806ee09ada0", "value": "07c1144ac7b59175d779337925d928ae0144da1fe6d5cf38a0e446ca67ecd3c8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4955ec0b-9f4f-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618644844, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644844, "uuid": "715dc70b-ea03-49cc-abd0-da4226417000", "comment": "Malware payload (Dridex)", "value": "f64e0d7aeea2b9976ef47c1f765a0193", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644844, "uuid": "8962ea0e-f20f-476f-832f-0493c40c67e4", "comment": "Malware payload (Dridex)", "value": "07c2278a351b1efc91d9a0014edf394f6413fbbb36d105c2ba6b5f3bea4ff85b", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644844, "uuid": "ffdb1af5-6853-4122-9180-c3a28afd9e31", "comment": "Malware payload (Dridex)", "value": "f0d538a1fa10f0d5128ea92348d7d145815e1fca", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644844, "uuid": "cf266892-7d9b-4ff6-9ccb-b4e356f35c0f", "comment": "Malware payload (Dridex)", "value": "7eddd145d734efda54a89d9dc539a415eff79c0991f247a3d620abac8c0f1ce94c7f6467ce3a8651fb61fc76d02bcf87", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644844, "uuid": "4422edae-7495-4fa3-abef-a0c165123355", "value": "C5F3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644844, "uuid": "fb18dbbd-ee10-49eb-8bec-0f77011d18f9", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644844, "uuid": "dcb0f7af-6095-4918-997b-c19c8aaacb77", "value": "3072:TiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:weAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618644844, "uuid": "3db2f21a-50e3-4132-9211-c71b420b6d8e", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618644844, "uuid": "ca4ea744-0b1a-407e-bded-168bc5fc49d2", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644844, "uuid": "f1a15680-3117-48e6-8d15-a5d2bec7de4d", "value": "07c2278a351b1efc91d9a0014edf394f6413fbbb36d105c2ba6b5f3bea4ff85b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60d51a6a-9f45-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618640589, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618640589, "uuid": "358feb2d-64ac-4883-a4d2-6d06e9111406", "comment": "Malware payload (Dridex)", "value": "7b60b8e1d2b13a76445f47e5fb31a5a2", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618640589, "uuid": "87c9b7fc-5025-4a03-9a5d-fd2075e7d446", "comment": "Malware payload (Dridex)", "value": "07ec4632a484bf81a01718ad097e2599a66a826214730c782217e6fbc4e62491", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618640589, "uuid": "d25ae3f7-86b7-4cb7-945f-9153c13e14b1", "comment": "Malware payload (Dridex)", "value": "32abc6ba1438975d1ff22c1ddf7a0d58ae521fc9", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618640589, "uuid": "bfc2e06e-54be-47f6-af0b-c06b8bfb5ed5", "comment": "Malware payload (Dridex)", "value": "84b6b0bdaf9d0d81419ee01158663d3360ee4324ab12b4659db66c5183e21829377e38d11aa82bffe27d8b9c08416db2", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618640589, "uuid": "fa45e1fd-21cb-42e7-ae12-834d61509a42", "value": "D1F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618640589, "uuid": "7a43e8e7-00fb-4af8-87ad-f80224d24755", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618640589, "uuid": "4bf5bdce-de9a-4955-a3a7-829a382aef9e", "value": "3072:EmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:NLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618640589, "uuid": "0d596929-ca99-47c7-a134-0b82ccbaef7b", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618640589, "uuid": "120ee19d-07f9-4a00-999b-1dd2203e4fed", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618640589, "uuid": "506a8f97-c317-4630-b94f-b29e98a1c670", "value": "07ec4632a484bf81a01718ad097e2599a66a826214730c782217e6fbc4e62491", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "487808f7-9f70-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618659016, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618659016, "uuid": "d9555e3e-83d8-460b-b4cb-30a231bdd8ae", "comment": "Malware payload (Dridex)", "value": "92c10bde8cd8c86549f6a8fdcf75a703", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618659016, "uuid": "49ff0cdd-4519-4424-902d-d280f95b25aa", "comment": "Malware payload (Dridex)", "value": "0826bdf06d9a90fc19a3fc84048ff69a15ec801c063ae0fbfd3a7ce29ca76b32", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618659016, "uuid": "08c60bd7-364e-402d-9350-2f0ed8768f30", "comment": "Malware payload (Dridex)", "value": "c804f3fbc8506dc239d2c7a43a5bc292702c56ed", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618659016, "uuid": "a5d71c35-2dd8-4358-8520-42f628871906", "comment": "Malware payload (Dridex)", "value": "02a6c6886f6f6c07d2065de9c8db186939384b114fd64a8efc71c135c6ed77d078117165aec8e6e0f98286c26208c8e6", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618659016, "uuid": "3a76c926-f63c-498d-9b6f-e81f9ea1a4e8", "value": "06F3E00AED9FE988E85C51F1CA4D363EE9713E361B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618659016, "uuid": "a0a97e0f-178a-4d93-86dc-3e291663e500", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618659016, "uuid": "28dd1875-0b58-43a9-9771-16cfd2a0e975", "value": "3072:ciFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:/eAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618659016, "uuid": "5beae223-3c78-4485-b2c7-09ef0f0d2f3e", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618659016, "uuid": "134de76f-a15e-4d70-bcdb-7a9458cee651", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618659016, "uuid": "5d7cc523-0fb3-4696-b3cb-15d128621307", "value": "0826bdf06d9a90fc19a3fc84048ff69a15ec801c063ae0fbfd3a7ce29ca76b32", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c606836-9fbc-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618691799, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691799, "uuid": "3be49fc2-f13f-4e6a-a1bc-0813aae411db", "comment": "Malware payload", "value": "cf8db1c544793492ed78b4acc7cf35f8", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691799, "uuid": "e8efcd1c-f89d-4d93-9823-49bd1b386bef", "comment": "Malware payload", "value": "0833e462d888c0cefb6f63ecc7bf7bb8df83659c64968b6102e914a09b4f42fa", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691799, "uuid": "467c8090-1e8e-486c-b05a-a6aea22f8328", "comment": "Malware payload", "value": "a6ea73937203f0c3a0b1588b80f19e2e81d01e2e", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691799, "uuid": "8d8a48a0-d1d1-41cf-a170-052e2ea1c4e7", "comment": "Malware payload", "value": "8d3b5a88d0a7940ec8fe702d5918443b89c74ae9a5a0f7125fbd94df8c10346939991a355f73082010c77a9926b32600", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691799, "uuid": "19015331-03cd-4ae7-a846-1d95b915a8fd", "value": "A6F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691799, "uuid": "548ccc82-472c-4dc1-8762-f9829a0ac7c6", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691799, "uuid": "a7f2630a-b667-48bb-a411-aeb092db1d0e", "value": "3072:RmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:gLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618691799, "uuid": "c1509cad-b02e-4fbe-a164-32ed9af56a33", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618691799, "uuid": "a1a0a3ff-6157-4e77-9d83-a1f0e2fb157f", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691799, "uuid": "e7a5fe0b-f4ec-404c-aa2d-f4af7da60a39", "value": "0833e462d888c0cefb6f63ecc7bf7bb8df83659c64968b6102e914a09b4f42fa", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aabdc072-9f8b-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618670777, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618670777, "uuid": "d8e71891-d7dd-485e-9bfa-0a5b13055693", "comment": "Malware payload", "value": "adeac93b90a47575bf48391d91384739", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618670777, "uuid": "ea718c24-adfd-42f7-b3d3-86bcaf43e5c4", "comment": "Malware payload", "value": "087d968c64481aeb99da2ca128a372bf644e61c9474682c9b6c00efdf66467bc", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618670777, "uuid": "e5602c38-8558-4863-a78e-20808bd9f44c", "comment": "Malware payload", "value": "f06adc8d082c6a0c4ee7309aa7c9c72033637599", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618670777, "uuid": "b53c616d-9fe0-4125-9ab1-86bf040cfbe0", "comment": "Malware payload", "value": "ee1704f91b1163babaf5a1db788cf01afeef8d2fe723849087214afc99a22732dff221b80e9338928df5ed8b11e96dc3", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618670777, "uuid": "28048877-0e0a-40bf-a941-08afff634844", "value": "66F3D088CBB3E4E6EFB3D37866F85E1B461174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618670777, "uuid": "def88335-5828-4831-ab48-89c2585cecc3", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618670777, "uuid": "ae25d0df-6d13-45b5-838f-4e71eb14acd2", "value": "3072:emNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:vLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618670777, "uuid": "32d0266f-9699-42c8-810e-4ed31013d93d", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618670777, "uuid": "0c897fae-0bdb-483e-99a5-3a8ab56f32ca", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618670777, "uuid": "7a0df679-a791-44ca-9782-ce48b847b1cf", "value": "087d968c64481aeb99da2ca128a372bf644e61c9474682c9b6c00efdf66467bc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5dc83441-9f36-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618634141, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634141, "uuid": "de967c78-602e-4f71-b3c7-f97a369ac09a", "comment": "Malware payload (Dridex)", "value": "d7a2d3681628ee15dfae27948ff6c6e1", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634141, "uuid": "953ef89e-0934-4f91-b08e-d29d25d746c7", "comment": "Malware payload (Dridex)", "value": "08fd8abab4a32b51879e77cb0599475bae246b1de96f113752b9614bcadd25a7", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634141, "uuid": "70036436-d4e2-400f-baaf-b5ea0187c4b4", "comment": "Malware payload (Dridex)", "value": "48d4ae3b44fc516b2f7b07f2e8b70f6ce5b854a2", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634141, "uuid": "05816f7d-acad-4ac8-9246-4d61937c7e45", "comment": "Malware payload (Dridex)", "value": "8dcaa7efebb4a4615533c46d68b3364bd7193a838ac238a3d20be45555dc35cd66fb20fddbbff1363819a505038764d6", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634141, "uuid": "25d2508a-7714-4258-957b-9d0d24df8864", "value": "DEF3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B496B1FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634141, "uuid": "47e29cd2-aa6b-4332-aa56-369049b88931", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634141, "uuid": "2812cf7e-98b5-4d1d-a59b-ab65d5eae7e9", "value": "3072:zA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:z3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618634141, "uuid": "4eae4d77-e36e-47ba-9cf6-cd329e582146", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618634141, "uuid": "17e46ac7-2965-4530-b5ec-e610584fefdc", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634141, "uuid": "3ebf6cf3-4cbc-4b94-a275-fb5520eb2575", "value": "08fd8abab4a32b51879e77cb0599475bae246b1de96f113752b9614bcadd25a7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89809e18-9f15-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618620041, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618620041, "uuid": "82ebd17d-69e6-4a4e-9408-eeec411cf97a", "comment": "Malware payload (Dridex)", "value": "e85709eddf2ebf9a2ee6e35453dd55fe", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618620041, "uuid": "6098062e-21d7-4d81-a816-672b80f5e72b", "comment": "Malware payload (Dridex)", "value": "0ac0c395235562001fac5d8bab27b914770d5768582ae4914b130dfff9db7417", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618620041, "uuid": "8c4f723c-32cc-48fe-8400-8220b40837f2", "comment": "Malware payload (Dridex)", "value": "013f2ef9aa1078b895d7e7025098633b4f110062", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618620041, "uuid": "ca29c4ae-bfbc-45bd-b4c6-e31bc0bf84e5", "comment": "Malware payload (Dridex)", "value": "dd1c9ff6a6e6227211c1f7efd3756ee2bce7403098c9cc4505c2a19e8b4d89b22ba79a4efb1cd055be863ccb6eeb2b93", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618620041, "uuid": "fcac45d0-c8e0-462b-b0d8-6593c700f21d", "value": "7FF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618620041, "uuid": "f2ccba12-f6e7-4368-aa4b-60b63643ab05", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618620041, "uuid": "903f5210-9c18-486b-a2c3-d4b3f9d6e0af", "value": "3072:TmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:iLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618620041, "uuid": "b89287b0-1d55-4418-8993-a0e047ccceb1", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618620041, "uuid": "826a21b0-a80d-4eb7-9855-8c38845e793f", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618620041, "uuid": "d4f1f9ae-0e7d-438e-8731-5a1a4f455a51", "value": "0ac0c395235562001fac5d8bab27b914770d5768582ae4914b130dfff9db7417", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5501ad6e-9f28-11eb-abe1-42010a9c0039", "comment": "Malware payload (ArkeiStealer)", "timestamp": 1618628113, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618628113, "uuid": "9e399423-6026-48e3-9e82-cb1114009256", "comment": "Malware payload (ArkeiStealer)", "value": "fca5226999c22181586934be29988e4c", "object_relation": "md5", "Tag": [ { "name": "ArkeiStealer", "colour": "#21CE25", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618628113, "uuid": "6776a92b-5804-4be4-b524-cd952b69c65f", "comment": "Malware payload (ArkeiStealer)", "value": "0ae68aad7f2c6857a95fba40fd7775bb060f082fd63a74eb9696921e9674680d", "object_relation": "sha256", "Tag": [ { "name": "ArkeiStealer", "colour": "#21CE25", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618628113, "uuid": "a478d82c-e4c7-4f6e-859c-b2708da3e373", "comment": "Malware payload (ArkeiStealer)", "value": "74d6a8570daa72c8890c1a2ef8794fce3f745d77", "object_relation": "sha1", "Tag": [ { "name": "ArkeiStealer", "colour": "#21CE25", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618628113, "uuid": "f8113481-c941-4c10-8296-d3e0ca018ab7", "comment": "Malware payload (ArkeiStealer)", "value": "50de41b8d7eddbe7262d2b8d22bba33d14b5155e0a083aad888e88253cb4cc182c09bd0a7b707c3ae5995f0a083f7767", "object_relation": "sha3-384", "Tag": [ { "name": "ArkeiStealer", "colour": "#21CE25", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618628113, "uuid": "bec85910-22d8-49db-be4f-621412644105", "value": "E2D4F1013AD1C032D093297259A9C7B55BBABC315766868F7BC41A7C5F343E29B31B8E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618628113, "uuid": "0f68f6e5-152c-4d87-9338-f9a850fdc9bf", "value": "fad9fd2f25ba79ef0607fcf1eb27b49d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618628113, "uuid": "793a4ef9-db6d-4f60-a3ea-c7b05b7fdc65", "value": "12288:XJfYqmHU4QQDfABqpdyi2cZUx4ayJL4khDfvzkKmrWPlZ0F+:5iUVQDfAoZROlyB9DXzNmrqlv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618628113, "uuid": "a7f5a7a3-f5d8-41bc-b64b-0c5ee785dd35", "value": 606720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618628113, "uuid": "6d76cca8-9689-4ac1-aeb3-ea92dc41d41d", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618628113, "uuid": "56d9e581-cb24-49ab-a983-d6a351ae9f4b", "value": "FCA5226999C22181586934BE29988E4C.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f4f9bb8-9f6f-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618658652, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618658652, "uuid": "c2f1a936-e1f0-4952-8a67-4440b077c694", "comment": "Malware payload (Dridex)", "value": "8f956198c8928d8b83f42fe470185205", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618658652, "uuid": "362b0b4f-f339-44e6-8462-3fe82cb47d3f", "comment": "Malware payload (Dridex)", "value": "0b10342cebb535735ccb182233f73a4747cd1f39b96fd7c51a80f30b178c5372", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618658652, "uuid": "71ba474a-92b2-4387-afc5-b4729fa60249", "comment": "Malware payload (Dridex)", "value": "5c9ceff3cabf19c25f873f393b84134145b44e7d", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618658652, "uuid": "32337bc8-fbd8-48bd-a515-ac94ac7a20c9", "comment": "Malware payload (Dridex)", "value": "c902f95c0485203ca08148e2a46f8686ce3323b26cf84138ecc527839b568d31ecaf15b1c9b101c10367ef53ebf5c355", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618658652, "uuid": "d61ee6cd-5aa4-4531-830f-056b7db16029", "value": "88F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618658652, "uuid": "f0ae8d63-e826-4e72-93e2-3caaaea7edb5", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618658652, "uuid": "42adaf0e-c969-4a1a-80b4-001049937f08", "value": "3072:+mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:PLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618658652, "uuid": "73694caa-2909-4226-ae23-8d697d873c4f", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618658652, "uuid": "8d865e22-4a7f-4d0b-a03f-1074565f51e6", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618658652, "uuid": "8bf8a041-c4e5-471e-a1f2-82173bdd01c2", "value": "0b10342cebb535735ccb182233f73a4747cd1f39b96fd7c51a80f30b178c5372", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52d8d7bd-9f85-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618668053, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618668053, "uuid": "00bb9007-ddad-41cc-9381-fa2526bb89ff", "comment": "Malware payload", "value": "62874b069a566ed267730b8ac9ea55af", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618668053, "uuid": "08998df6-811a-4232-8c68-d423b5678868", "comment": "Malware payload", "value": "0b11d20dd85f7e8c62f3ce533534504d3c12d9a5405435aa4c10801890ad54e6", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618668053, "uuid": "ee764965-94f5-4c6f-afa9-66e9b43e735a", "comment": "Malware payload", "value": "e3739a320fbab744637af054dc6b79845a733380", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618668053, "uuid": "08dc5f71-febf-4bd7-95cf-5b35c4cb3b65", "comment": "Malware payload", "value": "c298873e26e948f5319a3b216920b845da8038aa29dc829450df141245b77634f79804dc978b6bd7e278cf90d6e270ca", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618668053, "uuid": "a2ab15be-2c3f-4a01-bece-976083682f0e", "value": "0FF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618668053, "uuid": "cd8b56d2-ba49-4478-8c93-f0bb4c871a4a", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618668053, "uuid": "6a33973d-dbef-4897-ac81-2830761da88e", "value": "3072:hlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:hlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618668053, "uuid": "b7be52af-a6fc-4ae2-8dd5-a78681b69d98", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618668053, "uuid": "56c5fff3-d6fb-4099-acc7-98a6d60da574", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618668053, "uuid": "06e5f870-d63d-4e2e-8e6f-b18f996242a9", "value": "0b11d20dd85f7e8c62f3ce533534504d3c12d9a5405435aa4c10801890ad54e6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "313113ad-9fc7-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618696343, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618696343, "uuid": "110bc504-55f3-41ff-a426-78faee0cb2ba", "comment": "Malware payload", "value": "7c193562f3bd1a4994d3181b91caf885", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618696343, "uuid": "e370cce5-d53a-44ca-a5f5-f277d7bdb271", "comment": "Malware payload", "value": "0bf5ef4de65512b7ad5269a57971b1ebabd454bc306c6e3e1cbe633187d4cfb7", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618696343, "uuid": "92666d8a-f062-444d-9522-3cd3df4536b1", "comment": "Malware payload", "value": "cdc12095f5622cc08b710969a66f327058fabfc2", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618696343, "uuid": "bd8eb7b8-697e-4c3c-a941-2389d60f4912", "comment": "Malware payload", "value": "059fa69a4449a68fb6982bfe0375525b505aa66ebc756219e8f0fe3e00639f4d25a0159e08d05a9859330fdd15198008", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618696343, "uuid": "a75d5a3a-7f19-404c-bc65-9ebcd4d2fb4e", "value": "62F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618696343, "uuid": "032ab21d-0c78-4bd0-8d96-d33d585ecebf", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618696343, "uuid": "631cc7b9-9a7b-4a64-b93c-8b41900d075a", "value": "3072:bmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:KLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618696343, "uuid": "65f68870-96a5-412d-80cf-f03c1d7217f9", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618696343, "uuid": "e478ee08-b442-4bf7-b873-76bdd736c7d0", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618696343, "uuid": "33e35c20-1e74-4ca8-b91a-5ef75ee315cd", "value": "0bf5ef4de65512b7ad5269a57971b1ebabd454bc306c6e3e1cbe633187d4cfb7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3bcc96a9-9f73-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618660283, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618660283, "uuid": "03e18226-924b-4057-8cab-837ecae424d1", "comment": "Malware payload (Dridex)", "value": "ac63bcdd707756b10f3fd12eb3d4611b", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618660283, "uuid": "35bae21b-ab89-463e-b781-b271445b803b", "comment": "Malware payload (Dridex)", "value": "0c6571cde4928dd425f7f9ba13845e3f0159d9552e914734c4610d20dd4615bc", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618660283, "uuid": "3e202d7b-2b9a-46eb-baef-acbfd0bfab6d", "comment": "Malware payload (Dridex)", "value": "889ca0b1f6991187210729bf8a1a63f6b5e1f788", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618660283, "uuid": "e47f3dd5-5871-49d3-851d-5a39f7ae5b16", "comment": "Malware payload (Dridex)", "value": "1c688d72f510ccd58638807e316d288bb8f5ddc37cf103a1291bb3902fe30f0f8423dee4c83321126f83d418380d9db4", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618660283, "uuid": "9232189e-958a-49b6-86e5-3f13d8e0ccc7", "value": "DBF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618660283, "uuid": "138bcbfb-192d-4a77-b7dc-c647f961b685", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618660283, "uuid": "7b57f367-f653-4919-9dff-57c69c0dd8dd", "value": "3072:alpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:alo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618660283, "uuid": "8db7a83c-0556-487a-89a0-88e05d2ade26", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618660283, "uuid": "e1d66063-3961-4687-9370-3d9138c3324e", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618660283, "uuid": "6dd05c67-1e06-4920-bb37-3291c8a50e26", "value": "0c6571cde4928dd425f7f9ba13845e3f0159d9552e914734c4610d20dd4615bc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7f94302-9f15-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618620119, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618620119, "uuid": "43cf2bd8-e82a-4438-99f6-93aa041e7da0", "comment": "Malware payload (Dridex)", "value": "288e84b9bde44459ed61f9cce650d246", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618620119, "uuid": "792fb726-7bd9-4ac9-aa4f-87a50bbc3a2a", "comment": "Malware payload (Dridex)", "value": "0d5f48ffbd328069198e94de1ac3a418b9263a0406b20d10c50859dae5655311", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618620119, "uuid": "b622bcb8-c279-48b7-b9da-d4841d5bda08", "comment": "Malware payload (Dridex)", "value": "119584268fa0938b8a4788492bcdfa1d58e51f38", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618620119, "uuid": "594c4822-3e34-4769-8d06-ae21130f6238", "comment": "Malware payload (Dridex)", "value": "a745b7b3814d62e63248c68d1fb0b41e3167d4777c37f4dae0b8ac94ce53a06babadb8f31dd293a2854bc00bae425dd1", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618620119, "uuid": "abb09a57-9c7a-4d07-936f-56611309ac43", "value": "C0F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618620119, "uuid": "3105e841-8c47-482e-a875-c9d4e06facdc", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618620119, "uuid": "c7b84042-14d7-4a8d-9acf-f3d6809a27f9", "value": "3072:pmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:4Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618620119, "uuid": "96023f36-1967-400d-bf76-b01eb7cac197", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618620119, "uuid": "fca3be75-66b0-49a1-a5ab-ecf523b39b21", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618620119, "uuid": "8ae0c410-3f88-4c60-ba4e-000c32923ad9", "value": "0d5f48ffbd328069198e94de1ac3a418b9263a0406b20d10c50859dae5655311", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da12e312-9f77-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618662267, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662267, "uuid": "bd8db58f-db11-4a93-a1dd-1d8767eb9566", "comment": "Malware payload", "value": "e4633ad692fa646864da9c22482d9837", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662267, "uuid": "4e25138f-a93f-441f-a951-f5d3224e4175", "comment": "Malware payload", "value": "0db33901e4f90e8939dedfe59a50db7dcb618d323605e42f5dc4130ebac3963b", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662267, "uuid": "195fb350-b02f-4335-baf5-5737df3aa461", "comment": "Malware payload", "value": "d500e17e69de9438e905d82a1420524dbde157d1", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662267, "uuid": "6263d759-50e0-4d52-99fb-a62525fd6239", "comment": "Malware payload", "value": "8e120bc6899f277b62622d08d3ad1563161ed16bbba910b3f11ab95c51c29b27a62caf643abe94c3472b488a99966fee", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662267, "uuid": "3f1b5638-c6bb-430a-b360-42227408a9c5", "value": "91F3D088CBB3E4E6EFB3D37866F85E1B461574551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662267, "uuid": "3235defb-d8e8-4cc3-86d5-9804fcef9c64", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662267, "uuid": "c5d24732-0eec-4bb1-b032-3f0ada33cc54", "value": "3072:MmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:VLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618662267, "uuid": "67cb708d-470a-4113-adcb-66af961adeb8", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618662267, "uuid": "2d48e90b-4730-4dd0-8521-156ce10426f9", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662267, "uuid": "e5ca8106-1bf0-4b76-9e2f-f5c4755caf47", "value": "0db33901e4f90e8939dedfe59a50db7dcb618d323605e42f5dc4130ebac3963b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cbbc6299-9f3e-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618637761, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637761, "uuid": "255cd936-bea2-4c20-9ab2-08acd4cef59c", "comment": "Malware payload (Dridex)", "value": "0c2b1c0d939a30f0cdb4038efafdbdcc", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637761, "uuid": "1c8401cd-c88c-470c-8e53-fbcf6fb0d6cc", "comment": "Malware payload (Dridex)", "value": "0f140e2ab18d25cecd8097c04c7597f385537eb057701952168d3bb83db87706", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637761, "uuid": "ba239f0f-8a3b-4f18-9ca4-f40403555736", "comment": "Malware payload (Dridex)", "value": "065acf5b0fcc78b5134661dabcd9a4332c21b8d3", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637761, "uuid": "e7803ba0-8946-4f10-9538-9d6b29d2d46d", "comment": "Malware payload (Dridex)", "value": "ba1014040abb86002ef95873e4e1efccca46380d8860ce5a671d2f6fa90f1c0f1a40cdb0d169969c07eff4be83f82ee9", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637761, "uuid": "62044c60-bfb6-4d0f-ba5d-d35078480a09", "value": "6BF3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637761, "uuid": "0fd9f255-8ab3-4bfa-a8ab-d90a7c590890", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637761, "uuid": "33991a5e-5d93-424a-b16f-450cf1ac5ee8", "value": "3072:umNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:fLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618637761, "uuid": "c6b3e79c-80f1-4a59-ab94-fce3ec7b87d4", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618637761, "uuid": "b2d4994e-6239-4aff-803d-2fe599de2722", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637761, "uuid": "f89f71da-56ab-4f51-958a-e2cae67e0100", "value": "0f140e2ab18d25cecd8097c04c7597f385537eb057701952168d3bb83db87706", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7073158d-9f5d-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618650923, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618650923, "uuid": "028a701f-7382-4892-953c-a6a15783da69", "comment": "Malware payload (Dridex)", "value": "1aba9f54c4cc14585e9a8c0d6c6efbf7", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618650923, "uuid": "f5ef05a2-e25b-4f86-901e-f9d641a87b0d", "comment": "Malware payload (Dridex)", "value": "0f64ef56a622a5568f114068495e56a74af84683c31109898c3ef784de6b39ea", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618650923, "uuid": "009ce774-f7f1-4532-b75c-2e6a9919f129", "comment": "Malware payload (Dridex)", "value": "ed29ffa56857e32c49607802c60e267edf03ccae", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618650923, "uuid": "2f821513-7ea3-48b3-9f83-e3d36e49c1a0", "comment": "Malware payload (Dridex)", "value": "697377f0f265cbddad0737a19af81a417696a126618443c2b1181c7d5c12ad60f27d90a8f0993083356ac797d27f35b3", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618650923, "uuid": "8105f507-4466-4bb5-9674-5bd46bc40106", "value": "3AF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618650923, "uuid": "5d0a81b0-586d-46d9-90d8-f6a7e488199d", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618650923, "uuid": "3902c2ba-45b7-4421-b6cb-458d1b2108f0", "value": "3072:tmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:MLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618650923, "uuid": "6cb18b26-e701-4640-b4d5-000b445a9846", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618650923, "uuid": "263e15aa-9eb4-400e-97fc-8c4a843941da", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618650923, "uuid": "47c5b9ca-90dd-431a-9bcf-67cf9a8adf73", "value": "0f64ef56a622a5568f114068495e56a74af84683c31109898c3ef784de6b39ea", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d8f851a-9fd0-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618700229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618700229, "uuid": "695aed98-cd6d-4b38-8e00-6ad17d6f1ccd", "comment": "Malware payload", "value": "a27cb0081fad6963a6135e56ad093e0f", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618700229, "uuid": "c5f9fe0f-5d90-4239-8325-54fe50b5ff98", "comment": "Malware payload", "value": "0f9c985bc292d240fc73fd5881fbc46d5164b413c67f8be7a8cf8e5bfb8310b8", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618700229, "uuid": "f4076db1-1118-4267-8c2b-d53dfb6abed6", "comment": "Malware payload", "value": "b08caa399ec44cbf02c98148c6ed36a6431a47f9", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618700229, "uuid": "59b7f16d-4bad-4600-b8ad-6161bbe84046", "comment": "Malware payload", "value": "8514884ba655717a4ac2a605803cc5b936b33b9fb9616886c85787ae2b0170c3952e7b846dc83bbc1fd786f1ac316290", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618700229, "uuid": "0271af1b-81ec-4f46-944e-a8916ab08536", "value": "B0F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618700229, "uuid": "aef4fdc3-4ea5-4b90-95f6-e24a8d8e0f92", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618700229, "uuid": "e9f06fa1-0fb4-4db0-bb23-060b7f9ac217", "value": "3072:3mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:WLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618700229, "uuid": "f6bf37ec-106e-40eb-8740-1719c549d1d6", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618700229, "uuid": "b1b6cf1b-764b-4172-9d27-1bd5d33f071b", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618700229, "uuid": "ecc9b4e1-710f-4c42-848c-132c97245b6f", "value": "0f9c985bc292d240fc73fd5881fbc46d5164b413c67f8be7a8cf8e5bfb8310b8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ebbf35f-9f77-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618661926, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618661926, "uuid": "23b04db3-ff85-4bce-89c1-ab29df10b25f", "comment": "Malware payload", "value": "ca3a81f10ff941514e4c3cd0495e8bc4", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618661926, "uuid": "5610c031-9301-42c1-ab5e-470c13b3e1c7", "comment": "Malware payload", "value": "0f9cf1edbd7c434a2760d1bcbcfbd2177e5a7c87c3563eda51ad22acd5b80f3a", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618661926, "uuid": "929a44b2-4f46-487b-871e-c2ad10496163", "comment": "Malware payload", "value": "839d280899f5e5b7f580b33857afc2ace7178f92", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618661926, "uuid": "0195e3a4-865e-474a-bc18-c594fae38c9c", "comment": "Malware payload", "value": "f3bd7c1a6724a96fbedd6c0f7319d616d3e5517e270cf5a99d42620d01579ea9ad2737f80e47e4266f2f753a34485cba", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618661926, "uuid": "1120623b-db6d-42b1-b9a7-07ba3b9e9e80", "value": "6EF3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B49671FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618661926, "uuid": "77bcc6b7-f218-436b-86ba-0e617c9911bb", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618661926, "uuid": "97f4ce53-2785-4f76-a1a6-5d20c4c7cc54", "value": "3072:sA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:s3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618661926, "uuid": "dedac148-c171-414f-8d26-0cddd9f075f0", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618661926, "uuid": "56dc2a7b-cf58-4b99-a6d5-f29b2803c02c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618661926, "uuid": "4de0a6cd-8c4a-41d2-82ab-656ab1692bd7", "value": "0f9cf1edbd7c434a2760d1bcbcfbd2177e5a7c87c3563eda51ad22acd5b80f3a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c5b205f-9f77-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618662110, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662110, "uuid": "92e2a4ea-c3d8-4a77-8d07-e49724f2fd2a", "comment": "Malware payload", "value": "ef87b3329707d93ee90ac94968c87a42", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662110, "uuid": "52c84542-7e29-4fd0-8b85-6b3732af62a3", "comment": "Malware payload", "value": "0ff25cb501abefc740f31b2a648a1716b31027eecfb4f412e862c85be8a00c71", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662110, "uuid": "9d046dc0-0188-4167-a260-22be3e1bb266", "comment": "Malware payload", "value": "6b4244a0b0b92c74a8af9cd4ea1c7b0033d0cda3", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662110, "uuid": "0502f1c3-3c4a-4c2f-8754-91de140e819c", "comment": "Malware payload", "value": "3783f9c038652fe7ab8c5e4cc817a4b3d971fe9496ddb8cbf02a77d6ec897e1dee4125c64493bdf31525213fc578831e", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662110, "uuid": "c5a2523e-83f7-4565-bcd6-7efe2eb26dcd", "value": "26F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662110, "uuid": "9e5259be-8576-47ce-8d3c-f57c0be6ecea", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662110, "uuid": "b07bee57-71c1-49ce-ac92-3a39ae31fa5b", "value": "3072:PmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:OLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618662110, "uuid": "dc85ffee-1149-420f-8929-949e122a9459", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618662110, "uuid": "f1493886-f8c6-462f-8fec-cfaedb48edfe", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662110, "uuid": "99484279-5b39-4865-89c0-19f9e26a70ac", "value": "0ff25cb501abefc740f31b2a648a1716b31027eecfb4f412e862c85be8a00c71", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9f78575-9f89-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618669944, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669944, "uuid": "235cace9-2b9e-40e0-855f-3c59caef10c5", "comment": "Malware payload", "value": "c50ec43024fa57b586990ccc363a632d", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669944, "uuid": "473de14d-46f3-49c6-abb9-42c3c6b77f52", "comment": "Malware payload", "value": "10209b7115c2a72c0725244cc89d84dc16bb375d70fd6da60909c6181cac6fcd", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669944, "uuid": "18f86e11-99f5-4223-a0d9-df4e619789b0", "comment": "Malware payload", "value": "5d4149d29c650ba98202372ab96e4406fc4a4d3a", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669944, "uuid": "0ff8856f-c5da-4bbe-9347-b62ceb1fe6ef", "comment": "Malware payload", "value": "3fdd31284d4050fbe8c21319c1fc93ac3e9c32599b81fb41675b2b34b58e5804af98cb5c476aff4b0eb0c9660674141d", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669944, "uuid": "42f78611-26f4-43ea-8e46-5918ad5d6281", "value": "DBF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669944, "uuid": "e734912d-7b52-49d6-ba10-8717f054e261", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669944, "uuid": "3b8431f9-2aba-4b19-8b84-e4a98ae8205c", "value": "3072:emNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:vLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618669944, "uuid": "8c00d885-230e-4b8a-af2a-8b3df553b30d", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618669944, "uuid": "21e00495-f59e-4532-a58e-75f63122ae23", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669944, "uuid": "d59d4772-0fd9-4471-803e-4570bf6e6709", "value": "10209b7115c2a72c0725244cc89d84dc16bb375d70fd6da60909c6181cac6fcd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4e70fb3-9fa2-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618680700, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680700, "uuid": "fe211e45-1d9e-48ce-b298-e77caa2a3d4b", "comment": "Malware payload", "value": "a9714faf478dc02412b5dcb342a41338", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680700, "uuid": "a9169430-a25a-41ec-846a-3a00767de5a9", "comment": "Malware payload", "value": "102da18b52ad8ddb0d53cfb3d9517d74010d6a258185d7cf4451d4882bfdc314", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680700, "uuid": "c2dcc043-863f-4781-94b9-5436b21e9fd6", "comment": "Malware payload", "value": "63382d45410d191549ad92a735a4ad71634fdff4", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680700, "uuid": "9d3c3e87-b6bf-4c21-aa46-484c1940cea3", "comment": "Malware payload", "value": "95304ca5afbcdd81422c6cee433b94c334b5516b3d055ea62b1c97b4eba352cefcf6713197136b3704b2e50f5a807f18", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680700, "uuid": "0ca76df9-4c6b-45bc-9409-6d108929fd54", "value": "6BF3E00AED9FE988E85C51F1CA4D363EE9713E361B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680700, "uuid": "cc363c09-ecf4-4422-83e4-acd0315acfdf", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680700, "uuid": "b254d321-6002-428e-b74b-fb929056dac7", "value": "3072:PiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:EeAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618680700, "uuid": "f8b03c31-cea2-4d11-9aad-b9bc5803a2b6", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618680700, "uuid": "7065317d-319a-4f96-9f6c-a5295fc4f1cb", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680700, "uuid": "75f33627-de30-44c3-87f8-e2466b9fbe66", "value": "102da18b52ad8ddb0d53cfb3d9517d74010d6a258185d7cf4451d4882bfdc314", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31f88935-9f8a-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618670145, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618670145, "uuid": "e0068bd8-e1e4-44f5-b99e-71639cd84255", "comment": "Malware payload", "value": "5f93129374d8e4772a43ffdaef45d4b2", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618670145, "uuid": "fd5a29f0-f17f-4a52-9141-5b8ddf226317", "comment": "Malware payload", "value": "1083742cf32585bdd4d2c9ec928bd8f6d5cfa13049f3ec5374df321097045c7f", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618670145, "uuid": "b4693727-e4aa-4ab1-ab22-a8c4bd74a2a6", "comment": "Malware payload", "value": "64c987c1cb8b1361f582ba76ae9a8e5342f535ef", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618670145, "uuid": "b9ea3425-c59c-4002-a502-be5849b566fa", "comment": "Malware payload", "value": "ebb2639b75a06d23f87f8fec7209e88f306f2c21ab427581b0b9313a83d363ee7a9f16dcbacbcf8179d88bb73fc04b11", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618670145, "uuid": "2ed5d2c4-9af3-4306-91b6-6bfe402c62a9", "value": "14F3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618670145, "uuid": "ca1761f2-e425-48d1-a85e-0dd42108df76", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618670145, "uuid": "fcb5de00-f6ef-4018-94e5-39c219b1a2c4", "value": "3072:XiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:seAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618670145, "uuid": "aefd9166-5ba4-40bd-8c7f-425be7721ef0", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618670145, "uuid": "d64df0ce-e37e-427f-b104-5b1d83f91c51", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618670145, "uuid": "0b1f75eb-1677-48bb-baa4-06c3779033c8", "value": "1083742cf32585bdd4d2c9ec928bd8f6d5cfa13049f3ec5374df321097045c7f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46d71cbe-9fab-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618684354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618684354, "uuid": "7086611e-4d08-41d5-b49a-4fdb523d023e", "comment": "Malware payload", "value": "fb4a24f35b080330f06d3f874dd11f98", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618684354, "uuid": "94baa4c7-7ff8-44c6-8ee3-c878c5b9ec91", "comment": "Malware payload", "value": "10eb885eef0e48704c227a17d900bac450fea766feb72c699e259786133a33ba", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618684354, "uuid": "e0852aca-8157-4434-b7c4-ffe14bbec7d5", "comment": "Malware payload", "value": "087893f82140390109555aa16d6f96d2ff47f44b", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618684354, "uuid": "ed8d67fc-faf8-40f1-9d4a-aa7246e5c9f2", "comment": "Malware payload", "value": "1ec076515bb1a082a9a8891fb480a0cc9151c17c52f331739854a630ce9acd4b5705e9ef2b73769daf356bee2819ad77", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618684354, "uuid": "143a6bab-4d48-4c0a-80ea-09a62e4313eb", "value": "27F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618684354, "uuid": "5ee95816-ad2e-49df-87ea-148ed7889579", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618684354, "uuid": "faed69fb-2a43-4fb1-9a1a-9a6a4e6f1570", "value": "3072:6mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:rLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618684354, "uuid": "fd61c902-0b93-4304-8107-4c261545a994", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618684354, "uuid": "1641b8d1-7bd4-40e6-a698-af884dada165", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618684354, "uuid": "72141384-d6c6-4d16-98a3-fbe0eec1617d", "value": "10eb885eef0e48704c227a17d900bac450fea766feb72c699e259786133a33ba", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "537c606a-9f23-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618625963, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618625963, "uuid": "2a39a314-5886-418c-aa86-428b99257611", "comment": "Malware payload (Dridex)", "value": "462a716035174cc0c8134cd608b70259", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618625963, "uuid": "9b5e6fba-1421-42c7-aa12-8f99e09a19d3", "comment": "Malware payload (Dridex)", "value": "10fdd09545ed7d1d91dfcc01ed3d35947a70d59b2bc0e0519f0856c5a642fce1", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618625963, "uuid": "2f50da16-ac7a-4485-8d35-f5cad965bf5c", "comment": "Malware payload (Dridex)", "value": "4212da5296a7dcc6085738c5ee26beb0c9666e78", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618625963, "uuid": "b00847fa-41c6-47c7-a48f-68f5bfa4bdc3", "comment": "Malware payload (Dridex)", "value": "0d84d261647eb46fd841942bce8a83f2d35a6505f19601379427c6aaf2954e55bef20478a5c53e0d0c067a188b29ab44", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618625963, "uuid": "132e6d5e-8c89-421f-8ed4-7a08ef4a44f5", "value": "FBF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618625963, "uuid": "af78070f-cc5d-4f18-b4d0-eb2a0fb6c758", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618625963, "uuid": "43dce5a1-28cc-4d3a-b4ba-e557fe68aa51", "value": "3072:ImNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:RLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618625963, "uuid": "8819fecf-7836-481a-81c8-bbd10193030b", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618625963, "uuid": "e339ad14-aaf6-4b08-be83-26551d186a93", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618625963, "uuid": "c86e9ec2-8aa3-4ecd-832c-f5d42530fbcb", "value": "10fdd09545ed7d1d91dfcc01ed3d35947a70d59b2bc0e0519f0856c5a642fce1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ed93785-9f3b-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618636263, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636263, "uuid": "c379216c-8041-469a-aed0-dfe767097a34", "comment": "Malware payload (Dridex)", "value": "6c6f629952eeaa88e4cc910fbacb18f2", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636263, "uuid": "855ee860-c0cf-428a-8793-8cf5fc719d46", "comment": "Malware payload (Dridex)", "value": "1182192e3fd0b290dc0a763205db20d5cff03eef078c52d32cd2e35433265dd0", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636263, "uuid": "27ee78b7-5dde-4cde-bf50-ad63647f4dd7", "comment": "Malware payload (Dridex)", "value": "a664f470e04a1c1d2531eee2914c4eaf71804fd7", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636263, "uuid": "382b9ca0-1d79-4009-bbb8-960fc7ce9f20", "comment": "Malware payload (Dridex)", "value": "39e46790195817b0e3ab4037fe80aa10022352216f2514f5ac2e9d95f9b34a5f57f77cf99ed4ded1ea8464fe72f21b0e", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636263, "uuid": "93328649-a81d-42da-a54a-532fb60f5149", "value": "B9F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636263, "uuid": "b12e96a1-49e8-4759-8e61-703d0f0eb31c", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636263, "uuid": "75638a15-08ba-4d63-bc47-3805faa0e538", "value": "3072:5lpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:5lo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618636263, "uuid": "65a89d9e-a4f0-477d-9e97-f5eb333f5dfc", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618636263, "uuid": "542185bf-3afa-4517-893d-05679e9a2a1c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636263, "uuid": "9c7f2c46-b38e-49b4-907f-9eb9005e3598", "value": "1182192e3fd0b290dc0a763205db20d5cff03eef078c52d32cd2e35433265dd0", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11f5c685-9f58-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618648617, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648617, "uuid": "bd4ee3e6-1de9-46ff-bec4-735bc66e28eb", "comment": "Malware payload (Dridex)", "value": "cdc9c3b9e6ebf988fa3127cdb54c1da0", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648617, "uuid": "4ecdd08f-33a5-4bcb-b6c2-5a6223535875", "comment": "Malware payload (Dridex)", "value": "11a89087d79f31ded5ee25c6ea6c8bcedbf846122bd6f25e9bb73fb44af4d532", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648617, "uuid": "58035ea3-c70c-4743-abec-87fbed1a1b23", "comment": "Malware payload (Dridex)", "value": "4cd499c3ed0305e3943bf92d0027fad9499fade1", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648617, "uuid": "ba32baa1-be3c-4de0-bc19-04604ca7c0c9", "comment": "Malware payload (Dridex)", "value": "355891489ddbd7cef14a216fb5a9950caa2cfad4e388e2b720acd320a92f42699e5e5194e05a0164a53eed09d6dcd73d", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648617, "uuid": "adc3748d-4002-4d71-a1a1-9c21da7e58fe", "value": "B7F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648617, "uuid": "3901a885-7176-48ec-b371-64ec49bab6df", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648617, "uuid": "400e77c0-228a-4419-ad5a-a211ec0f068c", "value": "3072:Zlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Zlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618648617, "uuid": "c98459d6-554d-4e81-b4f7-75f270f0e098", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618648617, "uuid": "4f3ef1f6-37e5-47a7-bf9b-4391ec177f0d", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648617, "uuid": "ee752a06-958c-4cb2-92a0-d7807ebd4acc", "value": "11a89087d79f31ded5ee25c6ea6c8bcedbf846122bd6f25e9bb73fb44af4d532", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01c9cf9b-9fb2-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618687244, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687244, "uuid": "ab76b373-6119-4b80-a6de-d73bc7b055a6", "comment": "Malware payload", "value": "b86e3bc9a1afe87f53d8fccd7b2e183b", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687244, "uuid": "e7cf0f87-f2dc-4fc4-b2d5-5453ddb5a8dc", "comment": "Malware payload", "value": "11f45a7edd7e8574bc6b09bcd314379b17e8c333e33035c0376cc0f3b6920df1", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687244, "uuid": "97b1baa7-5819-4b9f-a453-d54392dcb7ca", "comment": "Malware payload", "value": "a2812dd7a5d0d859c3b7f0e612e5d49bee12206d", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687244, "uuid": "41ece55a-be79-472e-97b6-89ae69c24031", "comment": "Malware payload", "value": "88735d8d19f1563e77c379f5be35dfd5a49e19dddadb3d439777bebdcd23dee209f358e0adbf7b39f0d7480318f48b85", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687244, "uuid": "24e6b328-9127-476c-b3a9-38887231b191", "value": "D4F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687244, "uuid": "804121a0-5ff8-40b1-b52c-dc2cf3d8c95b", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687244, "uuid": "f143476d-9cd8-4399-926f-e66ad160f2db", "value": "3072:Alpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Alo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618687244, "uuid": "8db1d82e-2030-4bae-a8a1-cb7ae4813ac3", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618687244, "uuid": "168e40bd-2340-44d5-a288-7eb9648f3f68", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687244, "uuid": "a2f6e14a-42ca-4bc2-a4bc-501d243f60ad", "value": "11f45a7edd7e8574bc6b09bcd314379b17e8c333e33035c0376cc0f3b6920df1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57d77f97-9f93-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618674074, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674074, "uuid": "0cedb1b0-6514-47d9-8dbc-27d368803b70", "comment": "Malware payload", "value": "a4d8b231941362448cf9ed6a6b589236", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674074, "uuid": "93621948-43d1-4549-9f39-eeb201cc6331", "comment": "Malware payload", "value": "128188aef54f76e96018f2ba0fca8f0f9d7e933e38bd89d84de3443508d0e21c", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674074, "uuid": "eaa05843-895a-4d05-ade9-7895fa4b1c0a", "comment": "Malware payload", "value": "5bebe1c64f0d2db9e7046b79eabda48f75977147", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674074, "uuid": "c6c81f16-a1e9-4ab3-ab11-51f15757519c", "comment": "Malware payload", "value": "adffcf764299ae735e9c376e857e0d951824ee31c21da9cc40ecc783c3956e1291a444b8d3b81e9e9c4f4c267eae7dcc", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674074, "uuid": "0c244a2c-d59c-4518-abd2-d68df996b0fb", "value": "6CF3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B49671FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674074, "uuid": "c893f5a8-fdfa-4312-ac56-8401e22e2b8f", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674074, "uuid": "b8f66fb2-876b-4f97-909d-30697a504a08", "value": "3072:8A6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:83J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618674074, "uuid": "b2b1fbef-a62c-4cc2-9fd1-03c3bf1af8d0", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618674074, "uuid": "6998561c-bd96-421e-8f44-9b2f7b68560f", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674074, "uuid": "7d188824-bcd4-4cc7-adad-44656d30cb7c", "value": "128188aef54f76e96018f2ba0fca8f0f9d7e933e38bd89d84de3443508d0e21c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "461b808e-9fa8-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618683064, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683064, "uuid": "99c51ee5-8994-4a4c-91a6-fba5ebf36d8e", "comment": "Malware payload", "value": "73412217c129f855518dd1845bc494aa", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683064, "uuid": "04ff126f-3431-4e9e-b0d9-a2040573b948", "comment": "Malware payload", "value": "129649e1ddbc5affac9b5bd15901c830cdbeed91d5bc624c96256a17ca0293d3", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683064, "uuid": "1644236a-6e92-4535-8efc-b250405ac77f", "comment": "Malware payload", "value": "ff03989bc42a9e435e200bf2670889071f80634d", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683064, "uuid": "91ab906c-a462-455e-923e-0f2e8dcdc4d4", "comment": "Malware payload", "value": "c66cf77a922e37d478add1cd3dae651650934f383a6a847f5e5b2212ece1ec366e06e2d11aca11178c774d66e15698a1", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683064, "uuid": "ab27a7d5-7a47-4018-ae9f-ed2645c1cd6c", "value": "6BF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683064, "uuid": "6efbfe96-5179-42b1-ba25-77c7a42076bf", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683064, "uuid": "219695b4-f4df-43b0-bd39-2832c39fda90", "value": "3072:Ilpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Ilo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618683064, "uuid": "9884cebc-6bec-4133-9663-64bef0e55d06", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618683064, "uuid": "da9c8c21-5d65-4697-bcdc-6ef65e40f67c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683064, "uuid": "d000fc1b-5cb8-4185-b122-2f1591e93f83", "value": "129649e1ddbc5affac9b5bd15901c830cdbeed91d5bc624c96256a17ca0293d3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a24a3d8-9f4f-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618644765, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644765, "uuid": "6094ccc3-8d3b-4335-bf52-453a128f7b29", "comment": "Malware payload (Dridex)", "value": "946143651c1aba54b189abde5ba629c4", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644765, "uuid": "2b8b7dda-b324-4760-ad3a-a1e1c6fb3587", "comment": "Malware payload (Dridex)", "value": "132fcefcf0bd0292fd351fd5ed86a6712a36eb80d01d92a8f9e0699d2d64baa0", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644765, "uuid": "90c298cb-0878-4117-86de-05e552bcdd12", "comment": "Malware payload (Dridex)", "value": "544a038cf215cdd1134a5bf854b469be3dad1129", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644765, "uuid": "86376eff-9ddc-4bc9-9829-c1e3f98595af", "comment": "Malware payload (Dridex)", "value": "cb0e4179824f9203165b9a60c18002922387e6d97474ec0e01a4c9f0c94b4d6319a4d7d64514aa59488fc33620366498", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644765, "uuid": "cf1c010f-32b4-4813-9776-18c8ac852d84", "value": "56F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644765, "uuid": "5c33b904-51cd-4507-b6ea-be8275249156", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644765, "uuid": "87907452-bd09-4cea-806b-340b274b22cc", "value": "3072:xlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:xlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618644765, "uuid": "f39834b7-927e-4404-b541-411fec4cc18c", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618644765, "uuid": "513a5cb3-de23-4d9c-8e0d-c13ca948859c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644765, "uuid": "aeebf66e-23d4-4891-b50c-2e6b89c7ac75", "value": "132fcefcf0bd0292fd351fd5ed86a6712a36eb80d01d92a8f9e0699d2d64baa0", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20ed5d5e-9f48-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618641770, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641770, "uuid": "30d282fd-e1d2-4bd3-a5fe-865785e99eff", "comment": "Malware payload (Dridex)", "value": "82c4b2c1e49917c748b7c5018270fcf5", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641770, "uuid": "fbcabbf0-0e42-47a4-8104-2045241b83db", "comment": "Malware payload (Dridex)", "value": "136cb8b51a9b55be98852b5046d70ad985e77fdbe7b334b187c6f24c58c21b52", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641770, "uuid": "83568631-efec-487f-aa42-b25178de26cc", "comment": "Malware payload (Dridex)", "value": "16d813334acd39999a58177e8d677d1bf0c3e36c", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641770, "uuid": "c2cb5ae5-0426-4398-a8f0-b54ed256d904", "comment": "Malware payload (Dridex)", "value": "1b6a5e0b176f250c8d6290e1af0b9f30034de2cc2d4b41ea13e42c56aa0d03dfc97e8f0a6651366733762e2e9803c60e", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641770, "uuid": "2cd3168e-c185-451f-967d-073ab2e19914", "value": "1BF3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B49671FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641770, "uuid": "e1a26f8b-6aee-4329-a1cd-4177c0980c6f", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641770, "uuid": "ffbc2b94-e96a-4e62-90a1-39dd1b91ff15", "value": "3072:RA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:R3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618641770, "uuid": "4948ab41-e10b-4703-b289-4e98f6ec33f5", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618641770, "uuid": "4fc02e63-9f1d-45dd-a22d-81bf41b5675a", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641770, "uuid": "836c3b37-54b5-4187-8632-0584c72329b1", "value": "136cb8b51a9b55be98852b5046d70ad985e77fdbe7b334b187c6f24c58c21b52", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce837d0b-9f2a-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618629176, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629176, "uuid": "f1741387-0066-4660-80c0-c6a212416182", "comment": "Malware payload (Dridex)", "value": "5de5c2422f72a1a6984d0414d6c3936f", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629176, "uuid": "8802c9fb-a524-487f-8899-0d86271dba19", "comment": "Malware payload (Dridex)", "value": "1378e3621ef5ef0ea3989864c1ed14cb92c508ebf73cb4e98bff3c6a75ccfb4a", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629176, "uuid": "9935aa2e-c06a-44ef-81f7-9f90953e39dd", "comment": "Malware payload (Dridex)", "value": "c3ef4f53d1261a04385cdc43fec983a4028bd650", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629176, "uuid": "7eea2d13-8c31-4b0c-8e28-5ad6c95b7616", "comment": "Malware payload (Dridex)", "value": "f07ee3768c31c830c9c3997e477ff7e83966f4616847e9733af80342199fd5d1ac299f874b1b5f6dbe678a5ac91a625e", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629176, "uuid": "22377359-df02-4556-a175-2505f8f587a3", "value": "DCF3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629176, "uuid": "85298902-f68d-4a38-ad8a-888d4f1f5d0c", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629176, "uuid": "a25486c9-867b-4a12-9706-798058563345", "value": "3072:CmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:TLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618629176, "uuid": "66531193-74f1-4c61-98ac-25f433ff0f2f", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618629176, "uuid": "4646c024-2168-4c17-8f38-875a7ae943a9", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629176, "uuid": "8b1570ba-6853-4cd4-bd38-dba3e8074da1", "value": "1378e3621ef5ef0ea3989864c1ed14cb92c508ebf73cb4e98bff3c6a75ccfb4a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bff9d76d-9f14-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618619703, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619703, "uuid": "b37673a9-4467-4a08-8f7d-d3948ab644f4", "comment": "Malware payload (Dridex)", "value": "feae37bf27d7aece79e3d9947d1f3dfb", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619703, "uuid": "45f9f342-425c-4412-9bf3-6fee79f97407", "comment": "Malware payload (Dridex)", "value": "13c2a25fb7888368d32f9c77b116490fff3ed35d74036ddab28d21d5b65c30cf", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619703, "uuid": "e9b30953-51cb-4641-966e-250a6d5ada05", "comment": "Malware payload (Dridex)", "value": "1e19859adf427f80fe69861092c008e52752679d", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619703, "uuid": "bb520788-5cbd-41d1-954e-c765ea9390ef", "comment": "Malware payload (Dridex)", "value": "fc174d176c0fab37e2b0ec2d0da0b668035eb8df849708e770ec13c76e90b3a1c2df5a492c1b5d92f5cc070901fe841d", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619703, "uuid": "11375b01-94d4-4a50-b65c-ad87f1ef0964", "value": "FCF3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B496B1FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619703, "uuid": "28eeb2a9-f2be-4a8c-9cc2-b07000443dd8", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619703, "uuid": "23e1f493-e645-439e-9b68-d46cb41a20c3", "value": "3072:EA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:E3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618619703, "uuid": "bb730c56-8f82-4f25-884d-1d006730a8a3", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618619703, "uuid": "63ea9c72-8e3f-47c9-b4a4-179023636aa2", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619703, "uuid": "7c9c4085-1665-4efb-8e70-f3ba8da0b9fd", "value": "13c2a25fb7888368d32f9c77b116490fff3ed35d74036ddab28d21d5b65c30cf", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34b203fb-9fa2-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618680458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680458, "uuid": "35613c51-1808-4139-83a7-f9ee1dfe9c95", "comment": "Malware payload", "value": "8ffa11071608a93e64a85426abb12b90", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680458, "uuid": "62077e58-67d8-4c04-86b1-80d444099a6b", "comment": "Malware payload", "value": "1457fef133a5a4c483a8b0b1d0be0853fc7651eb96dc75cb86cbd122a54555b0", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680458, "uuid": "0ec096b3-38cc-4d24-91fb-f5ac0185ba79", "comment": "Malware payload", "value": "068854c6ee6b5f716e4c7e3256006de4b97d1ec6", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680458, "uuid": "b9d61181-b3b8-41fd-ade9-185d70d9030e", "comment": "Malware payload", "value": "5f0beeb21c27f4e8059886ebefd2fd13a8fe1413a532b32ef5c2a0443da60be3a1c457f14f8760b7b80972f2546d5f22", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680458, "uuid": "049bb196-b472-4bb2-9560-40cb7549c367", "value": "24F3D088CBB3E4E6EFB3D37866F85E1B461174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680458, "uuid": "ba2a10e4-51c7-4029-8630-bbb428ab0aad", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680458, "uuid": "a3944533-fa4c-4468-a711-c188da66efe8", "value": "3072:DmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:yLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618680458, "uuid": "0bd1fefb-3404-4b35-be48-7db3e652ba85", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618680458, "uuid": "60f258b6-a85b-426c-82aa-497c5c50e7dc", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680458, "uuid": "27e37ecf-5c21-49b1-b339-c385c5d2f50b", "value": "1457fef133a5a4c483a8b0b1d0be0853fc7651eb96dc75cb86cbd122a54555b0", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "afb5373d-9f4e-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618644586, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644586, "uuid": "c7ebaa6b-2e65-4c6e-9b1c-2ef312b7724f", "comment": "Malware payload (Dridex)", "value": "d055a3cd3c2009b6af58d1ac560ec5c4", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644586, "uuid": "1bd2ace0-6ce8-42ee-ad8e-65f6602e9b1c", "comment": "Malware payload (Dridex)", "value": "146717143de5676a1a5920cb886198082ec78da17f453f886eaed297918538b8", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644586, "uuid": "3a6c98cb-2d44-4736-b7b0-2d27e4467837", "comment": "Malware payload (Dridex)", "value": "892c2373d943d07c6462a87858d42dad7c241d9a", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644586, "uuid": "c13de9c7-2e83-43f8-9a20-08914bc4765a", "comment": "Malware payload (Dridex)", "value": "5d183b532ee962f8d058614d32d901f2cb9c1c557c8c37c7b0b5e94542b84c6ed27e0ba98b55580b7144210050af507d", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644586, "uuid": "d853aeaa-bc9b-449f-9fbd-da82a9a21ed3", "value": "5CF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644586, "uuid": "4f21a6e1-24c2-43b7-b6ab-1cf57a395e9c", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644586, "uuid": "10e373cd-7807-4930-a22f-224eb06e001a", "value": "3072:LmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:aLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618644586, "uuid": "a54877b2-91c6-47c3-8e28-d45d82a1850f", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618644586, "uuid": "362160c2-4d98-4967-8171-eb6a7f1fec6f", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644586, "uuid": "9f24afc3-0026-4fc3-93f0-ca521773638a", "value": "146717143de5676a1a5920cb886198082ec78da17f453f886eaed297918538b8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "409f44b6-9f80-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618665875, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665875, "uuid": "2ce70ac4-7e42-4d08-b8df-86cfbe779ad8", "comment": "Malware payload", "value": "b1f4393e81c45b6a6bc2f1debe633dfb", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665875, "uuid": "787309c9-6575-439c-bf28-e7b3a34e5823", "comment": "Malware payload", "value": "146c1696e342608ec580dd24d515fc57bd1ed215e9299d2b997ef4fe687f3e2c", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665875, "uuid": "1e2a911c-4ac6-4951-8b7f-133bedf07e5a", "comment": "Malware payload", "value": "94cfd92e4b7273869b7551ef5a253b7e7baeb5ff", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665875, "uuid": "cd648bbc-facc-49ae-b203-700efda7966a", "comment": "Malware payload", "value": "c5cd11e747df8877c034f3a7aabc4fae89b1b7686261371e5777842a477ea92355f311d135e7ec8ba38b33288f7d374e", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665875, "uuid": "35cc3a28-3410-4e7b-ada4-33c368ec08fd", "value": "77F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665875, "uuid": "b6984ae7-b727-4cf6-af27-0c54c6f0ecab", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665875, "uuid": "efbc0819-6cf6-49f6-8e9d-db6ac8d51a03", "value": "3072:3mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:WLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618665875, "uuid": "df876dfc-3fe4-46bf-8d00-727ec456fac0", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618665875, "uuid": "de30ef39-a81c-4a40-be2e-d1aee02115d0", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665875, "uuid": "57528cc0-0f15-4140-b406-24172635561f", "value": "146c1696e342608ec580dd24d515fc57bd1ed215e9299d2b997ef4fe687f3e2c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4f141ec-9f48-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618642126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618642126, "uuid": "b200608d-e6d4-4904-ba58-8b41571aebbe", "comment": "Malware payload (Dridex)", "value": "a72587708094e50a3772fbb50b79f5af", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618642126, "uuid": "11ba8e8c-3e3c-4c3a-b682-0a549def6462", "comment": "Malware payload (Dridex)", "value": "14ac795826e8ecc03d8b218148e8482d526063be05cd06a272b10991d42527b6", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618642126, "uuid": "4178a338-c475-4411-9879-cd1bd7b6b844", "comment": "Malware payload (Dridex)", "value": "a185ba65100d69a7882351e6223ee115bdb09fde", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618642126, "uuid": "b251b4c0-8f31-4532-860f-c8909578ffa9", "comment": "Malware payload (Dridex)", "value": "ddef716e0c894fe0d29d96d53e33aa72977b5cc96dc6268735f9af33ac167c616e3f60b27b7ca9b5830f7843aca40f3c", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618642126, "uuid": "de632db5-1742-41da-a6cf-475e9cf6b3f0", "value": "41F3D088CBB3E4E6EFB3D37866F85E1B461174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618642126, "uuid": "cc4ba361-ea71-40c6-995d-8bbbef416a3f", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618642126, "uuid": "8620f883-2f9b-47c9-90f4-c6c287b389a3", "value": "3072:0mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:dLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618642126, "uuid": "a5514226-4763-426b-ad47-bd79f5765e24", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618642126, "uuid": "b20a7df7-b8d7-4900-8f6c-46e4c226bdf6", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618642126, "uuid": "129f41b0-2481-457d-82a5-031ec0ad6a6f", "value": "14ac795826e8ecc03d8b218148e8482d526063be05cd06a272b10991d42527b6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7889b786-9f35-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618633756, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633756, "uuid": "79f9c0f7-867b-40ba-a315-2e4dbaa0a9f1", "comment": "Malware payload (Dridex)", "value": "0adf3d7acb9c48956bbd5943d9d725f6", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633756, "uuid": "c50c2357-8313-46ce-9382-a9e24d673a48", "comment": "Malware payload (Dridex)", "value": "14ddac39f452f7f269ffe029cb9902db1f7d9556d8092f9012f6a343937abee0", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633756, "uuid": "a01afb1e-c6b4-455c-99ba-edb7d54279de", "comment": "Malware payload (Dridex)", "value": "9aaf65efbe174dbb305b1dd1d73ecfa8f4d2e980", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633756, "uuid": "088e331e-7329-4bbe-a8c3-add20915ad42", "comment": "Malware payload (Dridex)", "value": "b9c3da5f46ea52335b700374cb8fc998239205068d6725a837cac5fd48e61dda7c937693afa777deb1bd21a9ecc54c15", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633756, "uuid": "bef4cf0b-8a85-4aee-a5d1-fc69c7f6bc19", "value": "E8F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633756, "uuid": "c3b58b2a-b4eb-4676-9748-990cefb98dab", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633756, "uuid": "d3a32cc8-167a-409a-b406-bad6af1d2064", "value": "3072:mmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:3Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618633756, "uuid": "7da6e06c-4dba-4314-b776-b444330771e1", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618633756, "uuid": "12c1fb72-e242-4f90-82fc-9c9ec34efe64", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633756, "uuid": "d9476f49-308a-43bf-9892-1dfc887ef0e0", "value": "14ddac39f452f7f269ffe029cb9902db1f7d9556d8092f9012f6a343937abee0", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a1810e9-9f14-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618619532, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619532, "uuid": "86642ee8-736e-462d-8eec-590640fdc023", "comment": "Malware payload (Dridex)", "value": "2bf31cb426c22d024830c198811e5bcb", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619532, "uuid": "3a16034c-764e-4439-b690-3816071e5597", "comment": "Malware payload (Dridex)", "value": "15a6166868e44bedf9eadc3a5630f61d6aeb35b244a3bee45b66ee6d20ef1e30", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619532, "uuid": "eb23f785-cae1-49d7-87b1-3fbfc5b36f26", "comment": "Malware payload (Dridex)", "value": "b2a2949025725c50f1af80448413bbe2442a0817", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619532, "uuid": "3c2c82f1-f745-4a4d-aaa2-0c01497850d8", "comment": "Malware payload (Dridex)", "value": "81e70eb11eccfc71a63b5fbbac6f5677797bb18c10258c23836fa86296325a639326d80fa0cc2891c2d345c07f9e3b4f", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619532, "uuid": "839a116b-a7fd-47da-ac35-a0c4e91610a8", "value": "B1F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619532, "uuid": "37568c74-eff4-4f29-81d1-de8f374776af", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619532, "uuid": "9f460e9b-1fcc-4663-a78b-d10b58898be9", "value": "3072:QmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:5Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618619532, "uuid": "9f7522a5-24f6-48d7-bc14-a5b725e4ef3d", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618619532, "uuid": "df6700b2-c884-4832-a967-e7f9694ae043", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619532, "uuid": "5e47bb40-7c5e-419a-9ef1-141a891dbd28", "value": "15a6166868e44bedf9eadc3a5630f61d6aeb35b244a3bee45b66ee6d20ef1e30", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd5e8bbf-9f3c-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618636986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636986, "uuid": "a10626b4-f20d-4b95-a00b-e08076181e6e", "comment": "Malware payload (Dridex)", "value": "0cc6cc39d8c396deb863299a2fe00016", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636986, "uuid": "ce1da2e3-81d5-4f67-9999-b5e1fba5ad0a", "comment": "Malware payload (Dridex)", "value": "16142abe4f043abf74a7b7f16d6961f8e6bdfb51a6b21c50b8e875acbab97876", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636986, "uuid": "76cac906-3a17-4b0d-9ecd-4c060eae2bb9", "comment": "Malware payload (Dridex)", "value": "283a75a22ae4183457634e7b7b2e3bf150ef8228", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636986, "uuid": "d8c71c22-318c-433c-b9a5-449c85250932", "comment": "Malware payload (Dridex)", "value": "64c84718cfaed3aaad9964b8ae988943674a00a5fa80649d92a6708fc12564a8608eebb58dac20e381e8fedd82ed7270", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636986, "uuid": "ba5fbaef-e794-48cf-9459-fcb4c2361bd4", "value": "E3F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636986, "uuid": "71973441-607a-4f90-94a3-bd9986538c22", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636986, "uuid": "b1c34f43-236f-4ed9-8dfe-6f8ce49e00a7", "value": "3072:xmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ALc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618636986, "uuid": "77bab966-452c-422a-bf75-cde307d3236e", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618636986, "uuid": "28a4b27f-c20a-44ff-b06e-c4a73335d946", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636986, "uuid": "5fb80b39-2076-444b-9d6a-9585bce64e62", "value": "16142abe4f043abf74a7b7f16d6961f8e6bdfb51a6b21c50b8e875acbab97876", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "410bde49-9f88-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618669312, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669312, "uuid": "96a712a4-d237-489a-bc24-493d4509af21", "comment": "Malware payload", "value": "279595767befff39e46d31c99d40ff12", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669312, "uuid": "35676ca9-75f0-42b6-a3df-b31cf39e99cd", "comment": "Malware payload", "value": "162e24a59c8a7ba9639417dafb98048adfe6eb813395ef8ae212be4ad6a1d8ba", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669312, "uuid": "bb202123-dd04-44fa-a5cc-8cfa76bd26be", "comment": "Malware payload", "value": "f98b1dd897c39c2816ae1d2207d734651f1baf5a", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669312, "uuid": "16c9c202-4eba-4b4f-8a58-36b82f5b1520", "comment": "Malware payload", "value": "7ef0431bc3275ae29d6fe8277c48f367a2ab6e511f5dbd6d5bee74138b9ecbefda3b692de29ee5c9ab9c5dc1278cf3f3", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669312, "uuid": "8c0be5ee-014e-43b2-bffb-b8351a0ce8ec", "value": "F3F3D088CBB3E4E6EFB3D37866F85E1B561174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669312, "uuid": "556607ce-2367-462d-a50f-00b11229d807", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669312, "uuid": "8bfc0691-3dab-42b6-96a8-2b87edaa4e80", "value": "3072:5mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:oLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618669312, "uuid": "19ccf6c2-4a54-434c-9bfd-c5b6692ca71e", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618669312, "uuid": "23dfe1b0-0d29-4047-93fe-81051ac4ca5e", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669312, "uuid": "4790b898-d3a7-4b97-bbec-38803dc5fd25", "value": "162e24a59c8a7ba9639417dafb98048adfe6eb813395ef8ae212be4ad6a1d8ba", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5639f08-9f72-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618660112, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618660112, "uuid": "4202602d-a3e7-46ff-9e82-ad08ad03a37b", "comment": "Malware payload (Dridex)", "value": "5039ae82a31600eafbc60f7f9605eee2", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618660112, "uuid": "796d7b9d-9d26-42ae-9e86-54a009045bb7", "comment": "Malware payload (Dridex)", "value": "165f16d1856f3d882ac3b7dd30d1e0218d101968e643c1106e9043cd50efd4e1", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618660112, "uuid": "78fc81d4-1e42-4c01-9ae5-1b9fd52cd822", "comment": "Malware payload (Dridex)", "value": "191a81a347353559eca9fa37cd5cc1f5762eca37", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618660112, "uuid": "cf7680cd-d276-4e43-a0dc-628f2b94e59e", "comment": "Malware payload (Dridex)", "value": "5eb379ed7e730fc3eb03c6e25508ff56bd81e996f54e6415b0f0c1b150b5c263706940b34dc2f6ac53be4c0c7a02d75d", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618660112, "uuid": "d3c0fb11-c001-410c-a4a2-bbf6c72a1d34", "value": "79F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618660112, "uuid": "c9b66490-1f94-4d57-88fd-f5b3551a167c", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618660112, "uuid": "35e7f3e7-f3b3-4483-a64f-c73069fc9b9a", "value": "3072:/lpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:/lo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618660112, "uuid": "7826f981-e699-4568-a8f0-24249afe4de1", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618660112, "uuid": "466eb8a7-728b-4746-b2ae-13340240a49d", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618660112, "uuid": "9ff8320b-81e4-47f0-867c-7f8a81d8daf1", "value": "165f16d1856f3d882ac3b7dd30d1e0218d101968e643c1106e9043cd50efd4e1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff310411-9f58-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618649015, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618649015, "uuid": "067af7dc-e2bd-4ab2-a5f2-b6cd3b7f90b1", "comment": "Malware payload (Dridex)", "value": "b27bb9356005f90bde954acb52b33278", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618649015, "uuid": "07ca9d70-ce10-4d77-9ed0-499c192607d7", "comment": "Malware payload (Dridex)", "value": "16da1c78f6361bd30f6f9f69fe4bd640cbc427283e350057854d042508f95ef6", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618649015, "uuid": "a2fa06d8-dc08-4804-9d7a-36c384eb851b", "comment": "Malware payload (Dridex)", "value": "5c28e9a6c729a61c8689da1a9b4d3b55b52af9ed", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618649015, "uuid": "72ae4098-5cc8-41d5-b176-7bc16a9a3759", "comment": "Malware payload (Dridex)", "value": "476de900ae0c135836aefe78799b422d698b0844e359ecfc3ba2b075ecbfc0a6e9e72f5d67537466a06a61f78f1aae17", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618649015, "uuid": "e110ba92-aad8-4c60-b536-390f71bf5245", "value": "C9F3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B496B1FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618649015, "uuid": "1a918173-577f-48d4-8a93-587f79914d51", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618649015, "uuid": "b1dcf3f7-ba9b-4506-ae2f-732aa92fe4ee", "value": "3072:BA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:B3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618649015, "uuid": "c59d7e41-f44b-4ad2-992c-a597b0f3ee8f", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618649015, "uuid": "e349f4da-4a97-4d3f-8d28-9f8c3d266c40", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618649015, "uuid": "63d11a28-2054-49af-b001-6910f7ab21ba", "value": "16da1c78f6361bd30f6f9f69fe4bd640cbc427283e350057854d042508f95ef6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "469fed46-9f70-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618659013, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618659013, "uuid": "f419d2f2-64bd-4ab5-a4d3-9982a9a6a88e", "comment": "Malware payload (Dridex)", "value": "d4eac0325eba9f1fdf39071043a0b733", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618659013, "uuid": "11512800-d5a7-4999-9963-7eaac2d65357", "comment": "Malware payload (Dridex)", "value": "17c4dc378b42cd1ac1fd85fcdcdef19be7ab978f4b97fb07aedb41efd75056b5", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618659013, "uuid": "e1c6038d-46b8-49e4-aafd-a6abb1ef4265", "comment": "Malware payload (Dridex)", "value": "70d8ed72dddf1ffeccdda0d215b2ca8fdaec9dc5", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618659013, "uuid": "f4041e10-c3a8-4ecf-92d5-f01df3c9d7e8", "comment": "Malware payload (Dridex)", "value": "df1625f6e7433f06b29d98cf8cb281e4d1d80ad302ebaad7456585deee3d7164699fc43c72297c32f3e9f6f446255081", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618659013, "uuid": "5ff8725e-d7a6-40f1-ac93-b1fdad8db29e", "value": "71F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618659013, "uuid": "7a18d803-e501-4f22-b4bc-5bcfb920e2ca", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618659013, "uuid": "2feebb87-f5ff-4b15-ad37-fbe499c6a3d4", "value": "3072:lmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:kLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618659013, "uuid": "25c68b32-cfc8-4ea7-8926-c7f1f29d37a4", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618659013, "uuid": "edde8b4c-6dba-47e6-8dff-1c89827019d2", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618659013, "uuid": "7fb0f9ff-f530-4110-a186-81ec1c9c4090", "value": "17c4dc378b42cd1ac1fd85fcdcdef19be7ab978f4b97fb07aedb41efd75056b5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9bad329-9f13-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618619263, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619263, "uuid": "5a789d56-ce77-4fe6-8ce1-db7e346d05c2", "comment": "Malware payload (Dridex)", "value": "37753b372460a5b9df620fd228d4096d", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619263, "uuid": "e7d38fed-0602-4a95-8f05-5541374144a1", "comment": "Malware payload (Dridex)", "value": "182e230c4c2d9fc82067c8dbcdbbc4552b087d4781665c906a8c88a1cacbed81", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619263, "uuid": "858346f5-700b-4ecb-a0a7-05bbc8660655", "comment": "Malware payload (Dridex)", "value": "9a5629cd7d6c01f361f8306dc2a350e7afd4cb1e", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619263, "uuid": "0556c53e-0ac4-43b5-9088-5035b426f9e0", "comment": "Malware payload (Dridex)", "value": "10a7275cbfe3eedfe38112ccb8e896f18940284d33a08935999fd8d568ffee957814f63e4ee8bb0dffd84b8e5c7f1460", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619263, "uuid": "fdd4da36-db69-46c5-8d24-04897a091186", "value": "43F3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619263, "uuid": "e0ec38f1-05e6-4c5a-a28f-9b95c4b5c82e", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619263, "uuid": "a52ec943-0fbf-4c96-89e4-92af5af383f9", "value": "3072:RiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:ieAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618619263, "uuid": "1184ff4a-f16f-426a-af4b-52f491e4ff94", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618619263, "uuid": "f2799740-0694-4675-a160-c2770298c023", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619263, "uuid": "1e4c56aa-0704-4d90-b248-dab880c29e15", "value": "182e230c4c2d9fc82067c8dbcdbbc4552b087d4781665c906a8c88a1cacbed81", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "573a66bc-9f14-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618619527, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619527, "uuid": "a6421af0-5158-4660-b484-4f7db062762d", "comment": "Malware payload (Dridex)", "value": "0434d37b6dd55cb633ad088b903f0f0f", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619527, "uuid": "af5b0532-875d-4943-abeb-916f6d1f9f99", "comment": "Malware payload (Dridex)", "value": "199a603e6369f1a50b4e83c9c92177192867092a66b34943f9f1085d108e8804", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619527, "uuid": "47f7d9b3-cac3-4c41-b7d4-5efa02755f55", "comment": "Malware payload (Dridex)", "value": "cdb39ecec8f543a7dbcd031d7b73b3a9ad1986da", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619527, "uuid": "cf5558c0-d3aa-4027-9792-ae4b760f611b", "comment": "Malware payload (Dridex)", "value": "29334c008a3c09bf43804f97edf1ef7055126f72140b0cc9d1c381aa140a72005bda2352d56a04306017e074533381eb", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619527, "uuid": "c7b08262-b3d9-4a8a-980c-0ff28e95dc2d", "value": "4DF3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619527, "uuid": "6e0e5d02-8356-4dfa-975e-e8b292e7a2aa", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619527, "uuid": "672210ae-ffb9-4086-b5a6-32862806b357", "value": "3072:yiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:xeAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618619527, "uuid": "2351b5b3-c3e1-43c6-8358-8f02cad9029d", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618619527, "uuid": "8da62ab3-710e-4a3b-9007-98b59b37d4b8", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619527, "uuid": "c7a7c27c-544d-4b5f-9352-ede58b4b1026", "value": "199a603e6369f1a50b4e83c9c92177192867092a66b34943f9f1085d108e8804", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78bedb08-9fc4-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618695175, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695175, "uuid": "e22eef1f-0cf2-46c4-9738-0760227875f9", "comment": "Malware payload", "value": "f871f78aaf8c906213c8e780bfc71616", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695175, "uuid": "e6294237-7211-467d-a08e-dbb0ccf0f258", "comment": "Malware payload", "value": "19ccdffdaf2b1c7818b90a454c781bb443a129f483d3cdbfe0969e3c36b32e1f", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695175, "uuid": "48f537a3-2983-4570-bbf7-c67e0d4fb5cf", "comment": "Malware payload", "value": "1cd3d25b25dba6fe2805e7214476de6c0a454e72", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695175, "uuid": "c10ed361-bfa0-4a16-9c31-12a15d946422", "comment": "Malware payload", "value": "d946fc54c1fd1b8afc2624ebe77fcbe44578d9fe531445f945d3ad92f196e5e0884483bfc1458ed4064631e7e5c8f119", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695175, "uuid": "95d9b334-0ed0-4a5a-a327-8e2362e37f56", "value": "E0F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695175, "uuid": "c5393f58-9f80-4bbd-8540-16a2912b4c2d", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695175, "uuid": "eae49a67-fb96-4363-92e6-cc4190f02368", "value": "3072:PmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:OLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618695175, "uuid": "4de6d12b-3621-4723-9977-6da0b96e60bf", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618695175, "uuid": "2975a512-17be-4dfc-884a-af8e7673635f", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695175, "uuid": "8cb56a52-4678-4d66-bda5-6e65108fb743", "value": "19ccdffdaf2b1c7818b90a454c781bb443a129f483d3cdbfe0969e3c36b32e1f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "965482f0-9f8f-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618672461, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672461, "uuid": "976c9411-7471-40a0-b9bb-cd6b7fbc6040", "comment": "Malware payload", "value": "980d52090212d2902fe989ca554ab202", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672461, "uuid": "5a323cb9-73e3-4f10-af6a-a5db7e2b7912", "comment": "Malware payload", "value": "1a947ce289307f64bea2b24fcc76fb972cfd2df30249992b21036cf0550d6915", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672461, "uuid": "704cc38a-33fc-46cb-a5eb-43036efc06c4", "comment": "Malware payload", "value": "e2577e426f9e38ba3daa0abe3c9b61056237d598", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672461, "uuid": "296069b9-d9bb-4c21-ad2f-55b29fedbd40", "comment": "Malware payload", "value": "400f20300ce2f60221502eafde9de1091f8f583aee1d118e2205b73dd1d2600f9f85f732527b699074fbcbe2e821d63d", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672461, "uuid": "7915e197-3cbe-4ede-b671-f52282051a89", "value": "D3F3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672461, "uuid": "f34809ff-c896-4c8d-8612-af5cccf08e5b", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672461, "uuid": "26fd39f5-a307-4c0f-889d-a8faebb2e961", "value": "3072:RiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:ieAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618672461, "uuid": "19020e6a-aa78-4819-99e0-81ed5293deec", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618672461, "uuid": "7c91ab95-5ae6-45ee-be2e-bbe9130f8354", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672461, "uuid": "afcacd40-28ac-4285-bbf2-817d41e2734e", "value": "1a947ce289307f64bea2b24fcc76fb972cfd2df30249992b21036cf0550d6915", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6aaf079a-9f13-11eb-abe1-42010a9c0039", "comment": "Malware payload (Qealler)", "timestamp": 1618619130, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619130, "uuid": "e466c1c4-ae47-4e35-81f3-ff8bccb7f0ec", "comment": "Malware payload (Qealler)", "value": "d036016404b879637debd6a0b3fa0906", "object_relation": "md5", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "qealler", "colour": "#22D507", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619130, "uuid": "43b224ef-2653-4be5-b433-83968dfc759e", "comment": "Malware payload (Qealler)", "value": "1aed6a96c550fe43edcd7c44fd2bfdb8a07e36a4f21b60048fd559b6fe1dfd70", "object_relation": "sha256", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "qealler", "colour": "#22D507", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619130, "uuid": "4c28b5a7-5d83-48de-9beb-980ee532d659", "comment": "Malware payload (Qealler)", "value": "52651d9a2fa3701b09574db1cfff781add2428f0", "object_relation": "sha1", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "qealler", "colour": "#22D507", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619130, "uuid": "c190b0a8-f5a1-46f6-9a0f-32d1710495e1", "comment": "Malware payload (Qealler)", "value": "ed79b4009322f9222c7143ac0f7d6dce1c380bdec5a8445d0e437a9729805439f39de413acd2941e32391da3a1f7b05f", "object_relation": "sha3-384", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "qealler", "colour": "#22D507", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619130, "uuid": "34a5c607-42d6-409d-bc1b-c6898ac82484", "value": "B3B47C507DDFA05AE96388F012865697F84A38C6D903B41FB3321B9F6A5099CCF41DFA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619130, "uuid": "ae503d77-8d9e-491d-9527-b1a7b7c729af", "value": "12288:mohjkrDLloUg7fVYbOAxDzFGnsO5yB1i0Z:t5k53Ri0D5GsO5yW0Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618619130, "uuid": "cf44e4f0-152c-44c9-95aa-e84d2ce1eef6", "value": 494936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618619130, "uuid": "8909ee7f-03c3-4908-a69d-71453c5973df", "value": "application/java-archive", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619130, "uuid": "d5c11030-f758-4d22-910f-418423b4ff76", "value": "d036016404b879637debd6a0b3fa0906.jar", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "342157c4-9f1d-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618623334, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618623334, "uuid": "e3592cf3-8c1a-4ba1-9c5a-208dccfe57fa", "comment": "Malware payload (Dridex)", "value": "602540918f1fe989aeedb5a471de3002", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618623334, "uuid": "9f760af1-69c3-42bc-873e-8f2a0f65d636", "comment": "Malware payload (Dridex)", "value": "1b7c2858eead710c72e98a14d3bfc3ea8e10599fff8efa0eed0bca1a78ee78eb", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618623334, "uuid": "b463f2e7-fdb0-4f64-8c72-90116ace106f", "comment": "Malware payload (Dridex)", "value": "ae5fc870fbc53648d8eec5739b241ef86fa117c2", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618623334, "uuid": "01924ad1-ec77-49ed-be0d-a3ebb8f634c2", "comment": "Malware payload (Dridex)", "value": "2434f8e3a461e1aa5c788ae68941623d56b6bc24cbae4208f1e334cc31940c1d87f517cf89963edd4bd75b67924c39bc", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618623334, "uuid": "1dd9513e-cb7c-4ea3-b3ef-1dfda9a19442", "value": "79F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618623334, "uuid": "802239e6-95b3-4c47-8bb6-aac7f3f93993", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618623334, "uuid": "650be0ed-6650-4d63-b8ae-eed2b7b64576", "value": "3072:KmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:bLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618623334, "uuid": "e6e2de63-2388-4ca6-821b-7761179d0d05", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618623334, "uuid": "3457b5ff-ee81-4483-838c-7244f0d8f909", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618623334, "uuid": "6e378aa4-7ff8-4efb-890a-ed1348bf61b0", "value": "1b7c2858eead710c72e98a14d3bfc3ea8e10599fff8efa0eed0bca1a78ee78eb", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea31212a-9fd2-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618701378, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618701378, "uuid": "6efad835-5d4b-4b29-8b86-87e517bbee34", "comment": "Malware payload", "value": "acbc168639d93f7066ed4556d8bccba6", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618701378, "uuid": "085a3bae-69b3-41f9-acc4-8b04c59efb8d", "comment": "Malware payload", "value": "1bf1919eba979337dda6acc6bcf316ff98e1d3fd1a623b336c06e2f474257528", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618701378, "uuid": "3670ee0f-7a37-4083-a885-b21a1b21f0a6", "comment": "Malware payload", "value": "9440d596c99725b53195fbd292a546511093dadd", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618701378, "uuid": "d18fc29a-12df-4af5-855a-259aa3122ca6", "comment": "Malware payload", "value": "012024a3d12c19a13bbdd88fffe4b6a6fa818f9494484930e177c8fdd5a26369c05cef726ee76b01d6c01ef0a4c612ac", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618701378, "uuid": "f801ab89-7ecb-4834-9ea9-88cc3367b737", "value": "95F3E00AED9FE988E84C55F1CA4D363EE9713E371B5BDD08C5846E9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618701378, "uuid": "29392bdf-6232-46fc-af9a-2545cc5d4bbd", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618701378, "uuid": "6ee2242a-59c4-4151-9c07-806d1e822df5", "value": "3072:KiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:JeAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618701378, "uuid": "e67c3d56-3f4e-4cd2-952b-c9be0bc2c3e3", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618701378, "uuid": "0935de19-2c85-4e1a-98fa-e4d70eb7a1fb", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618701378, "uuid": "bbf3c152-9490-4c1c-886c-c4944dd49e64", "value": "1bf1919eba979337dda6acc6bcf316ff98e1d3fd1a623b336c06e2f474257528", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00d771e7-9f92-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618673499, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673499, "uuid": "c727fd71-c90c-44e8-9024-3bf69abdd420", "comment": "Malware payload", "value": "8892b84b808dc3aee3bc8eef456db2db", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673499, "uuid": "ddb6e6da-17bd-4108-81ab-808e4ef7f111", "comment": "Malware payload", "value": "1c3cf7cd89947a2241d217fa3062b9c23dff207f55ae676267926cf8214751dd", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673499, "uuid": "815a00d6-8082-4852-b318-a3c7ee6b4527", "comment": "Malware payload", "value": "a15a57a1fe077bc1405729862a44d3387f34fe19", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673499, "uuid": "d0268a41-4ddc-4dab-8dd2-edb0df6a0a5f", "comment": "Malware payload", "value": "2e41a11daf37edc878aaee666749faa83c83e57ba33191db45d7d8ef9a1681e93f9ed4fb41043bbf0b83915ab938ac9d", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673499, "uuid": "b7103146-b0f2-4354-a3d9-ab8429233cdd", "value": "6EF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673499, "uuid": "3348c89f-511d-4506-81d5-97e31d8d3f5c", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673499, "uuid": "2e9a8ac3-f605-4361-94e9-b180cdc8b495", "value": "3072:4mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:hLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618673499, "uuid": "582dd587-55c0-4861-9125-71cbf8facd2f", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618673499, "uuid": "b1ae58a2-6e0f-4f66-9cbe-38f9223cd1e4", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673499, "uuid": "5eb06768-d417-442e-8cbb-e759d773180a", "value": "1c3cf7cd89947a2241d217fa3062b9c23dff207f55ae676267926cf8214751dd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8bcfd908-9f89-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618669866, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669866, "uuid": "cd87c1f4-0ffb-4b35-a9b1-3705c3d592d9", "comment": "Malware payload", "value": "f6f528ce6cda69386b296257ae9305be", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669866, "uuid": "13298ee0-0040-4fb3-b836-568a7e8973a3", "comment": "Malware payload", "value": "1c90f3c4de209f131c013afecd14a9c875f9b31b321a0958548ac1ac2d7887c2", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669866, "uuid": "6cc35d31-5135-4621-a6d2-be3323189c8c", "comment": "Malware payload", "value": "8e21a444c64932b411d1c607858ea225a6f00be0", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669866, "uuid": "2cfbd14d-c273-4bfa-8aab-921b07d3fe14", "comment": "Malware payload", "value": "b3e9ce88a7c7be74b164b53dcdb845c2885e48a34520ce54584100302f76d46f51c2a48cf46c503ca0e6ff335d00d13d", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669866, "uuid": "e34972a9-368d-4d52-adbd-36681e0c676b", "value": "63F3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C5846E9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669866, "uuid": "e9d78a60-94a0-4b16-b7e5-4682856d4cc2", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669866, "uuid": "ac8f858a-e1b0-4b72-82a7-a891101e3f17", "value": "3072:+iFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:1eAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618669866, "uuid": "b2b02104-3276-49ae-8269-2509f838ca05", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618669866, "uuid": "7fe0ab01-00e6-4ecc-8ff6-e7188b460d7b", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669866, "uuid": "430ce93b-dcbf-4a39-84c8-b1ce266d586a", "value": "1c90f3c4de209f131c013afecd14a9c875f9b31b321a0958548ac1ac2d7887c2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "115dc358-9f91-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618673097, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673097, "uuid": "6cf441ad-fd63-4d4e-8bea-9300454ae722", "comment": "Malware payload", "value": "d62a077855dda61a1b7a256d2f81999b", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673097, "uuid": "9937a354-ac90-4f89-8247-96d75c8c961f", "comment": "Malware payload", "value": "1cc56f3d233dc3236d918d6d07edec6c290f85bdc7260a840803f171bbf156fd", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673097, "uuid": "8214576a-86b2-41ae-afdb-b25ea07ea6f5", "comment": "Malware payload", "value": "b730a28bbd55c0e544bcade56dff3f355d2b1d8d", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673097, "uuid": "020f12f5-df17-49bf-9ed2-a2205368967f", "comment": "Malware payload", "value": "4c068d96f6031d901e025fdcaf51f0117ac15650729d2cb902856c458880aa4ffb675385babdeabf3524ab26662b1046", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673097, "uuid": "4d99216f-e43b-4288-9cda-1d3a2cb93ada", "value": "BFF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673097, "uuid": "31739264-f4ed-4002-b237-fc07d241d4ea", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673097, "uuid": "18392d0a-7067-47f1-bb24-9ad618ecc52d", "value": "3072:ImNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:RLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618673097, "uuid": "f4339b00-2f82-4e0d-9473-3dee4d1fcab1", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618673097, "uuid": "454d65fc-1013-49a2-8f04-3eda8ef529aa", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673097, "uuid": "f59ff0b9-6ef6-494c-9af6-46df9bb4c2ea", "value": "1cc56f3d233dc3236d918d6d07edec6c290f85bdc7260a840803f171bbf156fd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b433147-9fc4-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618695152, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695152, "uuid": "3c6dfb39-c014-463a-b7e8-72cc7d3af209", "comment": "Malware payload", "value": "1544d13aca64674f12fdff540c1300fe", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695152, "uuid": "bdfa8ac7-b67d-469f-9265-1b18723bb047", "comment": "Malware payload", "value": "1d1b39df86c96373c4c541b3b867c9c145cf91c446fe52e7e15ef07921eff00f", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695152, "uuid": "b809a3a4-ed1f-4664-8df5-80331451871e", "comment": "Malware payload", "value": "b67dc8c25b0816031c77ac773e1fa1ba1470b6fa", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695152, "uuid": "c3ec0cb0-1b76-49a0-bb32-9db134931336", "comment": "Malware payload", "value": "9c65538bb8c9721ef3e4ecea93a8ecea5677e0c9f5526c7ba1fde726e7f6e501023815638c35b8df81967a3903fe0268", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695152, "uuid": "43c46106-4c5b-47c0-a938-4cded374b9ac", "value": "93F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695152, "uuid": "83913978-0538-44c7-b58a-3634bc387b15", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695152, "uuid": "8cd0035d-a4ff-4d59-bffa-e2a4dc24ad63", "value": "3072:jmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:SLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618695152, "uuid": "791a72db-5db0-4d6f-b6e8-062066553b42", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618695152, "uuid": "9723cf8a-b503-4feb-bedf-f3fa2340364b", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695152, "uuid": "ee02fc71-6910-49b9-a03f-6f74ea0b29d5", "value": "1d1b39df86c96373c4c541b3b867c9c145cf91c446fe52e7e15ef07921eff00f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f536854c-9f2c-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618630100, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630100, "uuid": "2f14d857-6e98-4e5d-b1b4-8953797856c4", "comment": "Malware payload (Dridex)", "value": "a53099570fb4984ce7a460b8501a5383", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630100, "uuid": "d2bfc68d-c360-4ddc-b6d9-954af3537100", "comment": "Malware payload (Dridex)", "value": "1d6c55a9274c4b9e9997e91a510ce61387aff7fbf56024eb19951b3a6542e221", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630100, "uuid": "4c6b41e4-ee74-46c2-a319-f348bb0288f7", "comment": "Malware payload (Dridex)", "value": "236b010960076e7c711061a179a86d917f4b04da", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630100, "uuid": "693da22c-4b7e-4ce5-8b33-af96d6e0c153", "comment": "Malware payload (Dridex)", "value": "a8909a7e78d0a35a4efd023d605c2a5e21c4b4fa82d2bcff9b7b6963614bebd552ddad41157bd4347781fe0b590bf0a2", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630100, "uuid": "b7455d57-7c22-4a21-8bc1-85131cf36401", "value": "78F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630100, "uuid": "f61b8f4c-74af-4068-a1a1-47aeffd3ee35", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630100, "uuid": "829c2bd6-590c-4ed0-a5c5-3bdbb5a7e77f", "value": "3072:JmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:YLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618630100, "uuid": "28d0e3f7-4ed1-4457-bb0f-97517003c170", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618630100, "uuid": "6049c879-a65e-4a56-a90c-14a5ff944a1d", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630100, "uuid": "00797321-ee9b-4afa-863e-b85ed013c98f", "value": "1d6c55a9274c4b9e9997e91a510ce61387aff7fbf56024eb19951b3a6542e221", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "189a1fcc-9fb2-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618687283, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687283, "uuid": "9cd5cc55-ef61-46ca-985a-17e0cbb1b590", "comment": "Malware payload", "value": "d468f6cb6740cfb47759a35c86fa015f", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687283, "uuid": "5b498d30-4c83-4ab2-9f02-9ac45a261742", "comment": "Malware payload", "value": "1de501d6ff52740f9b61bc3ba0fc746a40eac508d78107a81db19b8d65aed3af", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687283, "uuid": "d1eafcbe-659c-4d2f-be2e-76d24861160b", "comment": "Malware payload", "value": "eea01c10bab014214e3fa381cb43e9b194693119", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687283, "uuid": "04b93635-adcd-4c90-ba04-c77a7f368a6f", "comment": "Malware payload", "value": "113487e8367ac8d77d4d46d0d5c09bd54ec7a509c78ea6de2090fefa3d35517ca7eef34d433cc0193400feff52f9cee1", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687283, "uuid": "7ad96580-3195-4529-817e-4e6d62e6e7cd", "value": "EAF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687283, "uuid": "795f54a2-b3f5-442f-b915-779ad534d9eb", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687283, "uuid": "f5b7da6e-8f1e-4fba-8752-1a02aa5175f3", "value": "3072:wmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ZLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618687283, "uuid": "7c8fb40b-a16a-45f5-9794-03f1cab62ede", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618687283, "uuid": "8a1c70de-650a-4eed-89d9-c6b48dd3e9c8", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687283, "uuid": "53d6aa68-e397-4a57-81f1-854715cda24b", "value": "1de501d6ff52740f9b61bc3ba0fc746a40eac508d78107a81db19b8d65aed3af", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99b22d6d-9f15-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618620068, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618620068, "uuid": "298684f2-04b2-4ab9-977c-b94a79ec5529", "comment": "Malware payload (Dridex)", "value": "300320130472e1d8c783364ab4808b53", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618620068, "uuid": "08a79b12-4c7a-475d-980a-8d6ba04a4a1e", "comment": "Malware payload (Dridex)", "value": "1de908499969ec62a0384e972b38747b14808a581522bad52015a8132116a869", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618620068, "uuid": "6d1e6487-713e-4d04-9fbc-a59bb7019f38", "comment": "Malware payload (Dridex)", "value": "57bb1ad1cf939b86331795a73daf64125d6c76fc", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618620068, "uuid": "75baf9e7-2fdb-4b69-8931-8b7b29ff0127", "comment": "Malware payload (Dridex)", "value": "b500dcfda2793d5d828e0ac6fdbaa9f5b521e20b18ad3f6cddf51a50f5c8a29fdf07c432f04168fcaf746acd9888509c", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618620068, "uuid": "24f299a5-be15-4cde-a324-a9c56498e5cd", "value": "C9F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618620068, "uuid": "dff1d75a-9a89-4447-bd02-690140bc7a0f", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618620068, "uuid": "530c72ed-1b0f-4da4-bddd-50fd9d100ca4", "value": "3072:smNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:1Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618620068, "uuid": "950a87d1-6dc1-417d-b843-be2d364c4062", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618620068, "uuid": "ee8dd3f8-c481-4e8f-8d0e-7381bfd6ddc4", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618620068, "uuid": "f94d6ee0-fcbf-4a04-b519-4f24cf990946", "value": "1de908499969ec62a0384e972b38747b14808a581522bad52015a8132116a869", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6208dda-9fcc-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618698767, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698767, "uuid": "af234e1e-7d1e-4db3-a8ea-87095732b4e5", "comment": "Malware payload", "value": "c2021fbd2818d985fabbcef37e4e5c46", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698767, "uuid": "901e9f92-e519-4512-8a45-3d72e9cd33de", "comment": "Malware payload", "value": "1df8b24a514f1152ff66014ab1b9cfbc5750165cad6b01e3e6ea8bb17855d93e", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698767, "uuid": "3a037b9d-cf92-4a83-9c2b-91099fa0e810", "comment": "Malware payload", "value": "5187739265985e0a390ecbb2f30431ab05d04de9", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698767, "uuid": "9a0a3a54-5626-4b17-a63d-866fe948e835", "comment": "Malware payload", "value": "5a0332297fd9e29c7f547ec38d7a351f26ba75560082b3b31450d165cf51f5db0b94e26a8a49c0b88e4ed376f049f592", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698767, "uuid": "47758894-b109-4f01-826c-7bd18222ec13", "value": "83F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698767, "uuid": "0b86e31c-a805-43db-9d7b-3fa09f02868d", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698767, "uuid": "97e4788e-6010-4512-9f05-ef373c74045f", "value": "3072:FmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ELc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618698767, "uuid": "e81f5544-c7a5-4fcc-a13c-9c2c304de07a", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618698767, "uuid": "b3c7b0c7-6aa5-4ce1-8851-1cfdf0b1c69f", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698767, "uuid": "47959bc2-cbff-4ff9-94c9-a908fbb569b7", "value": "1df8b24a514f1152ff66014ab1b9cfbc5750165cad6b01e3e6ea8bb17855d93e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4edc1cdc-9f1b-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618622520, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622520, "uuid": "e01946a8-ef80-48d6-bfb7-2bc415b64a73", "comment": "Malware payload (Dridex)", "value": "055349ce907bb6e518f7ab47a59065a6", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622520, "uuid": "c3d67acc-c030-4524-9c09-9bc8fe169dd2", "comment": "Malware payload (Dridex)", "value": "1e0fe8db1a2f0f4c6e71d4be4876c0fe736e194116958360d49aa0ba2846163f", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622520, "uuid": "94848c46-8318-4acd-850c-e1439d8041d2", "comment": "Malware payload (Dridex)", "value": "9ae9035c0e28bfba1e801056b87c17a9909ebbb8", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622520, "uuid": "b4eb47c6-07a7-476d-889c-fd563d08312a", "comment": "Malware payload (Dridex)", "value": "dd6b01b2a5e4929b229aa42d1d018117d6e45fdd98c683f85eb45f03e2714450d84876c596023c8cdb0324fafbf5b77a", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622520, "uuid": "d7aed9fa-9dbe-4eca-8e93-392e94713e4d", "value": "F0F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622520, "uuid": "40e151c8-1e96-4b91-b5d4-ba06fd8ffe80", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622520, "uuid": "b786970d-c2ec-4d03-9ec3-07e496d16806", "value": "3072:FmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ELc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618622520, "uuid": "85cfb54f-d712-46cc-bdd5-ba6ea1bbae21", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618622520, "uuid": "30d89ba3-fcea-4294-9788-b994269831a0", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622520, "uuid": "23cebcf6-2410-47c0-9196-19ded3e4c2a0", "value": "1e0fe8db1a2f0f4c6e71d4be4876c0fe736e194116958360d49aa0ba2846163f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b12d56f-9fcc-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618698561, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698561, "uuid": "ac0d9b3a-b7e3-4567-b57e-0c0bb7d08902", "comment": "Malware payload", "value": "71d4ee7e544fb54019948a9dd70d87ae", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698561, "uuid": "91862868-3f8c-4495-99f1-98b48d3b8c96", "comment": "Malware payload", "value": "1e48373d86d881c9d7d1104cfcde93c96353adea3d330f92899ab452252bc8b9", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698561, "uuid": "b0fdb191-7f88-4b38-979a-d162c0943a9e", "comment": "Malware payload", "value": "34a2d7114a038f9342f0b07485af1c815cfb4b32", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698561, "uuid": "8fa7a153-381c-4e96-8f89-40a854e80b9c", "comment": "Malware payload", "value": "3438169ce2584c0592ec4ee9b960dcf91f90a411b03f36b80f673da5d57204ca56c1299ff9b62a6f1d49e0ef5acbeb47", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698561, "uuid": "1a50ece1-d18e-424c-8541-af3e3a71565e", "value": "E5F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698561, "uuid": "4eaff784-08b7-4d8e-bd14-8c52386c0080", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698561, "uuid": "0267347e-748a-4834-93c4-5e80a19318d4", "value": "3072:Elpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Elo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618698561, "uuid": "6fdec490-35a6-46f1-99d8-5c518bfe5e54", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618698561, "uuid": "73bf38ba-3fa6-450a-a16e-54a83c5f89e6", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698561, "uuid": "a3d2863c-e376-4513-b33c-1a5ff6e24379", "value": "1e48373d86d881c9d7d1104cfcde93c96353adea3d330f92899ab452252bc8b9", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10201758-9fbb-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618691134, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691134, "uuid": "089dc46a-7a89-43ac-bd9d-af041ae82f63", "comment": "Malware payload", "value": "ae01779e2d301c7dd7d938129baf74d6", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691134, "uuid": "5ac6908e-7d4c-466b-ace7-2966ecbb26c1", "comment": "Malware payload", "value": "1e57d781c5c36d3b7e254a5efe543336b34ccb3fa63848d0a22d1fee73c1ca57", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691134, "uuid": "9b875f80-b7c4-456d-86c0-3d8b21490244", "comment": "Malware payload", "value": "ed51e974497129cebd43658778d30b45518d529a", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691134, "uuid": "63d856f7-ac66-4942-89d3-bca0e23091d9", "comment": "Malware payload", "value": "8ffec2e3ce1c088c273ae6c396b5182718611ad4b4b45f749709a2f0ba91008b27ed62436570b66d5515c33fe093236e", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691134, "uuid": "1728227c-de2d-40b3-97d6-214fb45a62b0", "value": "ADF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691134, "uuid": "46bb618a-07c8-49b7-ae83-3f99b2c93c47", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691134, "uuid": "25987633-9573-4f13-ba0a-ea191d3f676a", "value": "3072:ymNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:jLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618691134, "uuid": "6835245d-44fc-4694-841a-bb9dbf0bdf2e", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618691134, "uuid": "6ba3b31b-b99d-4dfd-966c-949a0944e93d", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691134, "uuid": "559032c6-a4c7-4e2f-ad0f-48e4c79bd262", "value": "1e57d781c5c36d3b7e254a5efe543336b34ccb3fa63848d0a22d1fee73c1ca57", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2290e6a4-9f47-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618641343, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641343, "uuid": "60edabd8-d5a8-4d7f-bba2-d271d9e82c46", "comment": "Malware payload (Dridex)", "value": "113a52e5dd30fd6a26f21d59c3c6b134", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641343, "uuid": "c029e152-8581-4f17-baae-9ac5cf203a79", "comment": "Malware payload (Dridex)", "value": "1e9628b38e8993522b4b0583da5790135d13c3052ee34d6f603c2115032d6fed", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641343, "uuid": "d02bc2c5-6484-44c2-9ede-a05b1c86908a", "comment": "Malware payload (Dridex)", "value": "67e95b3ef9f7d234ab356cdb58dffdb42c588b8f", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641343, "uuid": "d4fe51af-3416-4a6d-8eed-cfa3eb4c908f", "comment": "Malware payload (Dridex)", "value": "b19ea7e98703369bc1bcc729216fd5ed259d8dd70c9dc9649eaf8a9ab1886417736b804d806dcdfef8fb1ca5899455b3", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641343, "uuid": "9f2b8353-a920-47be-9ddc-92cb9cdfddc0", "value": "71F3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B496B1FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641343, "uuid": "564046af-37df-4f08-8da1-5db0fe924722", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641343, "uuid": "921ca8c9-58fb-46d6-a0f6-14ca761d069f", "value": "3072:xA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:x3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618641343, "uuid": "1c2bee2d-961e-430c-886d-a5c31ba2c1c6", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618641343, "uuid": "eaee34ef-a3d9-4eed-8a56-be51eeb91119", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641343, "uuid": "870cb884-11d6-48ce-970e-3553721c3820", "value": "1e9628b38e8993522b4b0583da5790135d13c3052ee34d6f603c2115032d6fed", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb1789ab-9f2a-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618629170, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629170, "uuid": "5f3e7fc9-b32a-43ec-bda5-a0a9a02df746", "comment": "Malware payload (Dridex)", "value": "a25d28aebb95ea744e20e8bca9b2a7ed", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629170, "uuid": "53018e4e-7ba2-406f-8835-439fecba5696", "comment": "Malware payload (Dridex)", "value": "1f32548e485774b7528ca890cbb08afbb62feb6532ee1328e33ce47eabb03f2e", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629170, "uuid": "7b043acc-a8d7-4549-9a2d-e9950a91e480", "comment": "Malware payload (Dridex)", "value": "4eebae7ee892e26974509937fa99060f300f7be9", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629170, "uuid": "a44ec9cc-5ce8-4b05-a598-a3a6a8cebd6e", "comment": "Malware payload (Dridex)", "value": "e87f3246ea3189024a9a3cae5d97df0d63c803a3059ef65e42be7ad34c407573b8aa994554f1c71b525ff6fa33c4b18b", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629170, "uuid": "947a6395-fbf8-46f6-bb4c-6da42645b941", "value": "32F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629170, "uuid": "6f10bab2-f7be-49a6-ad9e-6c4269dbd82b", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629170, "uuid": "606b5134-a032-4391-b289-c51d35e7a744", "value": "3072:VmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:0Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618629170, "uuid": "9f46ae0c-495c-4c03-90d3-4098c23be63f", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618629170, "uuid": "378ff5a6-cc22-4b11-8e9d-83f3c12b5315", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629170, "uuid": "d3d9f17c-6717-427f-9590-68227af64897", "value": "1f32548e485774b7528ca890cbb08afbb62feb6532ee1328e33ce47eabb03f2e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76ef34ed-9f28-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618628170, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618628170, "uuid": "8db68ced-e8b5-4907-bb05-b11c211cd45d", "comment": "Malware payload (Dridex)", "value": "8f7bb82c85feb435adaaabca071ca69a", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618628170, "uuid": "a66ce3ab-2195-4bf9-babc-74bde7d5de9f", "comment": "Malware payload (Dridex)", "value": "1f5b15f05e7fbd74931c72cf21ea124785b6cabc5dde121e9d8e05cda61e133b", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618628170, "uuid": "518c0e0c-d46d-4e1d-a120-c701e2c0d01a", "comment": "Malware payload (Dridex)", "value": "51559eb39b09bbd98c1418ee95b9b59a8b06d937", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618628170, "uuid": "f266e440-87b9-4238-a157-c0b2b3a2d838", "comment": "Malware payload (Dridex)", "value": "41ecebc03b9b7632cb15718f9f0e6df8b6d97cefebd156ae24260dc3822309afd0eef0427ce01a7dd31d1edc6c3fabc7", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618628170, "uuid": "7b5ea1da-fd07-4e6a-85ee-1908a4d049f8", "value": "C3F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618628170, "uuid": "43602b7a-7232-44f6-9944-d14a44764d16", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618628170, "uuid": "412d4702-56ff-4be3-bed0-c07e706f2a60", "value": "3072:4mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:hLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618628170, "uuid": "fa76530a-526f-45bd-bc39-6dc8327b068e", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618628170, "uuid": "56821124-052b-4f68-bf4a-31a392c5e3ab", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618628170, "uuid": "77c37d6a-d777-46e3-a516-21b80c6a742d", "value": "1f5b15f05e7fbd74931c72cf21ea124785b6cabc5dde121e9d8e05cda61e133b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0300adc0-9f98-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618676079, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676079, "uuid": "9ded84c5-d830-4218-a85a-25d2105b1832", "comment": "Malware payload", "value": "26054cfbae70d46bf295e1b02c95830f", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676079, "uuid": "877ac8d1-d3d1-47ad-9ed7-4551855a838c", "comment": "Malware payload", "value": "1f5d1db11c3b592021c235a9ff8f773c677f5196dd901b57ec6f86d3ea764667", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676079, "uuid": "a054cb3f-6585-40fe-a41c-0c49459cc3e1", "comment": "Malware payload", "value": "c31de2dd1b8ca9af71bf6211a42cdfdf7446d0a6", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676079, "uuid": "8a86965d-e62a-4516-b024-a3ca7e35cb77", "comment": "Malware payload", "value": "c2f6f3ca210c58bcee8a1065c25cecb2a9538843e03e531f5b6ac802df3a07fcd2af759214b047265ba907d781a9e282", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676079, "uuid": "cf092b57-0c70-4497-a9b1-42e3f9b85e08", "value": "44F3E00AED9FE988E84C51F1CA4D363EE9713E371B5BDD08C5846E9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676079, "uuid": "bf8d2fee-ab3f-4531-96c5-d03a51bc4847", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676079, "uuid": "17008cef-df41-4134-b712-3e08a006519b", "value": "3072:1iFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:eeAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618676079, "uuid": "19525e8d-c5e1-4c68-b3f3-a0adbee97d04", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618676079, "uuid": "11815b50-51e7-489c-8c64-836cb99c01d7", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676079, "uuid": "1c06e1ba-f0d1-47e0-b3e7-93e8750c874c", "value": "1f5d1db11c3b592021c235a9ff8f773c677f5196dd901b57ec6f86d3ea764667", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53b3744a-9fad-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618685234, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618685234, "uuid": "68ef369e-a76d-49ec-bda0-e81ae30eb926", "comment": "Malware payload", "value": "2920f369403d63277e5c5ee07de1a860", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618685234, "uuid": "b45fbd62-5eb0-487e-b925-9dfd9a15d0ce", "comment": "Malware payload", "value": "1f7f90bac5a0c604fd42c349678905a87d1aa6ff0969bf8d654b967f9157f4ec", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618685234, "uuid": "4a96e881-1d9f-48a3-bd66-bde4cce47ba2", "comment": "Malware payload", "value": "9ffe43042706c54a4e4c21412211acb4c7a6e941", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618685234, "uuid": "ce38e698-6ca6-4f9c-a5d4-683e09f85543", "comment": "Malware payload", "value": "1b53b5ad3541fdf99086047122d17f29474efe5bb8eceebc5703b9b061c64d0227f7af80a0d939a512369e37efd1b55c", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618685234, "uuid": "cd08a0fa-f9ea-464c-931d-6c408d61028f", "value": "5FF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618685234, "uuid": "b9fe1466-d67c-40b0-a02c-b771ce49622d", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618685234, "uuid": "e6c6d3cd-f790-4284-8b97-33dcd4841508", "value": "3072:omNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:xLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618685234, "uuid": "c0cadf12-7419-4d93-b51c-d67a78da7a0f", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618685234, "uuid": "8f4612a4-c016-47a6-8074-f3902e1af495", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618685234, "uuid": "e6385ae7-a066-40c2-bcee-18b62b677460", "value": "1f7f90bac5a0c604fd42c349678905a87d1aa6ff0969bf8d654b967f9157f4ec", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "935db1ee-9f60-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618652270, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652270, "uuid": "25223d8a-1fae-41ad-80c1-6da93e8b91ef", "comment": "Malware payload (Dridex)", "value": "007110ff74d1c3a24370715188b54149", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652270, "uuid": "2d95ee86-8b69-44da-b033-707264c35133", "comment": "Malware payload (Dridex)", "value": "1f9f793a4152d75c2660d5972aa4573fe3b1eafac303cb4033653f7ddf8ad64c", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652270, "uuid": "c27e6a47-cce6-45a1-9566-d71fa18b1067", "comment": "Malware payload (Dridex)", "value": "e5b1a60c8655c4ae9ee284f1e1e1a65afe353912", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652270, "uuid": "c0893674-27e1-44c9-97c9-31abcb3978c1", "comment": "Malware payload (Dridex)", "value": "d8cd3c5dcfac3b18f9f7eb562da2701786fe868dba8012c5a7425b7c61ee6953bd5e9ea54579e493d1b455d8d533ea07", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652270, "uuid": "563efa38-a7a9-4576-a003-f62ca568061c", "value": "03F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652270, "uuid": "0c529faf-4832-4643-ad8d-1e4d5376742e", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652270, "uuid": "d4f1c209-bd8b-4e7d-aef1-e499c65d5dc1", "value": "3072:4lpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:4lo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618652270, "uuid": "44499986-fc24-4bd2-8ebf-fd98565c092f", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618652270, "uuid": "e9de2854-85fe-467a-a58a-4225518f70f9", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652270, "uuid": "764d1034-e9d2-4e73-a84e-a2657812724e", "value": "1f9f793a4152d75c2660d5972aa4573fe3b1eafac303cb4033653f7ddf8ad64c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8aeb6355-9f13-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618619184, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619184, "uuid": "acbb5e50-5771-4b76-afad-4256011fdcd1", "comment": "Malware payload (Dridex)", "value": "4c4c4e19708faccc29cce44282615d35", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619184, "uuid": "74821b99-1aec-4968-b32f-c59a39bd6b48", "comment": "Malware payload (Dridex)", "value": "20815f263450a7681321f7b4731705d303cf9eb27ec449bf18bf9ffd9519f745", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619184, "uuid": "005c085b-63b4-4002-9c89-2c0bc6b2bcec", "comment": "Malware payload (Dridex)", "value": "d50238fbd33361ea45c7674a982816c11398de06", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619184, "uuid": "d36dddb7-fc81-4723-bf1c-b178cba39276", "comment": "Malware payload (Dridex)", "value": "6fc9a163fe591830ecb4bd76d0ffcedd0c1a87c664f7eff8dd37e698ce2047965662b0596e87475c20fa52a1be9c6364", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619184, "uuid": "dbec0b8a-26c0-4d5d-a0dd-2e5c1b7074df", "value": "EAF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619184, "uuid": "ebef8102-656a-414d-81f0-8b63d0597dae", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619184, "uuid": "b8926518-e441-4dba-947e-3f253e6de248", "value": "3072:zlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:zlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618619184, "uuid": "b0b22afc-520e-4d36-963c-e49052b7490a", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618619184, "uuid": "4658125d-9722-4f3b-aa02-190fd427cd38", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619184, "uuid": "206c347a-4720-41fc-a18a-f9fb0624e062", "value": "20815f263450a7681321f7b4731705d303cf9eb27ec449bf18bf9ffd9519f745", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e20598cb-9fb4-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618688479, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688479, "uuid": "12ba3c59-9cff-4de2-a74b-79c6c7e9ab8a", "comment": "Malware payload", "value": "65e4738a2f6efef7cbaedd8b8796d412", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688479, "uuid": "c843cca4-a144-452b-82fe-720752298d01", "comment": "Malware payload", "value": "20c9ffeb623d11467dd18264df210fc313a19e5fa17a77738aba5f0d430d7ac0", "object_relation": "sha256", "Tag": [] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688479, "uuid": "27db3ef7-7ec4-4c57-a3cd-5d180797a9b9", "comment": "Malware payload", "value": "b8f47d8831f5a3caee60481e2e575c67cd0f28a2", "object_relation": "sha1", "Tag": [] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688479, "uuid": "36dd4a99-227d-4cc2-b6b2-9a0fb0c0e8f8", "comment": "Malware payload", "value": "577fb42a163fd31acca36ef833a691b0023cf8cdcee4fef651bc16d83b90cf30b742bb8d2bbf1911889b8b93482cb16a", "object_relation": "sha3-384", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688479, "uuid": "f43d6cf9-033f-42ee-bb49-988dc0758b1a", "value": "C4C4F11233D0C032D09120758629C7B19EBAB4B5276AA5CFFBD40BB85F54BD3AA3571B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688479, "uuid": "050f42e1-92bb-481d-9228-fbbf8cc43eb6", "value": "fd4bf10af10a6da7366de6cd4288ec3e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688479, "uuid": "d880f8ae-dff7-4a85-af72-063d625fd865", "value": "12288:rb1iok/IwYUI3xXcwkYHxaSaNG86+bovV/qXyZPoN:rb0okwwYfNcPYRHY6+bouOPo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618688479, "uuid": "3a47e993-231c-414e-92d4-6cbc68b46fe5", "value": 590336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618688479, "uuid": "b53738e0-9dc4-4935-864c-a6054671f2e3", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688479, "uuid": "c6df1529-95f3-41da-a805-5110e624a98b", "value": "SecuriteInfo.com.W32.AIDetect.malware1.30216.18401", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b02e72a-9f22-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618625439, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618625439, "uuid": "dee7f7bd-f273-48ab-9b5e-4b6e2bd9c041", "comment": "Malware payload (Dridex)", "value": "a1ab11d544b1ed832405f42eda80702f", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618625439, "uuid": "f1384411-de93-4c05-9d1c-9ad07829885f", "comment": "Malware payload (Dridex)", "value": "20d5432033bcfcac31e29694fe997fcbaa5b7e22bd525929d8dbd632c9035e99", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618625439, "uuid": "9b7b8f2b-72f5-4c4b-abd6-03d08d138b7c", "comment": "Malware payload (Dridex)", "value": "70813eca5eb3672e342c1ee8f1eefd2070103324", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618625439, "uuid": "d3f726a7-6ef5-48fe-a85c-4df4c851e418", "comment": "Malware payload (Dridex)", "value": "9409ff2ec11834dab85db95e4367ec92fe612bd367a45349666f7e0f81b0104034c1f3ee5b6a62cee4ea3eb9036b1ab0", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618625439, "uuid": "8dc39d0f-3d77-430e-8370-6d7518dd3c1e", "value": "BBF3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618625439, "uuid": "3ffa5af2-3beb-4af9-95f3-f65016b064a8", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618625439, "uuid": "edfcc0a3-3c8a-4fb9-9751-ae660e11e117", "value": "3072:QiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:7eAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618625439, "uuid": "9a97331c-38e8-4593-ba10-c421d25ca7bb", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618625439, "uuid": "a251772e-d7de-4920-9ebf-18a767871585", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618625439, "uuid": "3a74d694-2f51-4be0-bbbe-3806c1539742", "value": "20d5432033bcfcac31e29694fe997fcbaa5b7e22bd525929d8dbd632c9035e99", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da66d5c4-9f1a-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618622324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622324, "uuid": "b8ebce72-19c8-4fcf-8a66-6002f596ebea", "comment": "Malware payload (Dridex)", "value": "88522696a23ce36430e7754777871ede", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622324, "uuid": "863efada-edbf-48ad-b9d4-851ae4cf504d", "comment": "Malware payload (Dridex)", "value": "20dc895bf3dd1253c5e43ad608c3ff9d0232f7a9ad52a70f7a4de6020d8ec2f8", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622324, "uuid": "94e62d6c-de94-4c45-9897-6cf66865ada8", "comment": "Malware payload (Dridex)", "value": "c0bf4ca0a04e23d883fbc28f65a4b17e76c40e63", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622324, "uuid": "3fc631ec-22f3-4d74-afe9-39b5f794031f", "comment": "Malware payload (Dridex)", "value": "7a3a2cfa9e92a1783cefb3cf2852709f6adc03f22844a6d549f639ce0e77d2eb3ed465086ca9bf05a5f30892578f1ba1", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622324, "uuid": "757f27d6-5b8e-4b9a-b730-41491e079ec9", "value": "30F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622324, "uuid": "0a76e448-e934-47df-9990-666d3ad8eae0", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622324, "uuid": "be9178b5-f2f9-4516-9a81-66dd96855541", "value": "3072:2lpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:2lo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618622324, "uuid": "fa57d088-a60f-4c14-aa2a-0ee49d906bdc", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618622324, "uuid": "82500300-d2a7-4615-a51f-5013ac1f6573", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622324, "uuid": "580fa347-4ba8-4593-a4ba-77dc82172243", "value": "20dc895bf3dd1253c5e43ad608c3ff9d0232f7a9ad52a70f7a4de6020d8ec2f8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a35a751e-9fa3-11eb-abe1-42010a9c0039", "comment": "Malware payload (Loki)", "timestamp": 1618681073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618681073, "uuid": "7efd8e5d-2e13-44cf-b23f-4386ccfb161c", "comment": "Malware payload (Loki)", "value": "dde4677fb65ebfa9b512c6b7aacb0377", "object_relation": "md5", "Tag": [ { "name": "Loki", "colour": "#D4868A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618681073, "uuid": "718bfc8b-cece-4dae-b8e0-073d669d19ca", "comment": "Malware payload (Loki)", "value": "2119a3a75bcb4369e6f69c3be47d5aeba2e1d22ee9f6566706a3234b2467317a", "object_relation": "sha256", "Tag": [ { "name": "Loki", "colour": "#D4868A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618681073, "uuid": "21732407-b688-4e69-b2f7-8d35f8d524f0", "comment": "Malware payload (Loki)", "value": "97ea2715b316e72972d4ffeca04cefc5438ec0f8", "object_relation": "sha1", "Tag": [ { "name": "Loki", "colour": "#D4868A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618681073, "uuid": "10af75df-c249-49e6-989a-42a862720a57", "comment": "Malware payload (Loki)", "value": "0e61b3279fd0547e4624bcccfcb13e86a399fff7c3087dee4d7430c8e86dea6eafa37514c469c404d976f1a163709073", "object_relation": "sha3-384", "Tag": [ { "name": "Loki", "colour": "#D4868A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618681073, "uuid": "2237f93c-cd6d-4b77-8884-e27c30dae7b4", "value": "EBC4F1105A9DFB8AD45D1BB1D8A0993506737667E366CB0FD48D00CD4EB0B82F8AD3A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618681073, "uuid": "989dc6b6-ece0-4996-93e4-99f42b53389c", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618681073, "uuid": "0f13ebf9-f568-4b4a-bacf-c846f5b02c66", "value": "6144:0zdaiTnR/6i0ox5a64aSAoafFPs+SN7zw0L62thJie5CytqTUs49UgTV7E/IYEmF:Gd4ilHa66OE9Nie5VrBPT+rgJ/+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618681073, "uuid": "d4e1e1f8-3dc0-4bd1-a755-0ddc0249ef4c", "value": 591360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618681073, "uuid": "f416d0ff-edf4-48fd-a33f-145af285f670", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618681073, "uuid": "3923e4ac-4f6a-4021-b322-ca2a2f69e5f7", "value": "Urgente RFQ_AP65425652_032421.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ac8eac7-9f4d-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618643880, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618643880, "uuid": "ab6f5277-7d2d-47e4-9597-f5733bd45fde", "comment": "Malware payload (Dridex)", "value": "ccd3c5633a4b173e3b45633fc821ec10", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618643880, "uuid": "4e2b3191-ec57-4faa-bb5b-69424d6c34ce", "comment": "Malware payload (Dridex)", "value": "2157643cd2c278b965945ee8e47932d5d5e05aafea31f99724d832c5cf76c8e5", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618643880, "uuid": "c7b3218b-33fa-4e0b-bc8b-60a0e22614ed", "comment": "Malware payload (Dridex)", "value": "1a73b43e06443f2eb9df84c43cb9cfa6d1fa2ec0", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618643880, "uuid": "2ab2508c-dca4-4a3f-a9d8-30ea07d540b2", "comment": "Malware payload (Dridex)", "value": "27757c63e02ea0eaeafa5c667b44c6e0cf5a8d89fa26138d02cf9852acd26d435dce61049969d7f4e0309407d3074b07", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618643880, "uuid": "e7ed87cd-af1e-4b44-9f06-a129f1d304e0", "value": "1FF3D088CBB3E4E6EFB3D37866F85E1B561174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618643880, "uuid": "c68f1456-eaec-4bce-99f2-2286fe625347", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618643880, "uuid": "453738b7-d2b7-42c6-941b-370e5dccafbb", "value": "3072:WmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:HLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618643880, "uuid": "2b3f9d12-bfed-43f2-a66d-f7bbb003c79e", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618643880, "uuid": "14a7b288-773c-447c-881a-79f88ee1da37", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618643880, "uuid": "abeb084a-fe1b-42b5-a67d-165e0898d07c", "value": "2157643cd2c278b965945ee8e47932d5d5e05aafea31f99724d832c5cf76c8e5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d312987f-9fac-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618685018, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618685018, "uuid": "f51e76d0-55c9-4966-a45e-9fdf64188d72", "comment": "Malware payload", "value": "9801a4a590c2108089aff73b9c06f36c", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618685018, "uuid": "7764f84f-e3ef-4cce-a02e-2a1d7b02dd2a", "comment": "Malware payload", "value": "2162e383aedb220eda9555bc9ed43e8e35d10362c630533cba7ffb98d9bd6324", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618685018, "uuid": "b0099317-66e0-4c65-83a0-cb35628afb65", "comment": "Malware payload", "value": "9a418eea69b14ba84978ecb82e001e12d68e6970", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618685018, "uuid": "f0fa7687-892e-47ab-ad66-5b6823b86608", "comment": "Malware payload", "value": "ff9ad281b4a9e21f332c4d2a02f5537826c964bfa886192950886a7f76c2c2613ed6744f16ec00742287d65e5f33fee3", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618685018, "uuid": "08f32ac8-d277-45d0-af76-52345c34a8ab", "value": "89F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618685018, "uuid": "020d9531-090a-4144-83b1-d75e3148eaf6", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618685018, "uuid": "427d775e-b03a-409b-a11e-85c0d5f76e00", "value": "3072:TmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:iLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618685018, "uuid": "5e96f383-19c4-41eb-b79c-acfccd683646", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618685018, "uuid": "7f209f19-3e7d-4f1a-8d10-d00ca66e8875", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618685018, "uuid": "18f009b9-b5e8-47ed-935b-f92d695fc3a8", "value": "2162e383aedb220eda9555bc9ed43e8e35d10362c630533cba7ffb98d9bd6324", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6cc80702-9fa0-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618679693, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618679693, "uuid": "e3b48971-55c6-4fca-81e0-1505fbef9b4d", "comment": "Malware payload", "value": "4cf8ef2aee9d055ae695b879830cc187", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618679693, "uuid": "bfbaac0d-1c7b-4c44-b8ef-2cfb092b49ec", "comment": "Malware payload", "value": "216c5772dfd5590e2c224a496ff0cb272c51e3fa87752eb63a7189147fe68ab4", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618679693, "uuid": "bde00036-9a4c-4176-8d60-02f555a24d1a", "comment": "Malware payload", "value": "23079d771a0c4bdfcf0ac6902e9046043bad58b2", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618679693, "uuid": "e3762009-534a-4b5e-a3c1-c57634e461e9", "comment": "Malware payload", "value": "e969a340e77fba576bca9d90a181f36fdb4d172a2f43067be706cd9b0292bdbcb54b4ede7efd91e3f404a73a0d615f65", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618679693, "uuid": "9a9af90f-58aa-46d2-be18-3c34acd6d711", "value": "C6F3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618679693, "uuid": "e5cb7378-3a52-4ea2-8d7c-7755f29b7941", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618679693, "uuid": "7b9d5896-6c87-4ad4-b422-643f681848a0", "value": "3072:BiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:SeAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618679693, "uuid": "4da13251-56bb-4432-9735-d2584cbfe9a5", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618679693, "uuid": "a1a9dd81-3d8c-49a4-b99f-77e8fa246542", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618679693, "uuid": "77cfbb16-cfe2-42e9-95ab-df7307bf904a", "value": "216c5772dfd5590e2c224a496ff0cb272c51e3fa87752eb63a7189147fe68ab4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52f9c4a0-9f15-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618619950, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619950, "uuid": "b9700f71-3b8a-4bd9-ae15-8dd7e8996021", "comment": "Malware payload (Dridex)", "value": "730c66035951069eb728910a624fcdba", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619950, "uuid": "7685cc49-4320-480b-8c17-11596f126d1b", "comment": "Malware payload (Dridex)", "value": "21eff95e9d7a466086af43416f4d811ced6b81ef0ebb114a872e989469ead701", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619950, "uuid": "5466c877-4ae3-4576-b1fd-07bf7778b412", "comment": "Malware payload (Dridex)", "value": "8dbdeb86aef758d321f6dad1a2e08d2e75a6e6f1", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619950, "uuid": "752d3b01-6040-4b9b-b1b2-714593922aa8", "comment": "Malware payload (Dridex)", "value": "24b927cd17aca9bf1dab07d1784c2a5efa72085899ee9aa0a0e3f9bbaa13bf38e9195708c3148d56f7ca30aa91d824db", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619950, "uuid": "f7167328-326a-483f-a739-44018a5b9bb4", "value": "46F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619950, "uuid": "2df088f8-727b-4074-b971-efdb3f49a0ad", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619950, "uuid": "822e6b57-e484-491c-a590-94997b05e309", "value": "3072:fmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:+Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618619950, "uuid": "5b6efc3e-ca1f-4c30-904d-c345cd6d1130", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618619950, "uuid": "3f8bcef4-005f-4bb8-80d7-1daa4aedd5b8", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619950, "uuid": "02fde838-7a7a-4a02-a343-d792fb521725", "value": "21eff95e9d7a466086af43416f4d811ced6b81ef0ebb114a872e989469ead701", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba46be67-9f89-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618669944, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669944, "uuid": "616d76f3-e901-4f54-8006-e3d378390a92", "comment": "Malware payload", "value": "d24ac7144a26f8cdd0da149f4a94ec56", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669944, "uuid": "ae0bd776-985e-48b5-803e-c3a3b5fd6066", "comment": "Malware payload", "value": "224fec2fdb4450121bea45116d8b8e65b133201c453b98f3f946c77cc36bb1c8", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669944, "uuid": "6f244ac8-2e3f-41a4-9262-d2d1c428a8e8", "comment": "Malware payload", "value": "b48a764399589b42c70fc9faff07b0e22f2a4e3c", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669944, "uuid": "81158cd7-2e46-48c4-814b-4be050de8827", "comment": "Malware payload", "value": "5774e132840b320ca8d6e48526c6b80a8d99e7ff1caaba9c9380f397c498ee71ce2909851f9283602112145cc8b3e111", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669944, "uuid": "1468ba6a-27bc-4e08-810a-0b9213901f92", "value": "FBF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669944, "uuid": "2d54b09e-e97c-4ba8-95b7-645a22619480", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669944, "uuid": "281c76f5-53f3-4634-858a-46be7dac4dfe", "value": "3072:kmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:tLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618669944, "uuid": "7d334968-678e-43c1-bf52-7c11f5d75f62", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618669944, "uuid": "50b13033-b765-4f4d-8e34-a0d541c0222a", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669944, "uuid": "5765b3f6-79df-4d63-af55-34b9531c672c", "value": "224fec2fdb4450121bea45116d8b8e65b133201c453b98f3f946c77cc36bb1c8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5989d512-9f2b-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618629409, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629409, "uuid": "608cfc32-7cb6-42b3-80bd-476664df219b", "comment": "Malware payload (Dridex)", "value": "ef61b47234be0de13c39371c98b12f9c", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629409, "uuid": "5e6a1a86-cd69-4337-a51f-a87482c1c0d7", "comment": "Malware payload (Dridex)", "value": "2427eaac2d5c99dfa20e81be6ad086e80d93befcdf07299914236af8354c2dcb", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629409, "uuid": "2e6a3f7a-878d-465c-89b4-3c1dccd2f176", "comment": "Malware payload (Dridex)", "value": "b29359bdff6e4ef4f6e5dd02723d094fa060c9ca", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629409, "uuid": "4d8d2357-5e29-4a5c-9641-6ad5a6993141", "comment": "Malware payload (Dridex)", "value": "507995bc051ed82ee634a0eaecee36c4efbd55f3429845014a3702c067210dadce20e492a43964ca176e06b8fe95dfcf", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629409, "uuid": "72c5b4e3-67aa-4ea9-a887-7555f18e518e", "value": "66F3D088CBB3E4E6EFB3937966F85E1B561574551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629409, "uuid": "07c18872-564c-443b-a0f7-a518f1c09cca", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629409, "uuid": "b55c9ccf-ce64-4c5d-8593-2ce057f1cbce", "value": "3072:UmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:9Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618629409, "uuid": "e6536af6-556f-4d26-8384-4533e49c97a8", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618629409, "uuid": "ebf3c002-f1e0-4481-ae51-61506a4c40ec", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629409, "uuid": "5a4b35bc-9e76-4634-94ae-e0606710b4d4", "value": "2427eaac2d5c99dfa20e81be6ad086e80d93befcdf07299914236af8354c2dcb", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d727675-9f85-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618668098, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618668098, "uuid": "654efdd1-0522-4db8-8c58-e64b98ff3bf8", "comment": "Malware payload", "value": "b032ad99d4a45e32ac77e529293a0e90", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618668098, "uuid": "69c20b56-773f-479c-95d2-83cccb65b479", "comment": "Malware payload", "value": "2465a2896c698808bac2a294ddd348195909e5d829eb034a5909dd2fc0865dfe", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618668098, "uuid": "c69304d1-a54d-4a98-b1e0-a907e13eee3e", "comment": "Malware payload", "value": "1c1c8ae172a9be29aa6f83ad6db0e2a80f7ca25a", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618668098, "uuid": "caea0404-962a-4523-b2fa-55c64be47064", "comment": "Malware payload", "value": "4e0d39f77ae545f7e0050d4cd040b537a0a29767834f93856703f04fcd350327e8fa2d5d5b743c608d42210be04977ba", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618668098, "uuid": "71e4a3fa-8916-4bef-8a90-a0d3280f0d33", "value": "D5F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618668098, "uuid": "b4722be5-0c56-4bf4-8b87-f2f31075a8ea", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618668098, "uuid": "7fb82d3e-f7ae-4d00-9002-05a5c392b342", "value": "3072:ulpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:ulo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618668098, "uuid": "8ab22df5-2b60-4d38-9916-da4cd9b88c95", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618668098, "uuid": "825d81e0-ef4e-46b6-8ab6-bec23a013f1c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618668098, "uuid": "43e76aa7-fc0a-49ce-b19d-411cf55c8942", "value": "2465a2896c698808bac2a294ddd348195909e5d829eb034a5909dd2fc0865dfe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6487ed42-9f39-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618635441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618635441, "uuid": "f4caee2f-34cc-4d47-affd-b3f12cb02862", "comment": "Malware payload (Dridex)", "value": "c8bd8585a00820f58b9a54b098748811", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618635441, "uuid": "b643f293-7ba4-49b1-99d7-c3c357de711e", "comment": "Malware payload (Dridex)", "value": "248be0d9d08e342dddaf63bbe920d29211c325d31d0551c72a2d96f36fb1e2d2", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618635441, "uuid": "b5532561-8ee8-4802-a645-4da205495986", "comment": "Malware payload (Dridex)", "value": "61aa52f440d6ad73c2007a7f6119ba3a3fbd0b4b", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618635441, "uuid": "1000544a-aea3-4fb0-ad51-e27ed3b2abe5", "comment": "Malware payload (Dridex)", "value": "471899ed57e3023f1df326af704310619e6c2131a41a4796250b23088b5fc840973c3ae42500385331d8eeb46ad55a5b", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618635441, "uuid": "07181281-49b6-4ad1-a6ac-f95b75ff8d2d", "value": "0CF3C088CBB3E4E6EFB3937966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618635441, "uuid": "be7b9644-80b7-4e33-9e23-95cab929281b", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618635441, "uuid": "6f19a6cd-eb57-4be7-bb95-75da820d065b", "value": "3072:4mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:hLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618635441, "uuid": "294790a7-79e8-4938-b2df-ccbf3a39807d", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618635441, "uuid": "a1de8918-e554-4a4b-8fba-2462296f3fa7", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618635441, "uuid": "8f582674-50c7-4220-90f6-906981769aea", "value": "248be0d9d08e342dddaf63bbe920d29211c325d31d0551c72a2d96f36fb1e2d2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "554e78e5-9faa-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618683948, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683948, "uuid": "e5072538-74ef-46e3-986f-0dcd51cc4a1e", "comment": "Malware payload", "value": "29bc5395af5ec2bad823b855670366f2", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683948, "uuid": "c8895a1e-ae0b-489a-8ed5-6210f6f5de32", "comment": "Malware payload", "value": "24a0cb2b84084e873f621b4e7f0d7112776169a0f7fcc78e5ef0452e8ec75ee7", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683948, "uuid": "8408d947-4662-4446-b65c-950e6d562aef", "comment": "Malware payload", "value": "15223ad7b9ffedeefa85f12faba8076daa7bb5a3", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683948, "uuid": "21811245-7e5e-4da2-9ca1-05d8356dab61", "comment": "Malware payload", "value": "5a6ec0206a6d4bb3117e8a0ffe0d8e922f33d5e99b2b6da58f57ad81dcbfd26b8e54a1e684f7916cba684e43d0a6367c", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683948, "uuid": "096d7320-8d53-495d-8273-e23f9864cfa9", "value": "A4F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683948, "uuid": "539cc2f8-e136-4dae-a4fa-dc104afe3d80", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683948, "uuid": "d1a89fbd-5646-4cec-ad29-ac3ee3be52b7", "value": "3072:4mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:hLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618683948, "uuid": "70a3fac2-06ce-476b-8def-cce202eefb5e", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618683948, "uuid": "08a2abe2-c584-4814-b9ea-4cf1ecf0fb79", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683948, "uuid": "86a70a8c-522c-4eae-bf9b-bc3f480477f3", "value": "24a0cb2b84084e873f621b4e7f0d7112776169a0f7fcc78e5ef0452e8ec75ee7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f69edd6-9f9e-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618678785, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618678785, "uuid": "dedc3ce6-843d-4957-9302-2f2a5fcfad95", "comment": "Malware payload", "value": "cd0446d4478cbf2c9da988b7ca143af3", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618678785, "uuid": "db9f1a47-f465-4051-932b-5b8281e6c7ca", "comment": "Malware payload", "value": "2656aed1bebdaae9ab9e7294dc2f0c4e1a28bc4706b201b538a33932b6bed260", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618678785, "uuid": "3db95fde-de98-4061-a78d-717d81a3fe3a", "comment": "Malware payload", "value": "a35f1fb161544b5808faa2bb5ab413cdcfa3c627", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618678785, "uuid": "05793e5f-33b8-4eda-b230-09d7e4dcd0cb", "comment": "Malware payload", "value": "3c93f5cf33739ac7ed5a70c5caf1e22b17e93dbd1dbadd50d04e9db33a369fb05534c13e506e0f35d32fbe9998a9cae6", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618678785, "uuid": "9c17e78e-745c-4751-9b83-97b03be7e18e", "value": "E9F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618678785, "uuid": "c18f5999-6b21-4278-95bb-42e2684837d6", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618678785, "uuid": "5f55c458-6c4f-4b80-bd45-060bc35f66d1", "value": "3072:bmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:KLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618678785, "uuid": "6e52e117-cb69-4041-933a-6d8257d37eff", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618678785, "uuid": "81dc9cb4-8075-48f9-8b1a-1133c53d2286", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618678785, "uuid": "942bcfa2-fbce-45f4-a2aa-b06f2cd4a66f", "value": "2656aed1bebdaae9ab9e7294dc2f0c4e1a28bc4706b201b538a33932b6bed260", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "065bf02e-9f55-11eb-abe1-42010a9c0039", "comment": "Malware payload (Poullight)", "timestamp": 1618647309, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647309, "uuid": "08afa2bc-1d85-4282-bdc7-2121e86fa5ec", "comment": "Malware payload (Poullight)", "value": "083119acb60804c6150d895d133c445a", "object_relation": "md5", "Tag": [ { "name": ".NET", "colour": "#FD5312", "exportable": true, "hide_tag": false }, { "name": "c#", "colour": "#6E65B2", "exportable": true, "hide_tag": false }, { "name": "passwordstealer", "colour": "#6E92EA", "exportable": true, "hide_tag": false }, { "name": "Poullight", "colour": "#1E4B52", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647309, "uuid": "7280474b-de3c-4921-995b-1752b3696404", "comment": "Malware payload (Poullight)", "value": "265cf03cb735b976fa1ad587bdc35f0bddfc00f92455c9b804f01468a7e51c66", "object_relation": "sha256", "Tag": [ { "name": ".NET", "colour": "#FD5312", "exportable": true, "hide_tag": false }, { "name": "c#", "colour": "#6E65B2", "exportable": true, "hide_tag": false }, { "name": "passwordstealer", "colour": "#6E92EA", "exportable": true, "hide_tag": false }, { "name": "Poullight", "colour": "#1E4B52", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647309, "uuid": "9d12cd1b-8c76-4ac2-acac-f8a4d61b5d51", "comment": "Malware payload (Poullight)", "value": "b4ea74a0a0afe272478dc50a61925554d1638ea4", "object_relation": "sha1", "Tag": [ { "name": ".NET", "colour": "#FD5312", "exportable": true, "hide_tag": false }, { "name": "c#", "colour": "#6E65B2", "exportable": true, "hide_tag": false }, { "name": "passwordstealer", "colour": "#6E92EA", "exportable": true, "hide_tag": false }, { "name": "Poullight", "colour": "#1E4B52", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647309, "uuid": "745f645f-e95e-45e5-8b68-5e0d88da5415", "comment": "Malware payload (Poullight)", "value": "84aa15f7bbfacf812880420e0251c55d4bff2b9a24f3b134854b03462434b64271f433174cab9b34ba57efd0250d99b4", "object_relation": "sha3-384", "Tag": [ { "name": ".NET", "colour": "#FD5312", "exportable": true, "hide_tag": false }, { "name": "c#", "colour": "#6E65B2", "exportable": true, "hide_tag": false }, { "name": "passwordstealer", "colour": "#6E92EA", "exportable": true, "hide_tag": false }, { "name": "Poullight", "colour": "#1E4B52", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647309, "uuid": "434706c2-7c05-405a-a49e-70a112cff235", "value": "22A34B7BEBED062DE3AE86BBD4B05D910275F1675503DB4A29C430A90A713CC8E51FA3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647309, "uuid": "20b97157-cb29-4b4b-bc14-8af9e56a447d", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647309, "uuid": "5897e83e-311c-4b2b-b617-054ee20d22e7", "value": "1536:mJv5McKmdnrc4TXNPx1vZD8qlIGrUZ5Bx5MlD7wOHUN4ZKNJf:mJeunoMXN1I+E5B/M2O0OgF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618647309, "uuid": "caa91817-64c6-43fa-961b-399a97242240", "value": 102912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618647309, "uuid": "5db712b6-9131-4f4d-9cc7-476ad1f6ead8", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647309, "uuid": "3c39ae27-8898-469c-b374-361f934b58b7", "value": "265cf03cb735b976fa1ad587bdc35f0bddfc00f92455c9b804f01468a7e51c66", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06a890e8-9f47-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618641296, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641296, "uuid": "a2c10c03-b5e9-4524-a3ae-1b756c97f78d", "comment": "Malware payload (Dridex)", "value": "2714c8be7113082c10756da4e5835191", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641296, "uuid": "9dc98cd1-602f-4764-a90d-175833055450", "comment": "Malware payload (Dridex)", "value": "26776aba167a109350c07141f5361079c71abd77c6b930367bc029667c1e0462", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641296, "uuid": "28ad27f7-0d19-4a9c-ab67-e85bd38bbb9e", "comment": "Malware payload (Dridex)", "value": "755e7129a4939c2ccac6f5fbac0d420bc2fa2928", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641296, "uuid": "cca550f9-daca-4b91-9dbe-e20ba802c7fc", "comment": "Malware payload (Dridex)", "value": "a19295bbe7860856fdb568981862788ebb9d6dbc65b8bc67698f4847186737a4e26d5a4b97b30aca7bf2a758f807b6e3", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641296, "uuid": "24349dd5-c497-4c5b-8b06-6bcfbb4102df", "value": "29F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641296, "uuid": "4e229abe-a205-4e66-b051-22d4a47a6294", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641296, "uuid": "b627d75d-a1a2-45cd-8c73-58800fdc2c2d", "value": "3072:Hlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Hlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618641296, "uuid": "0896da16-64c3-4a7a-868e-819efb4f1cdd", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618641296, "uuid": "07b1fbdb-094b-4c96-bdcb-a903ceee5192", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641296, "uuid": "91e2d038-61a4-4677-ab01-d95a1ed551fb", "value": "26776aba167a109350c07141f5361079c71abd77c6b930367bc029667c1e0462", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52e292f5-9faa-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618683944, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683944, "uuid": "b47a8545-6217-4b31-a82c-edc3dea362f0", "comment": "Malware payload", "value": "1c1ea7b012ac9b13731c35680a46b3e6", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683944, "uuid": "61bceb1f-f5d8-4d2b-afa9-055c6cec3a26", "comment": "Malware payload", "value": "267f800a4760ecc9624aa5d28e1deceb998f4fa3de9dc53e6bfd3d346f30134b", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683944, "uuid": "abd622d3-4698-4779-bdac-f88c7776df31", "comment": "Malware payload", "value": "65f30fb564b513467afe5db1b0194e9e3c30a466", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683944, "uuid": "cc0c8ffe-a2e8-4fd1-8fc8-d5e857519e91", "comment": "Malware payload", "value": "ce8d1ea51f48299922f59d1f67447cc60d89e9200b8487306e132d824d543cf16008befc228b7c154f14705068188132", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683944, "uuid": "cdf1069d-3a44-4e65-a5f8-ab3aae64f24f", "value": "CCF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683944, "uuid": "fb50494b-0f90-458b-8d92-a0fd054604b7", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683944, "uuid": "589b752a-8c6b-48e6-be93-99bf1715396e", "value": "3072:tmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:MLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618683944, "uuid": "8479febb-6f5f-44e4-92d5-37d7b83190e5", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618683944, "uuid": "df48c9f6-9677-46d4-92c5-1ab630d1241c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683944, "uuid": "b54189ba-e537-4489-85fb-3bb207088313", "value": "267f800a4760ecc9624aa5d28e1deceb998f4fa3de9dc53e6bfd3d346f30134b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "278d65cd-9f4a-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618642640, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618642640, "uuid": "dedb02b6-2c67-47f2-a84f-634263f7c89a", "comment": "Malware payload (Dridex)", "value": "e795e7f38b728ac4a128c83e397d443a", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618642640, "uuid": "9dd1e01a-66d6-441a-a259-53fe7ddda95f", "comment": "Malware payload (Dridex)", "value": "26aec8ff8430a577a709e4e5ae4d41b5e58e725b05d40060e73cc9fcc3ad9bbd", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618642640, "uuid": "d9ac3628-e347-4a7e-b646-db8a33d38b89", "comment": "Malware payload (Dridex)", "value": "1dfb4e3763b779dc2739345710f53c04ba14834b", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618642640, "uuid": "fcdc4231-64ce-4d54-bed5-992294ec9b1a", "comment": "Malware payload (Dridex)", "value": "db7612483a96b0b4a76504a0163693ab79a09e1a0b8eacaa696353fbd96bd14f81ec92fed3b6b97d3905a3c5785ba5fa", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618642640, "uuid": "07304f3f-d507-4889-86c7-65436409ae4f", "value": "57F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618642640, "uuid": "fdbc6b18-e6d3-4066-8ebe-1594a215ffc0", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618642640, "uuid": "9e492c40-22eb-45f2-8ab9-5d43b72d6cd7", "value": "3072:zmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:CLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618642640, "uuid": "9f0a01b3-8a08-4c2d-8f86-ba1c19bf45a6", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618642640, "uuid": "06dc0a7b-d788-432a-b97a-b7864bf877c8", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618642640, "uuid": "bf183344-7e2c-4374-8665-3cdc15cf6a3f", "value": "26aec8ff8430a577a709e4e5ae4d41b5e58e725b05d40060e73cc9fcc3ad9bbd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a4e32f9-9f48-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618641786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641786, "uuid": "b35b1645-0883-4e65-a769-3f7938f7de80", "comment": "Malware payload (Dridex)", "value": "39e364e3870bf07e85cf733ad9c896b4", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641786, "uuid": "7ad31415-4d6c-44b1-8a68-e172725d036a", "comment": "Malware payload (Dridex)", "value": "278196efd1b431786cf0ba2cc559bbac6fbace95db8aaa0388e90cfc4c588d02", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641786, "uuid": "ce1cd52c-157b-4fc4-8384-c026fa1eb549", "comment": "Malware payload (Dridex)", "value": "3ee6f59f18f82446a1ad4f36e16b15bf2ae2f939", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641786, "uuid": "9b23a3a5-c7cc-484a-a8d4-4d9b4f8db91c", "comment": "Malware payload (Dridex)", "value": "a9d36a4eb03373af98459909374c7315edd850286e5bb0c3389dbe684a178117b9bb43942152f0effc3d7816de1e398d", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641786, "uuid": "8a15b3f4-b768-426f-ae0c-21885427cce2", "value": "16F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641786, "uuid": "b33d829e-4ad0-41ac-b704-50b2859941cc", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641786, "uuid": "72e543ea-f857-47cb-82f1-5a03c17ac8fe", "value": "3072:omNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:xLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618641786, "uuid": "5ab54e3f-e1af-4f4a-83f9-cbb9c073e279", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618641786, "uuid": "a465fb65-0b28-430f-b747-cd875f5c7cde", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641786, "uuid": "f348c7c4-8311-4706-9224-f272d9467aa5", "value": "278196efd1b431786cf0ba2cc559bbac6fbace95db8aaa0388e90cfc4c588d02", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb0e75fb-9f84-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618667825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618667825, "uuid": "6326927e-55bb-4f95-85cf-9259c8719d36", "comment": "Malware payload", "value": "d5891e7de569973bc5057e8bddf71117", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618667825, "uuid": "9b9a4183-7b42-4d32-8cb4-72d39c4307d0", "comment": "Malware payload", "value": "27db0ecfa9628708d9e127967c7ddf36148904345f30ec7bc0d02f2476be6b5a", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618667825, "uuid": "7678cd57-ccff-491b-8f4f-8db0bebdbb5e", "comment": "Malware payload", "value": "e131eb660caa51cea4895945043a0f9fe591a15e", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618667825, "uuid": "851d7809-6564-4cc5-904d-ee711a12496e", "comment": "Malware payload", "value": "792476b877560413a2e3cd87f2833c10cdd1b49813e4fdf207448a7851a1ce08ed8e0cf5dcb0cefb0395123a5c344a3e", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618667825, "uuid": "4921bb82-ca4f-4666-96e7-732529b8e488", "value": "5FF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618667825, "uuid": "c7b7cf68-fa39-4874-88db-5d6ccdf46058", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618667825, "uuid": "b86ab31d-315c-4dac-99a2-c80ed4e98eec", "value": "3072:vlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:vlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618667825, "uuid": "aef716ef-7b43-4890-9660-1a0098dfd5c0", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618667825, "uuid": "69885d63-715b-4346-81a5-fd389c0c0ab5", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618667825, "uuid": "a9531c0e-196c-4da4-b2de-80cc2215d30f", "value": "27db0ecfa9628708d9e127967c7ddf36148904345f30ec7bc0d02f2476be6b5a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c193c0f6-9fcd-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618699162, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618699162, "uuid": "51429363-f8aa-4666-b4bf-5873f1d05f00", "comment": "Malware payload", "value": "3dad3c1cd29f04cd5ae5974100715e93", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618699162, "uuid": "4bf06922-31b8-4354-bc23-50881b892297", "comment": "Malware payload", "value": "27e1d43e9e202a6f7d09cfd619b61d63102884d45db1c73b1429f39a63bf51d2", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618699162, "uuid": "72cd4d5c-cec0-41b1-b5a3-e2a6f8a5b03a", "comment": "Malware payload", "value": "3cb6c7defcb0580a617418d808e42bdd03b05550", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618699162, "uuid": "92c94f77-5189-4e78-936c-ed3690017715", "comment": "Malware payload", "value": "b1e305e0f7d25dc63f7b42d0546ff599a1348483a7dd164fe617ff1e14daf144d4f6c29dac1013de1de8aabf8be0159e", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618699162, "uuid": "4f874947-dedf-4fb5-ac56-051e75fcd8d5", "value": "D6F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618699162, "uuid": "5f40dd62-2562-49e5-aa92-9509d0debb18", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618699162, "uuid": "1e54ce3c-da6d-4f41-bc99-d2efed207e91", "value": "3072:qmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:7Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618699162, "uuid": "c34c8fc2-4d9c-40d3-9ef3-a01a8c1ea8c7", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618699162, "uuid": "c4a790ff-da98-410e-8729-8c176fd32554", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618699162, "uuid": "2ec9f4c6-95d9-4383-af2f-1df47b6299dc", "value": "27e1d43e9e202a6f7d09cfd619b61d63102884d45db1c73b1429f39a63bf51d2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "22cee015-9fbb-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618691165, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691165, "uuid": "3234952a-d4ae-4a43-b5a5-b4f23a85e7df", "comment": "Malware payload", "value": "3b05209c28be04c8eea4975f066657fa", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691165, "uuid": "64da25d2-5939-4240-8c9f-e9ece774063e", "comment": "Malware payload", "value": "27ee5075b26cbcd97d6cf898fed5699ac611f57d12a05935b5cafbeee1092d90", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691165, "uuid": "8347e685-63d0-44dd-9892-ec0f6b4810db", "comment": "Malware payload", "value": "8ef5b7d5b2bdfbb77d9ba556c31e34779d597b12", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691165, "uuid": "1b403163-c731-4cb4-92d6-dabcd42a548d", "comment": "Malware payload", "value": "62f47e637ca2fe8330b799d413e6dadfe6ca2a3b61f29844c0ec5f9dcbc0f29cc7011a81e7c9b710a520889ad5b201f4", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691165, "uuid": "e3eb00de-089b-488f-8916-8f36cd7b0778", "value": "A3F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691165, "uuid": "ae0ddfbe-66b8-4237-a50f-a4776676638f", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691165, "uuid": "39a7d629-3fcc-432c-9a23-b6147a3eea76", "value": "3072:vmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:uLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618691165, "uuid": "2b5908f3-3bc6-4063-8958-13a5a18abab5", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618691165, "uuid": "77e3d408-c2fe-4bd7-a7ff-6af5db725871", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691165, "uuid": "d56133a3-086d-40d4-8f4d-298fb5acff1f", "value": "27ee5075b26cbcd97d6cf898fed5699ac611f57d12a05935b5cafbeee1092d90", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e79303a-9f4c-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618643511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618643511, "uuid": "a66d6fdb-4058-4747-9a9b-10a17eb12c15", "comment": "Malware payload (Dridex)", "value": "0bc7758debc3bedd3a2f5d3b8e369bc9", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618643511, "uuid": "a1ee3541-e1e6-4ba5-9880-1bb8de7d6266", "comment": "Malware payload (Dridex)", "value": "28651f1d9e4f7f9218460b3ca356ebb3e7497ee2e63c619da9b4f1046831c684", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618643511, "uuid": "98668002-6acf-45de-98cc-4df620ac70b3", "comment": "Malware payload (Dridex)", "value": "80fdf0b4a150463083933a2e655c665e12de1451", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618643511, "uuid": "987be4d2-29b9-490e-80c0-ddb6c668c805", "comment": "Malware payload (Dridex)", "value": "f7d9b52760ec88d80a8a53990c19b1bba435c6d5028f0f1f132cdfd6cad730ba696731c6ae4666d9a19bc81a830b2358", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618643511, "uuid": "48b33440-a73f-480f-9d3e-ef0b5ba546e8", "value": "C8F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618643511, "uuid": "6ce8506a-d13c-47fa-8c44-4f47f8471b6e", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618643511, "uuid": "7e86439f-74f8-4e93-9f41-395d6404a266", "value": "3072:LmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:aLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618643511, "uuid": "7ece2811-50fc-44a3-b2da-0a6a26b4a999", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618643511, "uuid": "91daf0e9-712d-4ec5-b829-2b4cafc08668", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618643511, "uuid": "6e177217-bb5f-4e7b-977b-c465ff82c7e4", "value": "28651f1d9e4f7f9218460b3ca356ebb3e7497ee2e63c619da9b4f1046831c684", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dcaa852a-9fbc-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618691906, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691906, "uuid": "6dcace26-c8c5-4fef-915b-0e5f2ac5e48d", "comment": "Malware payload", "value": "169a5de288d458f6557a2957a823bacd", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691906, "uuid": "99285454-c912-4621-a509-ed093f28effe", "comment": "Malware payload", "value": "28fd98a521e16b9f80dde8ee1cc7ee39f2cc95ff29c5d12270a97b21aad5b91a", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691906, "uuid": "578ec7bd-8372-4351-9b5f-01047badc21c", "comment": "Malware payload", "value": "f04204b8e25e65feae48a7c646393630a818041b", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691906, "uuid": "f8d9dde0-9e79-47e4-b840-22b05b314a31", "comment": "Malware payload", "value": "6861df8383b81357e7802dd2edc176d134286c2999cbf77b71d54f7c52ff623bbbaf2a21f5b9a11b077c3c32f6c57913", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691906, "uuid": "50b3bf93-82f5-4b07-a61e-548e10b7afa5", "value": "E0F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691906, "uuid": "5785877d-63f2-49b7-9eac-215a7ee2cb59", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691906, "uuid": "546efedc-5bb7-4bdd-a466-adc46db3f9c5", "value": "3072:bmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:KLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618691906, "uuid": "1fc8458b-fc90-48a2-8bc8-434fef42c1a0", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618691906, "uuid": "49747d97-0887-4359-bfd2-9509463bbfb7", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691906, "uuid": "dfa76b65-0a58-4df7-bbfd-055c16273149", "value": "28fd98a521e16b9f80dde8ee1cc7ee39f2cc95ff29c5d12270a97b21aad5b91a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a2c8a95-9f79-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618662938, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662938, "uuid": "ed381939-461f-4441-8354-0f20ac94cb59", "comment": "Malware payload", "value": "7bd8a8c413939371158b4fe323b1867a", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662938, "uuid": "31afc8ca-933c-42d6-9845-c9611663ca4e", "comment": "Malware payload", "value": "293c643be7e2ffaa62e2cd94f960ec66ff1436e95afc9dd980f2a49681eb3279", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662938, "uuid": "f8a7c183-8dc8-4c2b-af90-98cc525e4986", "comment": "Malware payload", "value": "c6fc97eeaab3964f3d7a9ddaea39826b4e3e711e", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662938, "uuid": "1cb0ade1-aca1-4ef5-8a92-b6cf9882e708", "comment": "Malware payload", "value": "23b1458ec0a9b2a8cf310f7ccd1bcaff1336556042139cd783e9318887cc29d9446a452ccb998da0e7557dc569f37e57", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662938, "uuid": "3f6de795-8a4d-4014-b2d3-fcb1781dc088", "value": "9BF3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662938, "uuid": "b38f79ba-321a-41ab-9e49-d711ced4dcaf", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662938, "uuid": "b5ec4e92-5041-44b2-bfd8-e42ff54a6ed6", "value": "3072:uiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:leAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618662938, "uuid": "6ef81185-b77c-4a4c-96eb-012a5b5c9b01", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618662938, "uuid": "ff733adb-4950-466b-8603-71a326f4a5ad", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662938, "uuid": "0cbce694-4544-464f-a30b-a0d0612f42ea", "value": "293c643be7e2ffaa62e2cd94f960ec66ff1436e95afc9dd980f2a49681eb3279", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "172a8ed8-9fd5-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618702313, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702313, "uuid": "487167af-ca7c-4dbe-a286-5e046b52c714", "comment": "Malware payload", "value": "2f985bfb47e100b4e739258f52cdc3b8", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702313, "uuid": "79a49023-4538-4bbe-9ce2-cf5fcd859a6c", "comment": "Malware payload", "value": "297849d13741248af4095fc0b75ec5496f79bc73782893c8ff7dc5509de4bfc0", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702313, "uuid": "bbe1d461-f7ce-41a7-bd5e-8130cfdfe547", "comment": "Malware payload", "value": "c3174d8b07d95eb9ab48bb614186955dde7bc7f3", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702313, "uuid": "535f3d4e-79e4-4d59-84bf-1271554133db", "comment": "Malware payload", "value": "6c46913b348106fda6e0cd4761a20d4b3550c886118463abfaab3370ae5cce444abd0cf2807161f673ef0e68a8292737", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702313, "uuid": "d00e5b81-39e6-4f44-8237-ece503a49fd2", "value": "6DF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702313, "uuid": "95138ea6-8510-4e63-b0ec-9f669bf09bf2", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702313, "uuid": "9d9dc465-65b7-4a09-af62-c664b1f7cb4a", "value": "3072:wmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ZLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618702313, "uuid": "2b3bf751-2386-4826-9082-c3a70639cb59", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618702313, "uuid": "5d4ff48f-70f3-44d3-9f98-bd732e9860ba", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702313, "uuid": "1c75a11f-c0fd-49c1-979a-5d58e206f051", "value": "297849d13741248af4095fc0b75ec5496f79bc73782893c8ff7dc5509de4bfc0", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fcdacb86-9f9f-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618679505, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618679505, "uuid": "f6c29008-ca67-4181-81ab-a9030aac2ed1", "comment": "Malware payload", "value": "eb4456f57ea60d87c66058626fa06ccb", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618679505, "uuid": "567e5682-468f-4b5d-a4b2-a01c60a795c7", "comment": "Malware payload", "value": "2987f9fbc634d309dc36090cb5819010738fffa2d480d5191c942f81a91a28a5", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618679505, "uuid": "25942340-6958-4397-b6c0-d36da46c1af0", "comment": "Malware payload", "value": "6f7a84b8ce3b1c7bbbfa1ed047e994390a1a90fd", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618679505, "uuid": "ea0fbf3c-cf2e-4089-b1dd-c2f946f8519b", "comment": "Malware payload", "value": "d42998d90f38350c3e1b547f20c0cda931afae30c6d36f53c63c0d97f3b3e6c857bcf049d218ffe431cff17c4ca740a4", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618679505, "uuid": "a3760a39-abe5-4309-adc0-dbe426f482a8", "value": "CCF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618679505, "uuid": "29aaa082-76bc-44d6-b5f5-975efb960711", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618679505, "uuid": "164a76cf-467c-4327-b05a-253352e6a579", "value": "3072:plpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:plo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618679505, "uuid": "3ffce08f-b570-444c-a0ea-ec74c059428b", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618679505, "uuid": "a9fc6c1b-6d64-4d0c-bc69-211ecaccf63e", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618679505, "uuid": "cf4aa026-1a13-4c87-bc2b-c9ffb57b0718", "value": "2987f9fbc634d309dc36090cb5819010738fffa2d480d5191c942f81a91a28a5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bfae958b-9fbe-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618692717, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618692717, "uuid": "4228df64-c8b8-445d-a1c1-21055cf9c878", "comment": "Malware payload", "value": "9748f7a67738a109524f11308ef464a3", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618692717, "uuid": "57e1ac66-0f37-49fd-bb1a-04c6b7ba7c14", "comment": "Malware payload", "value": "29a9ec235fbc153f409044c0e976bbb81b3226bccde0120c54e98e2aea6bab58", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618692717, "uuid": "ebd80df0-7c0f-4fdb-9c0a-61716a9a71dd", "comment": "Malware payload", "value": "06458edd80f16715f372d0880f7496c53f559338", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618692717, "uuid": "79b97080-a909-42d9-9362-d8d945607b1f", "comment": "Malware payload", "value": "caf8d528ac16d03274c4e24ff65483db86c2aa19df9af8daca32eba3acd3be8ca7e612ae9943bbb9e33b72fece3ec9ff", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618692717, "uuid": "460aed47-918c-4d7c-9598-558f3c9f03ca", "value": "5BF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618692717, "uuid": "30352e79-ab26-472a-923a-688c46fa9be2", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618692717, "uuid": "22ed36cc-eb5a-42d9-a77f-737abcb3fe4d", "value": "3072:imNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:zLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618692717, "uuid": "f8c3119e-e2c3-40cb-bcde-881a2576f1e3", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618692717, "uuid": "84ee8e0a-8145-40c3-8626-00d862d36df1", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618692717, "uuid": "b41922b9-781d-4673-9318-5e889af9e71c", "value": "29a9ec235fbc153f409044c0e976bbb81b3226bccde0120c54e98e2aea6bab58", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce0198d3-9f9a-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618677279, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677279, "uuid": "9a662c7a-8fde-4c34-b65d-a63c3684d1a3", "comment": "Malware payload", "value": "63da1890dbc808c2c71459def3505808", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677279, "uuid": "6a2ffc1b-c7b0-47d9-a6f9-3ce702a2b766", "comment": "Malware payload", "value": "2ae7f8bd855370875a000e20a3f345a2d12faedfbb7fe0acf62a86ac5db2f30d", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677279, "uuid": "9e01cb6a-f83a-4a18-8345-7613b334b2bf", "comment": "Malware payload", "value": "233bfd7cde257617d5eaba11c3a2565ea21229d8", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677279, "uuid": "b22eb2d8-3c66-492e-85bf-894cd10dcb4b", "comment": "Malware payload", "value": "1f1d5231874a9f4151146c02979295a8c9911356083569796c25acb3d6da5c7e52c57fe47e9d397ddfe4787b25e0be14", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677279, "uuid": "2a69b468-a305-4f55-8111-44e14c9fbb77", "value": "7CF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677279, "uuid": "2f1c1b42-7fc4-454a-80c9-a5301efce68c", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677279, "uuid": "6a3659cf-c136-4604-a59d-b396d37ffabf", "value": "3072:KmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:bLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618677279, "uuid": "f70fff92-4df5-4e7c-ac9b-48113ca9f3c2", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618677279, "uuid": "8b2fc19c-8d47-4619-b166-e48ab3131e64", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677279, "uuid": "058431f3-7a10-49b4-9087-c7896c099cf0", "value": "2ae7f8bd855370875a000e20a3f345a2d12faedfbb7fe0acf62a86ac5db2f30d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "36094fc1-9fac-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618684755, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618684755, "uuid": "40798f5d-a674-4868-a0d0-0d67d0ad1686", "comment": "Malware payload", "value": "ba273e7ff4bb031305f0a9d5be8b45c9", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618684755, "uuid": "0ac11cc1-1b43-4dde-9c21-818336780d8e", "comment": "Malware payload", "value": "2b00d0599c81305afd2ad5fd274692a368113c70c16d230df9cea9b533b16bae", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618684755, "uuid": "38de860f-c7dd-4122-93fb-b93c18da2793", "comment": "Malware payload", "value": "e78a3e96af30827cd3a8d9f9e74ad2afa0bbc5ca", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618684755, "uuid": "da726d3a-6b07-47a9-8dbb-d742ee41cd0c", "comment": "Malware payload", "value": "e92c91d8c3f237e57532357b91787cd78414a6e92004ed9000be9161abdb1f39712b36dc6556b9b02f5359a3e3e9968a", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618684755, "uuid": "52dcbf10-d5c1-49d6-acf7-501a1c6f207e", "value": "07F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618684755, "uuid": "05845449-8fe9-4413-9bc0-97870fe9ca13", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618684755, "uuid": "07c53aa5-6afe-44f8-bdc4-7179a3e1d28e", "value": "3072:AmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:JLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618684755, "uuid": "6ab3f3f8-50f8-46e5-8e4f-7c8ecb5082de", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618684755, "uuid": "3fed901d-e8bc-446e-8635-06afd06373d2", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618684755, "uuid": "cd77f9fc-b453-47ae-af8c-c9e68685d3e0", "value": "2b00d0599c81305afd2ad5fd274692a368113c70c16d230df9cea9b533b16bae", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4044e83a-9f90-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618672746, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672746, "uuid": "9eb1990e-acec-4250-93e4-aa71b2e5ac20", "comment": "Malware payload", "value": "b24321cb208d09a634271664bc3ee0db", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672746, "uuid": "8c897555-9ffb-408f-bd78-8d83e9aa2843", "comment": "Malware payload", "value": "2b1f0edeab1c1b8c53dd8a3883cf22f8f25c13d57f0b9f57101cac974a7327ac", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672746, "uuid": "6cef89c5-42b1-45df-90ae-c95db7b43de4", "comment": "Malware payload", "value": "08a6b3fa8fca651dabb1dfe835a524b9e9936d31", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672746, "uuid": "76824818-6fa9-49d4-94a9-0d4ff05c5565", "comment": "Malware payload", "value": "53da14713ebfafbb546e5721bdabbbf4e11fa6d792461b3b09893151cf12e970a3c1111dff6d1eb98f9b26da1455bcbc", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672746, "uuid": "d5b3fce5-803e-4f21-87cd-6418eb03f5f9", "value": "86F3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B49671FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672746, "uuid": "6e03863e-9f02-4aee-a18d-4f18763f9751", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672746, "uuid": "363b654e-1917-451c-b26e-56fc3d1a1adc", "value": "3072:rA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:r3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618672746, "uuid": "cf1f982a-fc04-4f71-991a-38ca6dd12294", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618672746, "uuid": "0e8666be-2300-4e2b-baa8-0fe24de350d2", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672746, "uuid": "513b542b-cacb-4028-9ea0-16c26be7076b", "value": "2b1f0edeab1c1b8c53dd8a3883cf22f8f25c13d57f0b9f57101cac974a7327ac", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f6bad487-9f92-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618673911, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673911, "uuid": "39eb3a66-a1b2-42fb-a204-20df089b9ea7", "comment": "Malware payload", "value": "f8763233e8bf2519a343f357416756ec", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673911, "uuid": "fb7ca212-4801-4194-b3be-19586931d976", "comment": "Malware payload", "value": "2bd9e2d839e479cd7e088678e7c4f570bc9579a16fed335b3581623e2188fb50", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673911, "uuid": "10ca516f-9a9e-4233-8905-16b2aecaeac1", "comment": "Malware payload", "value": "9474d4be875cf6488d6e15363d28097aa4be087c", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673911, "uuid": "5874799d-2a82-4f20-9180-a3b2f41285c2", "comment": "Malware payload", "value": "d908d0f181fee738726e7b6dff9b50b607a7c0621f812df3509d6c3c9385ccf5ed1e53e76652a51fea5b534165f0719a", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673911, "uuid": "b07ebf73-2721-4820-ad72-5ec4826c2a1a", "value": "AFF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673911, "uuid": "fd98c9d9-22b0-4ee4-9642-17b00bb5d21f", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673911, "uuid": "aba4c2c0-b21a-437c-8fab-3bdf32b7f1a9", "value": "3072:amNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:LLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618673911, "uuid": "89b5854e-24a9-4aa8-8a46-0ffd95590b73", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618673911, "uuid": "f4437cb2-a090-4b4d-9910-950c2d48a9fc", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673911, "uuid": "e0b84943-336f-4d3c-9d83-dff1e10b6a94", "value": "2bd9e2d839e479cd7e088678e7c4f570bc9579a16fed335b3581623e2188fb50", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "058908ba-9f58-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618648596, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648596, "uuid": "931805c8-99f2-40e4-8016-d944d55f3b16", "comment": "Malware payload (Dridex)", "value": "99f0fa4e78c7d0359438004ccc0a4ae6", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648596, "uuid": "dccae6b5-5959-4cd7-9de9-4bfa83d960bb", "comment": "Malware payload (Dridex)", "value": "2bf1d1a63a001bbd8bff74e1f10195ea6f3e9d48a7b76cd5ace2ab4d68d79471", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648596, "uuid": "b57a8235-cf15-4aeb-80c5-53f2a5452e18", "comment": "Malware payload (Dridex)", "value": "05912df46daf2989bfa28409a9c41b8205ce8896", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648596, "uuid": "38ebb5ba-60d8-4679-a13c-475aec1396e6", "comment": "Malware payload (Dridex)", "value": "e343da8679e443b61fd6288e902580046075e57797c1ce405aec026e916e0cd14337a3d602621dd086cef5b2ca4740d0", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648596, "uuid": "50b15ed8-ba9e-44e0-a2ad-34d3b2d01ce8", "value": "DAF3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648596, "uuid": "a4f6a21c-9e35-43f6-9fc6-8991278cac09", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648596, "uuid": "75b4d7e5-07df-40e0-b9a7-0751827487db", "value": "3072:emNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:vLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618648596, "uuid": "6bc0664f-fc7e-4d88-bedf-35fd52b3170f", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618648596, "uuid": "04516d3a-e495-40d0-be3e-d1a20ac20079", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648596, "uuid": "c42bcb2b-f47e-4a42-8de4-14eda8632f6e", "value": "2bf1d1a63a001bbd8bff74e1f10195ea6f3e9d48a7b76cd5ace2ab4d68d79471", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a091054-9f96-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618675447, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618675447, "uuid": "c4287d94-224e-41ef-9d4f-5dd2d8a3b6cd", "comment": "Malware payload", "value": "3da8653a57d2eae3df8fff4941f5746e", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618675447, "uuid": "37e9a0c2-a443-4944-8af4-042b2162a1cc", "comment": "Malware payload", "value": "2c8a9e444280dc16ba674f29e0c577c0bc26873309744a0b82ae002c3ada58f5", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618675447, "uuid": "79fe9c18-b19b-4980-af53-15a95f7ee25f", "comment": "Malware payload", "value": "b32900653751f517ad7e6ab2766b5b438413e9f2", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618675447, "uuid": "55fe5239-6a35-412d-993b-4e893c5f0e93", "comment": "Malware payload", "value": "c16ae955246a61066d2f2ef4d3ad2b326c60cf90c07062b06e8c31a807d8e87324333d10f47d1329dde78ffa16bed3fd", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618675447, "uuid": "d388548c-239b-40f4-be11-64f2624f2552", "value": "95F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618675447, "uuid": "9bff27fd-f501-4ea7-a26a-493ae302be20", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618675447, "uuid": "4a20dd33-ad2c-42b9-acbc-4fb24edc7fb1", "value": "3072:4lpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:4lo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618675447, "uuid": "0fbf51d1-2c79-4344-a8c8-94c097f2d304", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618675447, "uuid": "e35584d3-e560-48cb-b9f4-0f0e62e9d749", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618675447, "uuid": "5870f495-78b4-41d0-a3a7-6dc95764857d", "value": "2c8a9e444280dc16ba674f29e0c577c0bc26873309744a0b82ae002c3ada58f5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "639caf89-9fc8-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618696857, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618696857, "uuid": "cdc8d0ff-24be-43c0-8965-19fe0478b28c", "comment": "Malware payload", "value": "67567e9d1fff5b4e84590e7015808a10", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618696857, "uuid": "66a538f6-49f7-4481-bf0b-dcb8abef0a9f", "comment": "Malware payload", "value": "2cc30388059117971d742a4f9af8c41ab4fbb90c5150302ecf5c846d1b1b6530", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618696857, "uuid": "a3cbf336-fd8a-4089-bffb-26267490902f", "comment": "Malware payload", "value": "c24c1e83515aaf933e5da69b46fe4934e55bfb1b", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618696857, "uuid": "a92094c6-4ce0-4530-ba57-99d256c177a4", "comment": "Malware payload", "value": "e7697820011a82bf77594cda4180e43501b571e050124c7cfedb3bd223310a6c1e88314b848f683d47074a92d770ad9f", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618696857, "uuid": "8cb22201-95a8-48f4-b586-d1424935a8ee", "value": "69F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618696857, "uuid": "78bc0614-e2a4-41a0-819f-b7e3a5357f11", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618696857, "uuid": "2232e065-c30a-4feb-b0de-9646ef00e1d9", "value": "3072:4mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:hLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618696857, "uuid": "63c56b6c-5662-4aa5-957e-2f1128e2e647", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618696857, "uuid": "534177dc-9f68-4a4a-8772-32d09d06cabd", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618696857, "uuid": "0295bdae-93db-4594-8e8e-dd9e64543adf", "value": "2cc30388059117971d742a4f9af8c41ab4fbb90c5150302ecf5c846d1b1b6530", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a81d47bf-9f13-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618619233, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619233, "uuid": "920af6c5-fd8a-4dc1-987e-2bbf5d2088cb", "comment": "Malware payload (Dridex)", "value": "788cae7d3d7f6c6a2adb7d0829f29ae5", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619233, "uuid": "4e65d424-4ddc-4bc0-b048-38db9b635070", "comment": "Malware payload (Dridex)", "value": "2dc6a1da03e371be6186ebff2dc43124a71a807df6e5dfd76fc175fe38ec742d", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619233, "uuid": "20b5c245-47b1-4ad0-973c-7fb76878351e", "comment": "Malware payload (Dridex)", "value": "607d87ed005ef0717f4f21996782c6c799cb2998", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619233, "uuid": "ef3e979a-692e-4816-8dc4-81670e84375f", "comment": "Malware payload (Dridex)", "value": "4c38c2d53e81da0890eafe988f93cb3a43d59504ef262f0945a569820a5fcde42eec59e8839acb8c24a04ab10d388f01", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619233, "uuid": "68880925-4bde-4fe6-ae2a-d2c80867c9f3", "value": "EEF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619233, "uuid": "b00d0588-c26a-4944-8aff-789f1b515cd8", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619233, "uuid": "625084ec-e7de-4d0e-8eba-9feb3c962400", "value": "3072:RmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:gLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618619233, "uuid": "b4c55183-e88c-477a-8fb1-68c6aef2651a", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618619233, "uuid": "212039f6-7024-4af5-b926-d16c81721a62", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619233, "uuid": "5a15f990-d8f9-4b4f-af24-cb3871520b44", "value": "2dc6a1da03e371be6186ebff2dc43124a71a807df6e5dfd76fc175fe38ec742d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29c15066-9f91-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618673138, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673138, "uuid": "d8f6df6b-104d-4914-ace1-216c3bde9540", "comment": "Malware payload", "value": "6e28e25c085c19f66da9f1c8ab21409a", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673138, "uuid": "30346fa8-2ab0-4d14-b30c-b688aff782f7", "comment": "Malware payload", "value": "2e06cd7fff57958dfe4386f829c48f33ca85f074e67607d3508ed5bd02746d74", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673138, "uuid": "fd8d5837-403a-4d18-aacf-8a707cd21a94", "comment": "Malware payload", "value": "698cfd9f3bb52dc0a8ec65b64d34f6aef2e4685c", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673138, "uuid": "fe8b1023-4b15-4615-a6cf-1de8699cf3e8", "comment": "Malware payload", "value": "a7a99c53009016852fe7c895b69c73f6c5ac2f5484cc6737da93d6a92746796ee8ad660dfd047219d290453ba5e49a81", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673138, "uuid": "c87e7a6d-6b8f-4155-b4f0-f66605fd8cc2", "value": "F4F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673138, "uuid": "820534fe-2478-4054-814d-10f7bc2bedeb", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673138, "uuid": "215f7ae0-c048-4a05-9b3a-494003425efa", "value": "3072:OmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:/Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618673138, "uuid": "468d2908-ab39-4985-bcc5-883fa5ebddd1", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618673138, "uuid": "85491e12-e098-44ff-8049-254946ba08da", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673138, "uuid": "329fe385-5dfc-4d85-8496-6a71cdd38e48", "value": "2e06cd7fff57958dfe4386f829c48f33ca85f074e67607d3508ed5bd02746d74", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bbadc867-9f7e-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618665222, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665222, "uuid": "e8f02429-5611-467b-9489-37e59fdfd143", "comment": "Malware payload", "value": "644a86df2f8a8b43ec72b34292ee10b8", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665222, "uuid": "a664bfbb-459b-4a8d-a906-f2403de73aa4", "comment": "Malware payload", "value": "2e084a019eb7a5aee6262a35e85dc6d56216310c23897e5967db7be80752d0b7", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665222, "uuid": "695123a1-2d2d-47eb-bb08-e731177ee06c", "comment": "Malware payload", "value": "d7ba8f15446252b0964b693bf7f274f9ca00ef61", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665222, "uuid": "2de09099-723a-4da7-a197-35917d768589", "comment": "Malware payload", "value": "881d8106275da40763515e331a7656bc7296ac974e590b45c11a0c4d423ece0ca181379ad9d0ab4f1a054f5134471f82", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665222, "uuid": "b87a6bc4-a232-4cb9-9183-62677f5982c3", "value": "DDF3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665222, "uuid": "96291fb1-8a5a-419d-8d8a-1a6921146bf0", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665222, "uuid": "fb9a38ac-dcbe-4b49-acc7-6f199f7469a6", "value": "3072:miFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:deAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618665222, "uuid": "6f7525e0-8854-47ff-b218-24cec43e2a52", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618665222, "uuid": "5a6854c8-b6f2-449c-9f60-cea9f93e238a", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665222, "uuid": "e2612a99-f066-41bb-a35d-5c89025131dc", "value": "2e084a019eb7a5aee6262a35e85dc6d56216310c23897e5967db7be80752d0b7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58ef73fc-9f35-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618633703, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633703, "uuid": "3a4a4858-249f-4a20-8299-84aaf4d4c9ce", "comment": "Malware payload (Dridex)", "value": "3433fcb2ddd4aa5a8906527a17582768", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633703, "uuid": "958ac900-e6fa-42cc-a298-47856fb8a8d7", "comment": "Malware payload (Dridex)", "value": "2ee886bea9ae61f244c00ea71c2adc636991f5e2c811adeb905d2449c179e55a", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633703, "uuid": "ec7ffa1a-337d-4b51-9f95-05bf6b1ce0ac", "comment": "Malware payload (Dridex)", "value": "07bfbf05f09ae471cfdded91791f00ab68fd8e77", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633703, "uuid": "152f4fb7-8266-4d4c-bb7d-83fe95a62290", "comment": "Malware payload (Dridex)", "value": "807a6f8f4a458922769475383c12ec1abb7af48ac425dc9623dce75a6324812be5a1bc6ae31131b484cca0796d17074d", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633703, "uuid": "ac078149-a6d2-455f-a539-06510f54971e", "value": "84F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633703, "uuid": "752e8a29-7a43-49b2-8893-6be339ed00d1", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633703, "uuid": "d7951848-c75e-4af7-8888-f1a45d03c476", "value": "3072:/mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:eLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618633703, "uuid": "ae315f8e-ec27-4fba-bd78-5dc0b651cc15", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618633703, "uuid": "9c6d31d1-8b2a-4854-93da-bb0b8b3dcbae", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633703, "uuid": "8d1b7ecf-8c55-4470-9058-fbb0342bcc1f", "value": "2ee886bea9ae61f244c00ea71c2adc636991f5e2c811adeb905d2449c179e55a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c8d3567-9fd4-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618702107, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702107, "uuid": "fca5ed87-b78c-4457-b3ef-93569cc07f41", "comment": "Malware payload", "value": "f34e4d266f9f50af7f913942546122bf", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702107, "uuid": "d109bf14-629b-43f7-9345-1b7a4e8c77c9", "comment": "Malware payload", "value": "2f58c63160ba891e04b68056405ceaf9652e658c9631a5c9966bf9c67cd4504c", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702107, "uuid": "8186b5d4-e126-4306-84d0-7ffd7dbabbd3", "comment": "Malware payload", "value": "dd290880d7cfbeb6090aad54d516e7364eac8116", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702107, "uuid": "9dd0668e-2fc8-4180-a781-825cb582925b", "comment": "Malware payload", "value": "5be020090f84779940661328a9b80faf4f3e4dec78aff71e0b80f7cea216739a9f3f0feea2009a3d4892922373264637", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702107, "uuid": "4e4aa26f-640a-4c05-8367-bbf0165e924d", "value": "2BF3DF08D1CFCA46E00B69700D9A761BB79839812F7C8EA8B49671FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702107, "uuid": "0c198d1b-6bb8-4511-96e6-387fa05becfc", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702107, "uuid": "97a68913-4392-4ab7-b967-e3687155cf7f", "value": "3072:hA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:h3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618702107, "uuid": "18b0e94b-a6e6-42a1-a00b-c443ab8798e9", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618702107, "uuid": "92f94569-d88d-454a-89e7-a1721f6bc74d", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702107, "uuid": "cdf86b6b-b9b9-4503-92bc-2fc0ce4dbb7e", "value": "2f58c63160ba891e04b68056405ceaf9652e658c9631a5c9966bf9c67cd4504c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6e2e1a4-9f92-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618673885, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673885, "uuid": "1f999c5d-92d3-49f8-bd5e-7a5ebe05bd52", "comment": "Malware payload", "value": "05496ebaa1d64c970178fc0fb2e7ce7e", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673885, "uuid": "9f84db4b-3377-4a53-b4c7-3453daf3226b", "comment": "Malware payload", "value": "2f644d74fbe5b18f038308e1de696bd8b441b90a1ca9b2e6d4ff7795dfdd7500", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673885, "uuid": "e32b9e5f-579c-4606-ac84-c99b80b62651", "comment": "Malware payload", "value": "dd0c0fdabe5c02984fa6db9347df63f41c4880de", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673885, "uuid": "fa5e9035-2559-4386-a2d1-f82db41ff1ed", "comment": "Malware payload", "value": "ee867bc3abae92884d78be5cfe0ccc7e2a5871362a3391585ce90c0d3ee728f38f542a7fdea95049c06a56dbcea025b9", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673885, "uuid": "0abed9c0-9340-402e-9111-c2b27bbf7cf6", "value": "B3F3DF08D1CFCA46E00B69700D9A761BB79839812F7C8EA8B496B1FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673885, "uuid": "7998f95a-8a30-4742-a1b1-0ccb14d06a22", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673885, "uuid": "e68b3054-68d4-4673-a468-f4520e09f1de", "value": "3072:BA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:B3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618673885, "uuid": "4034b0a7-b4b1-4831-b512-df0d1bbfaab0", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618673885, "uuid": "b279b06c-9443-41c1-852d-e8db61e4c929", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673885, "uuid": "380014d4-0158-4f4f-8dbe-c56378e6383f", "value": "2f644d74fbe5b18f038308e1de696bd8b441b90a1ca9b2e6d4ff7795dfdd7500", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5d83b57-9f76-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618661884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618661884, "uuid": "568fa3cb-f090-47c5-82c3-aec7c7fc9d62", "comment": "Malware payload", "value": "b9fa6eb31d51733b4d64898f3eab5a73", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618661884, "uuid": "83d2f62e-8812-469a-a286-4d6f5e6d10de", "comment": "Malware payload", "value": "30252cb9a2165cba602338c172f516205ba416fb9d17fcaa3a2f1420267da0d8", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618661884, "uuid": "9b7b8ea4-385b-4241-b4bd-41b25bf44c3b", "comment": "Malware payload", "value": "c641b92d93e86ea26cb2c6b772cb8020c96344da", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618661884, "uuid": "3a82408e-c62d-480a-b95d-edabc8ee946b", "comment": "Malware payload", "value": "b3c133834da6ef00445fc385aa05eacd3ffa5e71288c3acb7261f0ffa59cf2b1b35fcf205c12bc7d4171f8122ba59220", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618661884, "uuid": "c130a7f2-9154-435d-8e41-5e5e79465027", "value": "E0F3C088CBB3E4E6EFB3937966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618661884, "uuid": "756066b3-51bc-49a3-899c-6d72a031ce9d", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618661884, "uuid": "bbf6581f-ca35-4705-8049-53456a954992", "value": "3072:4mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:hLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618661884, "uuid": "907bd178-8d7d-4fee-935b-fb15a8c47fcd", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618661884, "uuid": "9e1361a4-0793-4215-a2ee-9ffd97038d5c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618661884, "uuid": "0e8c5c0e-f3e7-4cbc-82a0-8a6917591e39", "value": "30252cb9a2165cba602338c172f516205ba416fb9d17fcaa3a2f1420267da0d8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "549874d7-9f66-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618654741, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618654741, "uuid": "4efccb26-36a9-4ddf-9476-71079ac4a182", "comment": "Malware payload (Dridex)", "value": "ac338aafbcf78da4a14b5000b682c9a7", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618654741, "uuid": "69aeaecd-21e7-44c9-b874-56c0f1c6a861", "comment": "Malware payload (Dridex)", "value": "30700774dd00fb9b66198bfc36bbd9926014fee5a5a5e97e902a919ed8c2304c", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618654741, "uuid": "9263d7c8-b50d-41a8-87fa-526ade5bfed7", "comment": "Malware payload (Dridex)", "value": "733e88deefcd824eab41a09e3cd261b8805bbe75", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618654741, "uuid": "d8c16304-c1df-4715-9a08-449e6462f816", "comment": "Malware payload (Dridex)", "value": "8124aebd66375f904a321f8e58c90b6b773e379ef9ffd32aa88ce61f0f0d9ce0765d019d24fc8e0f75e0975c5cb1a49b", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618654741, "uuid": "148f2beb-0414-4008-acc2-33b66d2e03b6", "value": "B3F3D088CBB3E4E6EFB3D37866F85E1B561174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618654741, "uuid": "f35be5d7-4529-44ee-8c19-4e344645fff8", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618654741, "uuid": "916d5fe3-8046-4cae-a89e-93860ef2bbdd", "value": "3072:JmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:YLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618654741, "uuid": "d15ba6a8-6129-4e63-a238-ef6cc6ca8263", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618654741, "uuid": "bec79b8f-c859-42a2-8725-f3416a515015", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618654741, "uuid": "911957cf-4daf-445a-82b9-68116fa68ba8", "value": "30700774dd00fb9b66198bfc36bbd9926014fee5a5a5e97e902a919ed8c2304c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "336329bc-9f4c-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618643519, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618643519, "uuid": "362bfa4f-4c51-4453-8671-b897cd24e3a6", "comment": "Malware payload (Dridex)", "value": "1ebae982f0ba5477f22d261f1f299845", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618643519, "uuid": "4f8ecf09-8323-48d6-8489-52a0086c5c6c", "comment": "Malware payload (Dridex)", "value": "30a6270d00cb87c407a22dc40ec55dd1e01acec4e771c4d6ed95f6fa71f41f0d", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618643519, "uuid": "f41b3817-59fa-42d8-b7b8-bb8fe243ce96", "comment": "Malware payload (Dridex)", "value": "e985064e818f04b741faec00fb36a79937ea8b5b", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618643519, "uuid": "27f12279-7c60-4cd4-8fb9-acf93954aff9", "comment": "Malware payload (Dridex)", "value": "6455ce38549015c12a275a5218b26dfd41865b989b966631d1beed334ae326ab58f5ee3a778838fca4cbe9a80153fd89", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618643519, "uuid": "0cb02ffa-c9e9-48ea-93bb-9c050a5a9b65", "value": "33F3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618643519, "uuid": "7e4dd64e-05a1-4f9e-8ca8-109e4040101d", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618643519, "uuid": "58e69b65-d121-403a-99ce-fa588a480290", "value": "3072:biFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:4eAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618643519, "uuid": "b5ded3a4-fc32-4153-be94-e568a687ebb8", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618643519, "uuid": "d0897fb0-b38f-44eb-8446-27a2afa1fe8c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618643519, "uuid": "3bc647a6-f246-41ab-bebc-b7a39ea2fe59", "value": "30a6270d00cb87c407a22dc40ec55dd1e01acec4e771c4d6ed95f6fa71f41f0d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b6f9775-9fc0-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618693434, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618693434, "uuid": "ec1e050b-d0b7-4498-8c2d-966b5f0913ed", "comment": "Malware payload", "value": "a66c166bc100a3d715239440d766a9dc", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618693434, "uuid": "e4aa67d4-7949-44df-8bed-5ae479228a51", "comment": "Malware payload", "value": "311381d29b75034c9e3427d5b69cbe87a9d76e80764b2dbb7538442f4d083dd8", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618693434, "uuid": "792b3cf5-4def-48bd-8966-221bae6b9e1d", "comment": "Malware payload", "value": "304d58515537df3d06023dcf332e81859ea05375", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618693434, "uuid": "10549961-91ed-4a1f-8f93-ce18251a3d34", "comment": "Malware payload", "value": "e5c6fb680a7db6cc51858592b01879c8c60610d0cc82e7e0e3926b15c6df75beee28966a8f7170ce6de61ed869e2be76", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618693434, "uuid": "ec2e967c-5be4-4184-ac22-0e0468f73bf4", "value": "33F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618693434, "uuid": "6753642f-2176-4a9b-aeef-4284074fdc89", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618693434, "uuid": "3844f1eb-8112-4a8e-80c9-01db4e316204", "value": "3072:dmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:cLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618693434, "uuid": "696c9449-3de2-4cda-9ad1-d89791db08f1", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618693434, "uuid": "fae72141-c676-47b3-af2f-52a408df726b", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618693434, "uuid": "4808f3b8-cb85-40be-80ce-9c9ad57f26b0", "value": "311381d29b75034c9e3427d5b69cbe87a9d76e80764b2dbb7538442f4d083dd8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "282330ea-9f1c-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618622884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622884, "uuid": "973d6b31-1ecd-4e46-889b-039843006d13", "comment": "Malware payload (Dridex)", "value": "674ec3c04555670395ca169546af19dc", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622884, "uuid": "d64dea1c-a2cc-4564-a448-1d4859497028", "comment": "Malware payload (Dridex)", "value": "312042ea0f8dafeec2498755356e8a12ea84b0c99997afb207184dab1ca270fe", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622884, "uuid": "48f91a1d-9387-4361-99fa-d5a721b991e3", "comment": "Malware payload (Dridex)", "value": "77e61653e88f75a3bfc85e74beee8f7b0324109b", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622884, "uuid": "943d9785-a694-4cb3-b107-efb03fa5745a", "comment": "Malware payload (Dridex)", "value": "4f9a29c98d1cf4ee345b11d5e000646fadc83f2e6141886d1e311f1f75b7a2bbd12794365ba0646cb54e2208fb40fdc1", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622884, "uuid": "6bbed985-83ab-4762-9794-5e7e8d7dedfc", "value": "A1F3E00AED9FE988E85C51F1CA4D363EE9713E361B5BDD08C584AEDDC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622884, "uuid": "78291a4b-2b1c-4a56-a861-45b25d07d380", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622884, "uuid": "ac94e53a-9e3f-436b-8909-17d43e685319", "value": "3072:BiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:SeAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618622884, "uuid": "417bfab1-3e43-4410-b495-41f5882b038b", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618622884, "uuid": "4461e323-530b-464e-9600-b08009a43467", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622884, "uuid": "af8ac67f-53d4-4f84-97ff-545fc9f4a437", "value": "312042ea0f8dafeec2498755356e8a12ea84b0c99997afb207184dab1ca270fe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90282f5e-9f2d-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618630360, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630360, "uuid": "e93a0b8f-80d9-40a5-bc1a-84076151f7c1", "comment": "Malware payload (Dridex)", "value": "e303ff0962805cf36c36a912c73e95f2", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630360, "uuid": "b4084f8b-3f13-46b9-97bc-bfe1e91cb6c4", "comment": "Malware payload (Dridex)", "value": "31250f070bce414691f19bc03b7fc26c5eb54665edd5ff385a8e37634c7a647d", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630360, "uuid": "44dc556d-33d4-4a1b-aa98-29182786d03f", "comment": "Malware payload (Dridex)", "value": "a01f78d3c4e93f6d3af77d12bde13c463fa302e6", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630360, "uuid": "e786e4ed-b80c-49ba-bc99-c7962f0775cb", "comment": "Malware payload (Dridex)", "value": "e9a3aa207a08e59499c830ff36b1ef959fefefed0ac5cd68d6f64073ba60966a6d1e7318c8552252db77fee0089c26a3", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630360, "uuid": "d193ec53-9144-4e5a-9a56-106485b3581d", "value": "9BF3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630360, "uuid": "74a9feaa-1b5f-469f-b6f8-b45ccded90a5", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630360, "uuid": "f47106ec-7c78-4135-8be8-aea4c3723b9f", "value": "3072:6iFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:5eAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618630360, "uuid": "b88e37fb-20eb-4cd0-9e88-f85f8c35dbb4", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618630360, "uuid": "f214da5a-cb61-40fc-9fa6-40d53e66f74b", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630360, "uuid": "edb1ae54-9231-4867-a6d7-a66558d75507", "value": "31250f070bce414691f19bc03b7fc26c5eb54665edd5ff385a8e37634c7a647d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "feaf0dbc-9f14-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618619808, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619808, "uuid": "95528460-641c-46c8-9cd3-4c2cc9b09a38", "comment": "Malware payload (Dridex)", "value": "0746edcfaede1cb137d27659a0f39fbc", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619808, "uuid": "26903615-59a3-4826-b621-548704919c4e", "comment": "Malware payload (Dridex)", "value": "3136053f2ba4f95eee5db1d9009f882b9a1b56eafbb47445e31efe7d1faafb39", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619808, "uuid": "38b6042b-2ba5-4682-8e57-1fb8f4f26dd0", "comment": "Malware payload (Dridex)", "value": "94082c347167d9000bd765e40d7809245bf54555", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619808, "uuid": "1d5750ac-9941-42da-8f90-ca8756ee28be", "comment": "Malware payload (Dridex)", "value": "48a3835023a4a9ba65f3e455a9256fe75fc2d11eb06cfa930b03225b78163c714d3d15cae434702160be58ca521d8868", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619808, "uuid": "c5e201f2-28b3-4144-8319-5444d6087b34", "value": "F1F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619808, "uuid": "b43d7202-22b0-43a2-8f15-b355f85d87d8", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619808, "uuid": "407b7ced-4c85-4839-9c77-2e4f18c84ad3", "value": "3072:fmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:+Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618619808, "uuid": "a825b274-83a6-49c8-b9b9-d1b27b53be37", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618619808, "uuid": "1148d2a8-8247-40ca-b4d0-da7e42c04d2a", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619808, "uuid": "9d174839-4dc0-400a-8da4-ea00be580b7c", "value": "3136053f2ba4f95eee5db1d9009f882b9a1b56eafbb47445e31efe7d1faafb39", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c699b17-9f40-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618638299, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618638299, "uuid": "82547a92-1751-4275-ab7b-8e07ba39bf57", "comment": "Malware payload (Dridex)", "value": "05c951d70c7ca6392043aa6b6e15848e", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618638299, "uuid": "e70fbbc3-4faa-4ce3-ac7b-7a647317581c", "comment": "Malware payload (Dridex)", "value": "3207a9abdb795555db2ef803c4fc2ea9758679a5a31c979ba3936079429fac69", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618638299, "uuid": "0a72ce42-b89e-4e66-b633-ad010b0c42d8", "comment": "Malware payload (Dridex)", "value": "77ee5977d7c7f74eee4815d5ecc50ef206f4dbbf", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618638299, "uuid": "444f5cf4-f323-4bab-bd05-f600af433ddc", "comment": "Malware payload (Dridex)", "value": "3be9542b161e6dcc33e576ae226b83a0cce9826c4c84e686f80fd0fcd291ba2059f154a3512adfa94759f02c9eccf585", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618638299, "uuid": "c49bd363-f241-408d-9e96-4edae3a0fa78", "value": "C1F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618638299, "uuid": "5eb4e044-86e3-4cab-84b0-6ee9c5b0084b", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618638299, "uuid": "e2cd85ef-9186-48ec-936a-e69447820d33", "value": "3072:2mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:nLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618638299, "uuid": "d9f92877-f018-4477-abfc-0aa9435d6510", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618638299, "uuid": "c87835f0-dc41-4c44-94e2-5f99a98f91d3", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618638299, "uuid": "f7dba5f6-118a-472b-b347-1883ffd16755", "value": "3207a9abdb795555db2ef803c4fc2ea9758679a5a31c979ba3936079429fac69", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9a619fd-9f79-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618663045, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618663045, "uuid": "6f0799a3-5178-4320-bc42-3769979f6608", "comment": "Malware payload", "value": "c130470dfb4b798cb707d52fea147110", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618663045, "uuid": "c59eea84-b91e-4cfe-9aa8-01e39cf6992f", "comment": "Malware payload", "value": "3255af6486bf0b971bd1c50846ea178c8827c66547b79455029e4b53cd30dfc3", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618663045, "uuid": "d0c4b0fc-dd41-4678-9e0f-cd00d2c12c2b", "comment": "Malware payload", "value": "f314e0287d2796561410f35047f49c6796f939e0", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618663045, "uuid": "b9ac75c9-1fa4-4e6c-afdc-6b51ad9d2955", "comment": "Malware payload", "value": "7df8f35da8f9ed262de8f25903e4ffff9d7aa32ea0f57b30fffa6a2213074ff978f1985d24cb685c7ce116cd895a46b6", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618663045, "uuid": "7071cc2b-678d-4528-90e1-34982f851ffe", "value": "97F3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B496B1FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618663045, "uuid": "2ce77038-e33b-4361-8098-4f94bd3127b0", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618663045, "uuid": "e2c4091f-2815-4070-9ea3-3e1b6b4fa25b", "value": "3072:rA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:r3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618663045, "uuid": "152add97-252d-4022-9480-7059f3efcf98", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618663045, "uuid": "fe2eab83-5469-4a8c-8b82-e3a4d595762e", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618663045, "uuid": "1931fd81-a19e-4c06-bfa3-f82ad9af06ad", "value": "3255af6486bf0b971bd1c50846ea178c8827c66547b79455029e4b53cd30dfc3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d677fbb-9f5f-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618651777, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618651777, "uuid": "db72ffd3-72f4-4b64-ac25-8950932c6cb8", "comment": "Malware payload (Dridex)", "value": "7c0680c5d54b95615cda8e39a7b492d5", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618651777, "uuid": "6481eba4-0122-478f-aec3-6bfa2c78a231", "comment": "Malware payload (Dridex)", "value": "32b09ebf424e02d55478ddca6ba4080046df107d4e9a76abc83636146b95ce8b", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618651777, "uuid": "0abe3acc-a424-48ba-b78b-5e2a0cf09a09", "comment": "Malware payload (Dridex)", "value": "05175a5dceb5ab7ae32fbb7e875e7a33c32ebff6", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618651777, "uuid": "b30dcddc-db5e-4285-b204-c28ff46abd90", "comment": "Malware payload (Dridex)", "value": "2212ec845ad41b3b48d1bacf25c7f19a4dd43ec09470c0ce9762538603fc8d4ce3845cf0df65a98d83b279e122679a26", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618651777, "uuid": "e3f64501-4f25-4ebe-899c-07eba7b85caa", "value": "F2F3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618651777, "uuid": "2d8e2b02-349e-48fa-a414-b7fe8fbb20ae", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618651777, "uuid": "982f23b6-5e56-4961-948f-10070343b79f", "value": "3072:QiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:7eAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618651777, "uuid": "3e5ab90a-8594-4f56-b0ad-2e0250f9df23", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618651777, "uuid": "db99cdfd-60e3-4599-85e7-f45ae4aeec29", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618651777, "uuid": "4f538810-925f-4f9e-8f76-a09558b17e00", "value": "32b09ebf424e02d55478ddca6ba4080046df107d4e9a76abc83636146b95ce8b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "32698652-9f55-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618647383, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647383, "uuid": "fbf1a94f-5c07-4f24-952c-abc2bbc8721e", "comment": "Malware payload", "value": "dcb4dfc4c91e5af6d6465529fefef26f", "object_relation": "md5", "Tag": [ { "name": "Downloader", "colour": "#25284B", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false }, { "name": "phish", "colour": "#06C62B", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#FE0F82", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647383, "uuid": "338cf911-6767-4c38-acf0-7b78eb8dd963", "comment": "Malware payload", "value": "32febef64410a6fcff07a6f95f51c25506c291ef13bdaa0937e2b9ce08d2d406", "object_relation": "sha256", "Tag": [ { "name": "Downloader", "colour": "#25284B", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false }, { "name": "phish", "colour": "#06C62B", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#FE0F82", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647383, "uuid": "a1c0d2e8-a3f5-4ad7-b4cf-931107a793b6", "comment": "Malware payload", "value": "4c600fb5eb8a9c31ce63204db9ba542cb63c67da", "object_relation": "sha1", "Tag": [ { "name": "Downloader", "colour": "#25284B", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false }, { "name": "phish", "colour": "#06C62B", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#FE0F82", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647383, "uuid": "ef85c297-3981-4596-895b-d036663d2bfc", "comment": "Malware payload", "value": "3c95e4cb11f0f315a20c6cddea8ba451c3173a38fe7943677c9f7e306684db2da98c4630b5d7c176d20e46a279bce4a9", "object_relation": "sha3-384", "Tag": [ { "name": "Downloader", "colour": "#25284B", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false }, { "name": "phish", "colour": "#06C62B", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#FE0F82", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647383, "uuid": "e2c99f3d-f436-4fc4-b4e0-23c033828144", "value": "584106245EE61324D7F28B79287AE30088767C1AED12CF8D019099CC1825625E5B5F3B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647383, "uuid": "ac8e4cc8-d925-4b32-a9f6-9e8f67ae8042", "value": "24:8z/BHYVKVWt+/CWHrHiyoPE+W/t0rSVOAQ9QOfw4o08rab3Ni9S1:8z5aIQE+Wl06OAQ9QooDaoS1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618647383, "uuid": "ce8ab5e6-0358-492d-8f11-6958890527f1", "value": 2280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618647383, "uuid": "e124ea4e-1ce2-4fd9-8986-0ea49c2a4217", "value": "application/octet-stream", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647383, "uuid": "4e32f197-f1bb-4a78-9151-ba52b86722f1", "value": "32febef64410a6fcff07a6f95f51c25506c291ef13bdaa0937e2b9ce08d2d406", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75bc82a3-9fa1-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618680137, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680137, "uuid": "440478e2-7873-408f-95e3-8612d9741168", "comment": "Malware payload", "value": "e3477769dae97829e4f3e6e78d437bd2", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680137, "uuid": "2a7b9679-3ee5-4453-b8c7-579463ea6b41", "comment": "Malware payload", "value": "3320127bdd63d65b88b56060c7a63e68271a90b46484256647123de8d78c7a53", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680137, "uuid": "1e97537b-3a1f-4c54-ac97-a3d671a389cd", "comment": "Malware payload", "value": "d20343274decdadc9cb951be5f15649f27dbf471", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680137, "uuid": "7d110175-fa5e-430a-802e-b3ca1aa2494b", "comment": "Malware payload", "value": "04f0a53f79f77d036908b1a170ea13b66ac05494bba18bc5517c606ace2a81b09e77b272c43e8bcaa47f7d1f5cf365f0", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680137, "uuid": "d3b06e23-8686-4c37-a654-2a09352d4748", "value": "7FF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680137, "uuid": "b16cbf5c-6259-433d-90e3-db3bf53c14e9", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680137, "uuid": "96a3e349-7351-4576-990e-2c6d44a321b0", "value": "3072:UmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:9Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618680137, "uuid": "d54b873a-11fe-442d-8d15-7ee3101c0177", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618680137, "uuid": "3d7cc325-4b55-4f12-992f-3496f39fbe7c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680137, "uuid": "a85a7b38-e836-4b73-8ae9-924eec9e810e", "value": "3320127bdd63d65b88b56060c7a63e68271a90b46484256647123de8d78c7a53", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a0e517d-9fbc-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618691795, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691795, "uuid": "b2dac543-9b32-4bea-bad0-43bb857cd620", "comment": "Malware payload", "value": "d7ecdfc33855fa15eca0f1597276b26e", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691795, "uuid": "9eb09587-db93-462a-bc24-d1dbd1f3e25e", "comment": "Malware payload", "value": "332430e2a64ba379e73c51c54ea33fc2035b6f6ed46cc2942322903c95fce3de", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691795, "uuid": "bc7488b6-10fe-43c0-8c78-051d6d329a70", "comment": "Malware payload", "value": "f4a1cb575b84b2bd24ee1c6e083f9a5eff53000b", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691795, "uuid": "69974654-ce5b-4807-9890-93fd3addb4b4", "comment": "Malware payload", "value": "25c084484d4c16db8b9755e77fe90fb0c8b59ae41ee516bbe127d084befda7c218723cbaca4da0ea9a8fb1da3c45a986", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691795, "uuid": "63e96142-fbf2-43c7-bf56-723d8d9c376b", "value": "01F3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691795, "uuid": "39915e63-cdf9-428e-851d-c012fc4425a5", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691795, "uuid": "616d69de-a91e-4d1f-b136-8e883553081a", "value": "3072:iiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:heAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618691795, "uuid": "63a2a4d1-09a3-4ed7-8155-7c544959de0b", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618691795, "uuid": "144b90b5-8800-450f-ab66-8621f52baf90", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691795, "uuid": "470edded-4cbe-4547-bdf8-58106d837a73", "value": "332430e2a64ba379e73c51c54ea33fc2035b6f6ed46cc2942322903c95fce3de", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "039db315-9f80-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618665773, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665773, "uuid": "0c96ec03-026c-40ce-abe0-f1276b38e7e1", "comment": "Malware payload", "value": "2a66e9723921c69c7ce2092539c9c986", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665773, "uuid": "f5b7b173-8ef9-42af-99c7-7de059cc514a", "comment": "Malware payload", "value": "3384b894f8eadec01e0c24f5343212acbd7949ec7acb8d598017ecac0edba0f8", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665773, "uuid": "e9fcecb1-4fa9-4fa0-9f3a-b6737cd7643b", "comment": "Malware payload", "value": "2c4b37da4be4c16122427d04cf2ea9f1061f77c5", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665773, "uuid": "7f8d1f98-1774-4974-99db-43c1db26b4ea", "comment": "Malware payload", "value": "b26cc43697ad9b12284da9b830659d2d37cffe43e450fdee3f3e72a9e9f00d64d86d186185fc6d2fae4ec57a66b6acbb", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665773, "uuid": "1070d3fc-1adc-4dbe-9a3c-db1030690a29", "value": "A9F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665773, "uuid": "d131e655-8130-4786-929b-199803b64fe3", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665773, "uuid": "f252ef80-fc70-4d4b-91d5-c26035951e0b", "value": "3072:lmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:kLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618665773, "uuid": "0fec7a6c-cdbd-4444-a9c1-732c94b490c8", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618665773, "uuid": "0e3eb0bc-81bb-46ca-9088-36163451ea93", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665773, "uuid": "009f73cb-c120-46bf-bf71-b447896946a8", "value": "3384b894f8eadec01e0c24f5343212acbd7949ec7acb8d598017ecac0edba0f8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d21cdab-9f63-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618653467, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618653467, "uuid": "57e037f0-41ec-4441-aa71-09fd1ede00c3", "comment": "Malware payload (Dridex)", "value": "28db388e9d5f7a5697cd7bd3db76a50b", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618653467, "uuid": "052bdbd2-b1dc-415b-b974-f4f098291d3d", "comment": "Malware payload (Dridex)", "value": "3390677daab265494860a91b946c30a730bdc331c5d0b58f411b55eaee8a1bb0", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618653467, "uuid": "a02902fe-a2c0-4a4b-9a1d-d52b18b3f70f", "comment": "Malware payload (Dridex)", "value": "875dc78a62d6d96cac1d93a44e2dbda92d5e1c0b", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618653467, "uuid": "085d605f-c9bb-49b5-98a4-34d281855a50", "comment": "Malware payload (Dridex)", "value": "cb323d0980128f0a283c34f8d2f00edb123d2ad1a7f84a127903fa61a7e0227134f925fa09730fed7c4d2a21c34c6f6b", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618653467, "uuid": "9df30fbd-e9cb-4873-bb61-d4311a57b327", "value": "6AF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618653467, "uuid": "125e50ed-9ff6-4d42-9ce3-3093e7f086d7", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618653467, "uuid": "32e45202-3ef9-4738-9940-b8c54fbd02f5", "value": "3072:4mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:hLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618653467, "uuid": "cc590c0f-5953-4d7f-afb0-bb524aa20649", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618653467, "uuid": "ee9dbc21-eb9d-44e5-a8ac-546890416857", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618653467, "uuid": "fe00f5d9-bfda-44f1-a457-225e9c356297", "value": "3390677daab265494860a91b946c30a730bdc331c5d0b58f411b55eaee8a1bb0", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a28010fa-9f66-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618654872, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618654872, "uuid": "37e15159-ace5-4299-bd19-a8770ebc5cb6", "comment": "Malware payload (Dridex)", "value": "0138b5a3aa67565fea1c8688b74a8c71", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618654872, "uuid": "a3e86ba0-f35b-4611-ad68-6418b3208e6a", "comment": "Malware payload (Dridex)", "value": "33f9d18ef6e7b1b6ba0619d299cc730b6f956298bfe20af6cc94bd8d82d0c316", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618654872, "uuid": "08a1d245-a394-40c4-a6fd-bffc8897fbce", "comment": "Malware payload (Dridex)", "value": "1432975d8928a1af59583e0c9fdff8f1d4105e81", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618654872, "uuid": "7d36dff3-26dd-4830-8749-b2ab7ac18984", "comment": "Malware payload (Dridex)", "value": "ebf097191ed682065d007fb6caa1b5d696a50e7e8c4344ef49a7dc57ff481adb35a548844ff4111c3da0f702c37d5851", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618654872, "uuid": "1b13b384-7b61-49f7-a163-ac8420988cc9", "value": "C9F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618654872, "uuid": "7e44de57-caca-421f-8fda-59504485b75c", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618654872, "uuid": "02da351d-c147-4284-8795-305d6958a881", "value": "3072:JmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:YLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618654872, "uuid": "7a4d3cba-84a8-4d0f-9dbd-8c0b9b23da3f", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618654872, "uuid": "69fd9ce4-3cee-48ff-9a05-d8e1030f7b8e", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618654872, "uuid": "c840907a-0cf2-4cc4-81bc-ce7078702267", "value": "33f9d18ef6e7b1b6ba0619d299cc730b6f956298bfe20af6cc94bd8d82d0c316", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28a65a3e-9faf-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618686021, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618686021, "uuid": "3d2ca05c-b4d0-4eaf-a41e-9efca42eb4b6", "comment": "Malware payload", "value": "20b59cbabeb855a47a1008da5ac7d344", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618686021, "uuid": "a49d5891-b4ae-4ba0-ad4a-a3b9f871eb0a", "comment": "Malware payload", "value": "33fd99a5f8af9538a783a35f96b9372b175635bd8ae7da9e43c5a8bb9452cb63", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618686021, "uuid": "9c24126b-3f23-46b9-a050-2700ef7346e1", "comment": "Malware payload", "value": "4ead3f8ba9470261b23cc2aaa28a6f79678aabc6", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618686021, "uuid": "7dc25389-c7e8-4c1a-995a-03024fd6993f", "comment": "Malware payload", "value": "cdd91ea98081d22db756ff25357238629c32b629009d268317d454e8c84ca9843d1d045c2d6d3cbc2aeee1741b46e0b3", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618686021, "uuid": "82e6b5e3-64d0-441f-8c10-0a0a8dbce592", "value": "65F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618686021, "uuid": "14cf05a0-80a3-4cf9-8be3-eddc09a41126", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618686021, "uuid": "5e5b37bc-2c26-48dd-b660-dee27baf012b", "value": "3072:FmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ELc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618686021, "uuid": "bcb0a0e0-4b0d-4c99-9eec-d7593f426ac0", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618686021, "uuid": "374f4902-f799-413a-82ac-58c5ad8e2b79", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618686021, "uuid": "07f3ab08-7e97-4975-80ae-20cb5730ca63", "value": "33fd99a5f8af9538a783a35f96b9372b175635bd8ae7da9e43c5a8bb9452cb63", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "282aede9-9fc5-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618695469, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695469, "uuid": "e264c187-cdea-40f5-b33d-00ea86f94a1c", "comment": "Malware payload", "value": "58083288268000a7863202165d5536ff", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695469, "uuid": "ed83b709-dada-4ee5-9322-41ca8922631c", "comment": "Malware payload", "value": "340331eab252e25b985d392a8e123f8cbe14ec9deb3186568af76525c9d706a2", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695469, "uuid": "0ee73b44-7fbe-4948-9a40-e3d6fdd33bad", "comment": "Malware payload", "value": "14a01215a134c4d0cf3698bbf298d15a8b910126", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695469, "uuid": "76be6b2c-d816-4652-bff7-25a0f606486c", "comment": "Malware payload", "value": "f92d0c2234a0ac4d400c431294ce274df6fff7bb39dc8b380f19acaed17e81cdc79168834aff691eb31d796aecc7be6c", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695469, "uuid": "ffbdc447-6d65-4753-8ca3-c98c48b671ac", "value": "93F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695469, "uuid": "eac35bc4-6486-4363-bdcd-6c30dfdbda4b", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695469, "uuid": "db6e16ef-0e04-4d11-90f6-40eb45254dd1", "value": "3072:5mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:oLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618695469, "uuid": "f2ec71e5-41ac-40b4-aa10-35383ffee564", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618695469, "uuid": "737fa358-e4a2-46d5-970b-6c3d8d394cfa", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695469, "uuid": "40bae4a4-bd2d-4946-b52e-5c1d92bc9286", "value": "340331eab252e25b985d392a8e123f8cbe14ec9deb3186568af76525c9d706a2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "26a9068a-9fbd-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618692031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618692031, "uuid": "8fb16078-51ee-4bdf-8c6e-5f4159059bdf", "comment": "Malware payload (Dridex)", "value": "1d424d8caae8efa34e07f4b32ea430df", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618692031, "uuid": "d458bca2-b093-4305-84ea-6e647a6ea946", "comment": "Malware payload (Dridex)", "value": "348101f59a8890f8b942f7350880da7cf1d9eac1157feeed3e387ecbbfaa835f", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618692031, "uuid": "4ba15946-51ea-4603-8544-fef7b7d044eb", "comment": "Malware payload (Dridex)", "value": "830523d30f684b22594f6b366ff654a691eab1e1", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618692031, "uuid": "01af6c65-9558-45e3-bdc4-0a261ce333c3", "comment": "Malware payload (Dridex)", "value": "b8901011965df03a251eab38ebe99bc5d6f2daf3b4addb3cb3257038cf0e30dba37e9d36446bf86307d59afe0a49fb4f", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618692031, "uuid": "c7a47d33-7942-4845-bf58-17a2e7cbd776", "value": "5EF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618692031, "uuid": "df840f3d-cfbe-4f91-a867-ecea05b44486", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618692031, "uuid": "8d8f38c0-0c5b-4418-8f90-9154db23a745", "value": "3072:umNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:fLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618692031, "uuid": "f24187c6-22ab-4fbd-bfac-578796fd3b11", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618692031, "uuid": "7a99ecd7-cf88-4102-82a8-0af12815ae27", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618692031, "uuid": "42fdf58c-77d0-4908-8fbc-d25b8539e72c", "value": "348101f59a8890f8b942f7350880da7cf1d9eac1157feeed3e387ecbbfaa835f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f53b9651-9fcb-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618698390, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698390, "uuid": "eab386d0-7e1a-48ab-a73f-6de26a4a4f5a", "comment": "Malware payload", "value": "139f1835d4a5484cb959db9cf136cb73", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698390, "uuid": "0a2ec462-571c-41ac-a183-c5f54f1e39d3", "comment": "Malware payload", "value": "34a81497534cb4f30ed1974922a779c0f86a3c4244487a2c66c24a8582fa32ea", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698390, "uuid": "cd9deaf0-10c0-430e-ae49-a0a212ad3097", "comment": "Malware payload", "value": "d28fbe0210c9cf4a879591c5d517c91abaf813cc", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698390, "uuid": "7c87bb3f-18b4-4a22-aae1-a51aa5ed9fb0", "comment": "Malware payload", "value": "10c6bf8f8d4448114f8edff0e72fe00022809515237d7ab06943aa695199508aafc62239e44b52a82b8b2ebb34b31c78", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698390, "uuid": "81612709-b800-41c4-aa17-ee160e171fff", "value": "54F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698390, "uuid": "bc693c76-63bd-4c40-a745-92287f6f7de9", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698390, "uuid": "7dac756f-234d-4430-8304-7d81d358acd1", "value": "3072:qmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:7Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618698390, "uuid": "3b247977-5e06-4769-bd6a-984078423e90", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618698390, "uuid": "bf04c5bb-2a33-4a9e-bbd3-4943731ebdb9", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698390, "uuid": "f683bf04-dfd7-4a43-bcd2-d2e6bbbdd3b4", "value": "34a81497534cb4f30ed1974922a779c0f86a3c4244487a2c66c24a8582fa32ea", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f829a5a4-9fd3-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618701831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618701831, "uuid": "b5d3b9a6-568f-46fe-8eab-a97e0258a23e", "comment": "Malware payload", "value": "0fdc0f6a6f36aeb78740e871e11e6589", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618701831, "uuid": "3fda4fe8-516c-415b-87d7-0fa4d964c6d9", "comment": "Malware payload", "value": "34d5648d9489eeb899ebe6c21eadd099286f9ed8fecaaf4f5aa98f3620fa5f4a", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618701831, "uuid": "f95b14c1-8084-4df1-a0e2-638325b8aa13", "comment": "Malware payload", "value": "1a727d9a66fab8dfb277c98e85a71ce0ee4383ae", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618701831, "uuid": "929660b1-1fa7-49a5-962f-2e44c23fc19b", "comment": "Malware payload", "value": "2ce4ad219c6c3d1b0a3267df5bf0c9c937a7e93a33be1186738f358da340ed56011a652a7c0d20c9f24e9aa1838d846f", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618701831, "uuid": "1888e3b2-0edd-462b-b4d0-d7f28d2b3f20", "value": "E6F3D088CBB3E4E6EFB3D37866F85E1B561174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618701831, "uuid": "353a787f-ce06-4b16-9194-8253936d0ecc", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618701831, "uuid": "8a087a3f-5903-47d7-98ad-90e283313701", "value": "3072:4mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:hLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618701831, "uuid": "e8ac6311-1ccc-4083-a5ea-02d66f133f11", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618701831, "uuid": "1d6a67fa-339f-4729-aecb-d4b909a73e3c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618701831, "uuid": "9396497a-04bc-4ff1-9ba2-e873c26a3e70", "value": "34d5648d9489eeb899ebe6c21eadd099286f9ed8fecaaf4f5aa98f3620fa5f4a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e69c9f2-9f99-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618676743, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676743, "uuid": "c14db567-8d21-4d2d-afe4-15afd7d28abb", "comment": "Malware payload", "value": "66ec8332a6e93399e3efc634b70fb42a", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676743, "uuid": "b76ce48b-abe2-4229-89ff-df30afa6db96", "comment": "Malware payload", "value": "34ed01e7e8ee42cd11acd755b159285fa2883a23109a50bbc5761c814a3da733", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676743, "uuid": "9f36960d-3357-4eab-9e49-117a0a7fafdb", "comment": "Malware payload", "value": "68873e6b2d40d5b97ac932495a6bd60a28017af0", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676743, "uuid": "c3372524-35da-4d52-a4dc-b90a8234e3e9", "comment": "Malware payload", "value": "c39fc8a984a288d85f4f028f2c1f968a5bba91179c18b77e7a4df98a9433a1f520bd4b6151c8f00035332d6f4364fa18", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676743, "uuid": "a159fa42-1750-4afa-b403-6e125a22f856", "value": "8EF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676743, "uuid": "776a5a06-f38b-4dd0-ada9-beb16b65b968", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676743, "uuid": "82e56149-47a3-4109-a139-eef24b3783e9", "value": "3072:zmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:CLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618676743, "uuid": "70f67984-4beb-4e63-8901-7338f69a7b73", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618676743, "uuid": "107bc669-e21a-49eb-8c26-17d9c85ecbe4", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676743, "uuid": "42e57eec-ab1b-45a8-bc04-33bfb49f53c0", "value": "34ed01e7e8ee42cd11acd755b159285fa2883a23109a50bbc5761c814a3da733", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9a0e162-9f77-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618662293, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662293, "uuid": "d586b23f-4458-42b2-8b14-d474bfa26b83", "comment": "Malware payload", "value": "a89a2babe66a8de703d0ce44c4376b01", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662293, "uuid": "49ed524a-4631-4c67-9ff6-fc15e3afce85", "comment": "Malware payload", "value": "3514dab087221103f6914fba10e156dddd5ceaaf965c3fa291b2c673514168f1", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662293, "uuid": "2cce000d-2450-4ba9-bab9-14e7e1542486", "comment": "Malware payload", "value": "0cae94513512fe084bd7dbf55f3a9e5207cec320", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662293, "uuid": "24d143d4-1f3b-4670-bc7f-76c484ce6857", "comment": "Malware payload", "value": "d5ec5c44dddbd79838a17908991b2ae268e4e2f2b1c68013a6467a078450a17dff9ce290d2a2e464e0017f7574046fe2", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662293, "uuid": "64aeed92-ec98-4a34-9a46-232b4ab1d112", "value": "F1F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662293, "uuid": "2ee6e6fb-118c-47ca-9918-ea0027d57e6a", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662293, "uuid": "ed0b7f8d-485b-48ed-9be8-96fc273bda7a", "value": "3072:vmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:uLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618662293, "uuid": "8d3282ed-639d-4efc-bc75-58e755ced06c", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618662293, "uuid": "0a708feb-cf61-43c1-8ec5-fb8242eff147", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662293, "uuid": "3e67ae11-086a-4a14-a814-10ff9aa5d8a9", "value": "3514dab087221103f6914fba10e156dddd5ceaaf965c3fa291b2c673514168f1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d63dbd10-9fcc-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618698768, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698768, "uuid": "1da61a14-801c-4e14-9ab4-645ee7087f69", "comment": "Malware payload", "value": "06f15b0b87d8ad0804056ae30aeeffbd", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698768, "uuid": "9ad1f4f6-914c-4cdd-ba71-0cf483e1fa91", "comment": "Malware payload", "value": "35fe35c5479ee8d540b3ba44c1677fd68c311bbfdfaa6297b13a014549687451", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698768, "uuid": "4b65bf57-0399-40d3-87aa-0e65426dd745", "comment": "Malware payload", "value": "4366a73054b7d2a76241e04ad5cd776347eebebf", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698768, "uuid": "1b875d37-a4e0-458d-8ab7-5f6d316bba29", "comment": "Malware payload", "value": "5408efa3901ecd2652ba03d877b5547e6ed3973fedff260c7a41fcd21035f799635119466cec4b27db8bb094c55e9fc6", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698768, "uuid": "cd726faf-b6b5-40e0-94d9-57e77abfb28c", "value": "47F3E00AED9FE988E85C51F1CA4D363EE9713E361B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698768, "uuid": "ec3052b0-d4f5-4008-9152-085047a7dab3", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698768, "uuid": "d9a9e355-63d9-4e4e-91d3-5a4a15a07465", "value": "3072:yiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:xeAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618698768, "uuid": "e4fcd72f-42b3-456d-9b5d-39305bde34c9", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618698768, "uuid": "460cd54e-95d5-468d-8124-0071f8509e81", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698768, "uuid": "31a62e74-8f50-4899-83d4-66b62cbd44bd", "value": "35fe35c5479ee8d540b3ba44c1677fd68c311bbfdfaa6297b13a014549687451", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78af73cf-9f15-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618620013, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618620013, "uuid": "588b937c-4a46-41e8-ae7b-62d9e2f4ad6f", "comment": "Malware payload (Dridex)", "value": "67dbf13addc2cda84a4e620809ec10f2", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618620013, "uuid": "91a1cf3c-9ff5-4ddc-bcda-508d0d8d2b65", "comment": "Malware payload (Dridex)", "value": "3607ed77fedcc0d4f5e57287c89e1b80e46aeff5f89f79eff894cbe162f34211", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618620013, "uuid": "fb2d4033-a2cd-4300-bf32-120aae799cda", "comment": "Malware payload (Dridex)", "value": "16e4ea56a991780aee956ec736f0ce5cf1d2aa54", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618620013, "uuid": "f84582d3-4e90-4add-b8aa-912634ab5847", "comment": "Malware payload (Dridex)", "value": "f2e7d83cd4ae88f8cb0336d84e921a438df9352102867b6e7801cb18aed6af37acd756178bee561ef113656b13fb5da5", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618620013, "uuid": "34251173-91d7-4726-9328-a5ab3a303d20", "value": "3FF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618620013, "uuid": "8e8cefa7-8473-452c-8c31-623320d7d4e9", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618620013, "uuid": "4a210385-edf2-4744-b54c-42fe0f52bf1e", "value": "3072:UmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:9Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618620013, "uuid": "c9a071f1-ca2f-4389-960f-ea6f43262d3b", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618620013, "uuid": "31568268-d816-45db-af88-fb275415718b", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618620013, "uuid": "63b29079-f3a1-4c1d-aabe-5feb23bc5103", "value": "3607ed77fedcc0d4f5e57287c89e1b80e46aeff5f89f79eff894cbe162f34211", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e5f73f4-9fb2-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618687373, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687373, "uuid": "28561035-755d-4f9b-8de8-6fd62073a91c", "comment": "Malware payload", "value": "cc7ea7459dc301fd1fedd3c674df1793", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687373, "uuid": "8208cb0b-cb49-4387-be61-f272d97a7fde", "comment": "Malware payload", "value": "3627938454e832fdf660d6a11b54dae4b803eacbbbb4a96e2e83816fa4a91915", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687373, "uuid": "e7cc43a9-3395-446d-a5f7-854d15188c00", "comment": "Malware payload", "value": "785c7a7027063061d1c6cc54d117d1b0583a90c0", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687373, "uuid": "b01bf7b3-4d97-4aa9-a23c-bb1bec8d14c3", "comment": "Malware payload", "value": "5a596abc3d9f05f79e2e9ddcc0999c87c9e4e7fc5c2087d1f1c15e658da5d51e47e572d890fb1787fa456e537e72ef2c", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687373, "uuid": "22b94094-8a98-4cd4-b1b3-9bc55c6621b3", "value": "E0F3D088CBB3E4E6EFB3D37866F85E1B561174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687373, "uuid": "df9eb3a2-736a-4953-a69a-29c7344960a7", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687373, "uuid": "222a4524-4784-4ed6-8fa3-0d5156704a2f", "value": "3072:GmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:XLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618687373, "uuid": "500c7eb1-99b3-40ba-9113-07411d614a23", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618687373, "uuid": "afc3eb87-9bfa-434b-b798-1d7e062facc7", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687373, "uuid": "e6c07ecc-46c3-4da6-8b27-6c0a7734f481", "value": "3627938454e832fdf660d6a11b54dae4b803eacbbbb4a96e2e83816fa4a91915", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c89b23e-9f73-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618660231, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618660231, "uuid": "3b67c307-e96b-46fb-8323-353667bc54c6", "comment": "Malware payload (Dridex)", "value": "9f29267c30072b1d0674e360fbce55fe", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618660231, "uuid": "c02d8584-557a-41e9-bf60-e4cb5f21d6a2", "comment": "Malware payload (Dridex)", "value": "3852d99446a945ab68e8644c592684cf59220f460f45ec7cb362948c44c71ef2", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618660231, "uuid": "9910cd88-3f15-4255-ae84-5fbf97f809c0", "comment": "Malware payload (Dridex)", "value": "9c8a7bd0c1895db652d5e065d1877736c09ca7a4", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618660231, "uuid": "ac5ac8a0-a4e3-4ff6-8566-ee5efc770026", "comment": "Malware payload (Dridex)", "value": "e9e88ca608cbcc0f84aff73fe8c5b36ebb92b9e82811ecbbb747f23abebe2fb26c2918c0ec7becdb5b1f883eb5b30056", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618660231, "uuid": "92a86150-22ce-4e67-ba93-a4e28f8ac2f8", "value": "E8F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618660231, "uuid": "6fb7e11f-bb5b-4924-a5c5-dce13a8c67bd", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618660231, "uuid": "202b1150-2113-4df2-8aac-1cef6df4c923", "value": "3072:8lpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:8lo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618660231, "uuid": "64795979-af6c-484a-9433-1e46267cc368", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618660231, "uuid": "d2da4920-6c6e-43a1-bf88-8984478dadc4", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618660231, "uuid": "6bf0e2da-5f88-40e9-98d4-a9aa64a91920", "value": "3852d99446a945ab68e8644c592684cf59220f460f45ec7cb362948c44c71ef2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b9602e8-9f18-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618621306, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618621306, "uuid": "d0b5c2e7-627a-43f7-8a7a-f1c027a0ae50", "comment": "Malware payload (Dridex)", "value": "0aa68ae6b4f5086c23ef32528520b3c7", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618621306, "uuid": "7fba4fa7-6fe6-450d-b3fd-463295f7f747", "comment": "Malware payload (Dridex)", "value": "38aecec6e5cdea2cc3ce8c509a0f5dde1f7e7d19e985fbc98e2cd3d79d53b201", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618621306, "uuid": "9192e484-8ce8-404d-ba15-500788af0a52", "comment": "Malware payload (Dridex)", "value": "1f1143095f2eccf3453261accdc0f3b7d801e02d", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618621306, "uuid": "47015673-7038-4ab9-a7ec-acfd33b66255", "comment": "Malware payload (Dridex)", "value": "ed34186633e7f96d3b83e58b1708735a91f09b6c4aa9c1712f46744462496e67c9f654b17cae4f5b3a75b3e53fc0e5fb", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618621306, "uuid": "2855b263-f0a8-4644-87f5-951435b38b0a", "value": "6BF3D088CBB3E4E6EFB3D37866F85E1B461174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618621306, "uuid": "00bf0a27-4d7c-4c29-8aee-e40191301537", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618621306, "uuid": "2f7cba04-5b3e-4bc9-9729-a1c6d0f9f13a", "value": "3072:mmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:3Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618621306, "uuid": "de9ec959-2423-463f-b052-572ef10ef032", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618621306, "uuid": "3cdfbaf6-cfce-4967-81da-4f48cc7fa9b7", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618621306, "uuid": "5f7d377e-9ac2-429a-81d2-9b4e95a3f22c", "value": "38aecec6e5cdea2cc3ce8c509a0f5dde1f7e7d19e985fbc98e2cd3d79d53b201", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69e74912-9fcd-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618699015, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618699015, "uuid": "3fe9b675-9bc5-4a0b-bd85-a9cccb34d7ba", "comment": "Malware payload", "value": "ce7c180a18bc9e340d0c6daa61913caa", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618699015, "uuid": "de36b4b5-5142-497d-bc3e-bbb6fd10a3a3", "comment": "Malware payload", "value": "3954417ef15243f923a75eda665b05f7b17822183ca460d13c7022e3476bb7e0", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618699015, "uuid": "d0e6460b-a446-4b16-a8c8-250cad15c5f7", "comment": "Malware payload", "value": "1b67338a7a64ff28c5fae7a7dc0cb4052327e1fb", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618699015, "uuid": "ba2880fb-6be2-44d0-8fcb-753eac1bc73e", "comment": "Malware payload", "value": "601bf77e1426b7aed29c66f74896f3c79b767b873efd9cf44eecb0e53b6ea02ce2b01c21a764e7abc87d156d89da5de3", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618699015, "uuid": "f5f98258-7205-4462-9f4f-8a06f7325993", "value": "3CF3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618699015, "uuid": "448ed033-3db6-4ec6-8cf5-c23e5d99f86f", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618699015, "uuid": "d8706b2d-f847-4b9f-a2d7-07cdab06170a", "value": "3072:qiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:peAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618699015, "uuid": "b7d10cc6-545c-4261-9e8f-b7c815d3564b", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618699015, "uuid": "1554f74f-691e-4ea3-bcd0-45b8eab798d6", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618699015, "uuid": "936e9688-0848-40ba-a7a1-d77e022f86d6", "value": "3954417ef15243f923a75eda665b05f7b17822183ca460d13c7022e3476bb7e0", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "999aedfa-9f61-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618652710, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652710, "uuid": "79850dd6-1895-4b31-b2d5-60c721c89000", "comment": "Malware payload (Dridex)", "value": "bdace5bbc4c6a4e85279ac31de826abc", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652710, "uuid": "acf43daf-8949-4dca-b1ce-127c1b0f7a0d", "comment": "Malware payload (Dridex)", "value": "39d4cf3e2478f9d4d99d4b2fbcb5d11718bb92da6ee3e91318e782bb0c15f2fa", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652710, "uuid": "6354e8ff-4225-4404-962d-da662778428f", "comment": "Malware payload (Dridex)", "value": "c5c9920873d637e05c70fffe2ed8039d45aefc6d", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652710, "uuid": "dca7f955-63a6-4ed1-94e4-85c0f3bc545a", "comment": "Malware payload (Dridex)", "value": "2c1d6201b9be99785997c2151ad4d08dee67d2eec55a0c11e55aaf3103d91c0caebdc211929b13eae7310fcecdef4731", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652710, "uuid": "7ee58ea7-a0d2-4b0e-9d53-503815bb4a24", "value": "30F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652710, "uuid": "b5b74860-b84e-4798-b225-58df09b3956e", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652710, "uuid": "21ea994e-61f8-4546-b88b-b96569192c99", "value": "3072:smNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:1Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618652710, "uuid": "d299c993-518a-48df-b7d3-8041de8c61e5", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618652710, "uuid": "11f07903-127b-4428-9f7d-a1fb5bbded73", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652710, "uuid": "18d57c4d-cebc-444b-9d4b-5b11f7c14be6", "value": "39d4cf3e2478f9d4d99d4b2fbcb5d11718bb92da6ee3e91318e782bb0c15f2fa", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40eace70-9f1e-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618623785, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618623785, "uuid": "35fe3c1a-556c-4e0e-a3e0-3b7909b8abab", "comment": "Malware payload (Dridex)", "value": "ff2ee0edffc9556b0d7f1e66a31f6743", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618623785, "uuid": "4f5aac9e-24bf-4b9c-bc36-8109019f7cfe", "comment": "Malware payload (Dridex)", "value": "3a330dcbdf9e2b0ee2c0e5b8944db2f063ae3b6b2f9b64581cff12d6543b7a1a", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618623785, "uuid": "70bbd963-fb89-45f5-bb65-0cabcbfd5e95", "comment": "Malware payload (Dridex)", "value": "c275fb14ca76aa0650e61e10d4e1bcd55d23e7d8", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618623785, "uuid": "5bbc5a02-7296-48a9-b924-06d023a653ec", "comment": "Malware payload (Dridex)", "value": "381bfe39b070913036dbac1de54f0207f11f1da69b250c339b608d791386b1bdc477f522f355af850dfecea68670b773", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618623785, "uuid": "b39ec7d3-b378-4d7f-a15d-16da35651f4a", "value": "BEF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618623785, "uuid": "5fa60475-cdee-4200-86fb-f05a5f0f43ac", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618623785, "uuid": "bf4ff84e-1a76-4530-b645-884bbc48ccf5", "value": "3072:cmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:FLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618623785, "uuid": "275ee8a7-35b6-4425-8d3c-5ab2e2e80ad4", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618623785, "uuid": "80a12b1b-994b-4b98-8aea-f4d147cb9afb", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618623785, "uuid": "c0cbed76-f89e-4d7f-8e88-947f979ebc9b", "value": "3a330dcbdf9e2b0ee2c0e5b8944db2f063ae3b6b2f9b64581cff12d6543b7a1a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ce91f34-9fc5-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618695531, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695531, "uuid": "0e0c1971-dc1f-480b-9a82-788bf62fcb7f", "comment": "Malware payload", "value": "d7f1bb7ad299270dec0c469f7904f9e5", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695531, "uuid": "540998fd-6193-409e-9819-9c8a2c4915f0", "comment": "Malware payload", "value": "3aaa36c0e930625aac111866789d3fd158dc86cd4986ee10e0dd830c448ccf52", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695531, "uuid": "e3a2fd26-12b7-4385-9a67-6797667679ee", "comment": "Malware payload", "value": "5100578aac19c979cab5ce62e96ad6906763e1d0", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695531, "uuid": "bf60723f-bfa2-46f4-bb97-90033aaaceb8", "comment": "Malware payload", "value": "bc121e6408cb4500be3223af27c13d96040be6c718fff6a15b4f86ca87a24718ba3dbd1a52bb3d5831c3feaf957b1815", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695531, "uuid": "94c558a1-2274-49ee-abd2-b8d724832729", "value": "76F3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B496B1FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695531, "uuid": "8c081dbc-11a0-4b2f-9310-53986ec65cc5", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695531, "uuid": "44a4cc66-678b-496d-bfc0-545c5bd979ff", "value": "3072:OA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:O3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618695531, "uuid": "54edf170-ba71-49d6-84ef-c7061c51ddda", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618695531, "uuid": "578bb73a-a8b4-4f04-8c47-ce96cafb9147", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695531, "uuid": "bbb3d403-ae5a-4f01-8742-bec40561f76d", "value": "3aaa36c0e930625aac111866789d3fd158dc86cd4986ee10e0dd830c448ccf52", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd9ea239-9f41-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618639026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618639026, "uuid": "b21c5458-62b9-4f28-9b97-e21cc93add90", "comment": "Malware payload (Dridex)", "value": "abda1a138d5a0543f0f47e5222e64bba", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618639026, "uuid": "983e0ff5-002a-4196-89b6-d9da3bb52fdc", "comment": "Malware payload (Dridex)", "value": "3ab7869f7d35859efdc36e598d8de3ab19443d45d58041aec25b06f354aeadf8", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618639026, "uuid": "b50193bd-84ec-4318-b14d-7f1edea11988", "comment": "Malware payload (Dridex)", "value": "cc68225e8dfa41298cc6508a1919911b954aa526", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618639026, "uuid": "4f514948-4218-4c43-b12e-4c0e8dc32370", "comment": "Malware payload (Dridex)", "value": "864605833ac5da0d4b68576fe7b2f4c4fde3ab066c462a689eeb7e1d5c8c283841c1bc1717d5e7ce2c75fea947b9ca06", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618639026, "uuid": "7a59a8f2-f273-42af-8d8f-64d9a8805b39", "value": "BEF3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618639026, "uuid": "f4e6a042-414f-4f14-90e4-b14be9a23670", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618639026, "uuid": "44cd0e3b-b264-4b98-8984-1422693f69e4", "value": "3072:zmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:CLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618639026, "uuid": "58def31d-058f-407f-b7b5-85cdaaec09d2", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618639026, "uuid": "0f348bc6-0e16-4ada-84dd-843731deed82", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618639026, "uuid": "b68f7ac8-ee34-4070-8b9c-cccb84d1774a", "value": "3ab7869f7d35859efdc36e598d8de3ab19443d45d58041aec25b06f354aeadf8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ddab08d-9f2a-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618629041, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629041, "uuid": "3c9a71e8-a8b8-4cd7-9c9f-3d8bd0cbd1cb", "comment": "Malware payload (Dridex)", "value": "56609674e957e45c770d4171e1c85360", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629041, "uuid": "fa5a436c-0d4d-4104-93e4-6f7b00e022c3", "comment": "Malware payload (Dridex)", "value": "3af2250ff25c88a2f7e2cbf4b0654b328e00baf869dedcfbe198431cae6c667b", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629041, "uuid": "757f80d0-0756-4be9-8921-5dec03f3dcc4", "comment": "Malware payload (Dridex)", "value": "e40873c51c3c8be4f2f1c2c8679c1c2a47f3f9a9", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629041, "uuid": "a67a79a3-aacc-4825-b44b-dfc79254403c", "comment": "Malware payload (Dridex)", "value": "afd139292256abbbf5133336420909bbcf2ac1d939c20a1b5f71cfa448b2a0b4f039dcb846b609c75901a10c1515d3d9", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629041, "uuid": "0c5ead5f-d0f0-453a-96fa-36545d1aa836", "value": "CFF3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629041, "uuid": "a3cdd101-9496-4fcd-9009-175b84ba85eb", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629041, "uuid": "03d1c28e-80b8-4be4-9c3c-6a5f53d30b57", "value": "3072:0iFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:3eAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618629041, "uuid": "eba4ebe2-f101-4d7d-ac5d-1463d8eb5d52", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618629041, "uuid": "8955faf1-4a03-4186-bbf4-dfcc0f571a00", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629041, "uuid": "00be63d1-cefd-4a7b-be79-abf3db0fbd2b", "value": "3af2250ff25c88a2f7e2cbf4b0654b328e00baf869dedcfbe198431cae6c667b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb03005c-9f9a-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618677354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677354, "uuid": "6411e333-b4e8-4122-8e17-9cb52d30e6e8", "comment": "Malware payload", "value": "0fdcdac4844b73174b9ce6b146c0d384", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677354, "uuid": "dd9cdaac-2760-438b-9ce1-648e374b860f", "comment": "Malware payload", "value": "3b0b91b256d73e96ac94e26331f0728fdc33459b15d18afdaa0ebfe47ab05e99", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677354, "uuid": "ecca8bc9-3b30-4925-bb2f-3c6223b370e2", "comment": "Malware payload", "value": "675d69a7b796d283e4e15c0123627060452e0f97", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677354, "uuid": "038f81a6-7e69-4de2-8097-df924af6a9ea", "comment": "Malware payload", "value": "7e7222db28883a9eca6677864f6251643a99fc99433256efea4416199f803710b095f76dad278017004d297319e84d51", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677354, "uuid": "630b996f-3c6a-4cbe-8ba6-1a887a1981d4", "value": "28F3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677354, "uuid": "db8289a9-6a99-47c8-ba6a-956263ade336", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677354, "uuid": "7e15bc48-f611-416f-b782-21c9796b88d4", "value": "3072:iiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:heAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618677354, "uuid": "43d53b5d-0be5-4e87-bb41-ae304badd390", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618677354, "uuid": "1343f732-3881-4102-8292-546d42d1c8bf", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677354, "uuid": "0b6baa4c-916e-4fef-b24c-7fdfccb7c6a0", "value": "3b0b91b256d73e96ac94e26331f0728fdc33459b15d18afdaa0ebfe47ab05e99", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0b89566-9fc3-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618694839, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694839, "uuid": "7509bc73-e2d9-473a-98eb-bebadb6b7752", "comment": "Malware payload", "value": "171aff58b220d2296678fdb82bf56d22", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694839, "uuid": "adb4bed9-8adf-49a8-a115-a9a11554f2f0", "comment": "Malware payload", "value": "3b314dc4abe4c615855ce6c8effb1a1d36d463087bb054832c77d3a52a291e08", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694839, "uuid": "b4706b6d-6cb6-48c2-86ce-10da93fd7829", "comment": "Malware payload", "value": "491adcf63d8b34093365d2590734fc402d3ea8bc", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694839, "uuid": "59daa0f6-354e-4e01-a378-f77d06da66c0", "comment": "Malware payload", "value": "ff2216c963678b3d1d8c62c10d991b69d43766222435d5317bd70f437e09fd396998924370ca86422a7e79fa4c3ccbc5", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694839, "uuid": "21064ade-611e-4a66-b555-d17901945e1a", "value": "41F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694839, "uuid": "b03d7b09-6f3d-4e88-ae66-e5b7f8c04644", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694839, "uuid": "95fd510c-3ad4-43f8-b833-1fd2b093a310", "value": "3072:llpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:llo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618694839, "uuid": "8db25757-23ae-4b5f-8484-f3c4bfb6f5f0", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618694839, "uuid": "490de51a-6908-474b-809b-bb643b78fdef", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694839, "uuid": "e1c7cbc8-62f1-4e93-b40c-cd2e7461d5eb", "value": "3b314dc4abe4c615855ce6c8effb1a1d36d463087bb054832c77d3a52a291e08", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e13d264-9f30-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618631565, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618631565, "uuid": "19b66dfd-311d-4f95-85ed-2b8442d6cb79", "comment": "Malware payload (Dridex)", "value": "a2493a9e63ce4e49cbf4cc054adad80c", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618631565, "uuid": "7b618c34-f4be-426d-89ea-8d7c89063564", "comment": "Malware payload (Dridex)", "value": "3b40d528332d4abc6a6db83ece63c412cba55f8746d814ccd17d787b3397f063", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618631565, "uuid": "763f1380-4425-4935-bb09-a024d2effe93", "comment": "Malware payload (Dridex)", "value": "5e3da86ea8cc691d69200c7401b712342e1849d9", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618631565, "uuid": "97158d87-9dd8-49f5-8b62-1836cd630a14", "comment": "Malware payload (Dridex)", "value": "07dbd47bfc95941ad333838154fa258cccd74ce9c275a3c3bee4fffdc3efa75ef40eb914c208ade2e9ed7e0b0eebf1d1", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618631565, "uuid": "72a697fe-454d-4a01-8c6f-73e041644e2b", "value": "ADF3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618631565, "uuid": "d3ab8da2-8858-49c9-be75-17114d627665", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618631565, "uuid": "cc707669-88f4-4235-9ac9-71c9d31f64fb", "value": "3072:umNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:fLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618631565, "uuid": "889bf518-94a8-4f54-b273-4d6da663005b", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618631565, "uuid": "005384ef-2b0a-4b5a-b524-20f703156c89", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618631565, "uuid": "ab6c98d5-d241-4391-82d3-8beedf1f38b7", "value": "3b40d528332d4abc6a6db83ece63c412cba55f8746d814ccd17d787b3397f063", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4654b6c-9fa3-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618681128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618681128, "uuid": "e926dd19-168e-4c61-a59d-4fb630b28b8a", "comment": "Malware payload", "value": "5df8dbd99a38384d715e9b15d2a4c664", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618681128, "uuid": "dbb26147-5e8a-46e7-bc57-7dabd969edda", "comment": "Malware payload", "value": "3b98106ff7d034fa5e4a6f9d66bb701238d23e68e9d6e8262f198eb3a3a03e9d", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618681128, "uuid": "f74eb39d-7747-4607-ba00-ba67cbe79f98", "comment": "Malware payload", "value": "46cfd459d91fe2e797bc49ef46b6d3f3a8e00737", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618681128, "uuid": "6a17b07e-fcf9-49b9-975f-de19b8fde46e", "comment": "Malware payload", "value": "12c5fd3bc3dc1ac896745ca45345708d1c437e184029f95b2892b2eeeaaeb98ab41878b713c5073e55454af1d52a2e56", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618681128, "uuid": "988ba657-bdd4-4beb-bc6b-67e11d89c175", "value": "D3F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618681128, "uuid": "c40bb1d4-0534-41d1-abca-173db6afeca9", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618681128, "uuid": "760b743a-a8ea-4148-a139-0e5cabcf70cb", "value": "3072:9mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:8Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618681128, "uuid": "20ea4c9a-2132-4476-97a9-41f543aab29c", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618681128, "uuid": "498e0aa3-664b-4c34-8b61-d6f4ebe288b0", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618681128, "uuid": "b2596356-84a8-461d-b32d-8318740a0250", "value": "3b98106ff7d034fa5e4a6f9d66bb701238d23e68e9d6e8262f198eb3a3a03e9d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "766e82d3-9f35-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618633753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633753, "uuid": "b45438c9-77a9-4e62-9115-c88ed97a0a9e", "comment": "Malware payload (Dridex)", "value": "ef2202233833473d8410102204773977", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633753, "uuid": "8c8e4002-fcb9-4cbb-ae24-7c145009d114", "comment": "Malware payload (Dridex)", "value": "3c194df00dd487dbe1d09408c25d0217a8b822658d97bf829cf383d0bce158ee", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633753, "uuid": "7b2f8df8-77ac-46b1-b223-e9e9081b7969", "comment": "Malware payload (Dridex)", "value": "87fc2fa947ceb80ad523fbdc6a008b73e8fef0b3", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633753, "uuid": "5509355a-7dc3-4f22-b790-0474285ea6d3", "comment": "Malware payload (Dridex)", "value": "02bfd95371f96b41b494005612cb193d603b0ed20dae82132bb0b244a0b43b362c5e0689d1b6f207abce94f57e5239df", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633753, "uuid": "cab6f066-5649-49f1-a3a8-c06e1c4c3b60", "value": "2CF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633753, "uuid": "167d51ea-f3e4-46b6-b832-86c105e71e39", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633753, "uuid": "b9096a03-9a82-4e48-a5c6-18e5863da12d", "value": "3072:ulpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:ulo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618633753, "uuid": "aad538f9-6a34-4c90-aaa4-00ffcd17da1a", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618633753, "uuid": "11169307-6c9e-4886-baa2-2e6558373de9", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633753, "uuid": "6bffa390-cdd4-440e-bcad-5f5d40a96a63", "value": "3c194df00dd487dbe1d09408c25d0217a8b822658d97bf829cf383d0bce158ee", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f3e8fede-9f2c-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618630098, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630098, "uuid": "6559d0e9-e1a7-400d-84b4-3672a39e8744", "comment": "Malware payload (Dridex)", "value": "7f53df834127a27d6a58a57accc9d7a2", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630098, "uuid": "fd4c1128-6a7b-436d-bcf5-efff5a8fa952", "comment": "Malware payload (Dridex)", "value": "3c55b0f9424047171f28bc71990170fd91e26e16997deb44e498f7834fe2bb60", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630098, "uuid": "89dbf48f-c9e2-421f-9226-9be29de50d56", "comment": "Malware payload (Dridex)", "value": "377443646815a3221f7b47ab63d1d0b352356a93", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630098, "uuid": "b277c7cc-20ac-4d26-bb45-52a8847eaed2", "comment": "Malware payload (Dridex)", "value": "dff7166b09d14af88c2d3aafb6042bd1422ab06734555a4f9e927889085d73dee7e898ac2e0e1218fe84826aac8804e6", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630098, "uuid": "73ceb81b-3fb6-4f20-9038-7e2071b7eef2", "value": "3DF3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630098, "uuid": "25d437c3-1727-45ff-b25d-978d5abae23a", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630098, "uuid": "6b4f7850-8dd0-48ea-96dc-f1c49b0f5935", "value": "3072:ziFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:QeAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618630098, "uuid": "9f62541b-6c5d-478d-addc-5b027db0f386", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618630098, "uuid": "187f36c1-12a5-4972-8a92-b79aab523d4d", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630098, "uuid": "94872add-fb53-4cba-9baf-1184dcbfcf8b", "value": "3c55b0f9424047171f28bc71990170fd91e26e16997deb44e498f7834fe2bb60", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b3e6238-9f87-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618668845, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618668845, "uuid": "d7022041-8e18-4db5-ac53-9bfbcdf788ec", "comment": "Malware payload", "value": "8a0c994fdf4747585f95e40a6e512f11", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618668845, "uuid": "7ee82985-3f00-4cfd-bc55-092b82fef392", "comment": "Malware payload", "value": "3cc80d59b48dcfd289b925e1590b00822091f74e01fbde731a3435f4f2fbb409", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618668845, "uuid": "00e73fc1-fb7f-4854-af2c-b919ec7eb7c9", "comment": "Malware payload", "value": "ecb689d80cdc694d066344e610123e960f5cc111", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618668845, "uuid": "d7b59027-24ca-4332-81d1-7f6ee3275cf7", "comment": "Malware payload", "value": "27216df23975784ab3404292b3e7a3612459e8b8988e740305cf10336ae7a1a7f9b850e5897f55cdf1d31de2876ff600", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618668845, "uuid": "d0c37045-e52b-4c97-a6b7-dcfdc3f32f1a", "value": "CAF3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618668845, "uuid": "6cb14378-fffa-4ddf-b0b0-99468147af12", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618668845, "uuid": "8ff875e4-e32e-434c-b4a8-965cdadfc1a0", "value": "3072:riFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:IeAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618668845, "uuid": "09517f5d-4f71-487f-9f2e-29172f3f0c5b", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618668845, "uuid": "ae8eec5c-7ef0-48f0-9aa3-8adfbef905a5", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618668845, "uuid": "823a3f56-f923-44a6-aa35-6f3366aa659c", "value": "3cc80d59b48dcfd289b925e1590b00822091f74e01fbde731a3435f4f2fbb409", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21e5b458-9fa2-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618680426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680426, "uuid": "ef0558b7-7ae4-42b5-88a2-07195a298a3b", "comment": "Malware payload", "value": "42aa2ca8c03c0cbf24aef3ff6808a944", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680426, "uuid": "74c57c49-957b-4a9a-b515-ff899dd59bda", "comment": "Malware payload", "value": "3d1ed389c7bf823343932f092b502949357255505f6bc7c8317706f1fb62ad8a", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680426, "uuid": "83508a63-26a9-4666-8a3a-c5c9e0528272", "comment": "Malware payload", "value": "ba8bf27ff9d301e9d29bd578e636e0889e3a6d2a", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680426, "uuid": "0d3ed4a4-58b1-4dd2-83d4-9869576319fc", "comment": "Malware payload", "value": "71f35ff5936bc92dd0694006d90da0848d064f4c5d694c86b6907e1cc9c718770a54c51ea677743d97b93b6e674540ea", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680426, "uuid": "ad38ddaf-0cde-45dc-85b1-29dd4ca858f6", "value": "D8F3D088CBB3E4E6EFB3D37866F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680426, "uuid": "50a8072a-9060-4e65-ac0b-89068da98a18", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680426, "uuid": "05616a0e-5dca-4f97-b6cb-a9db3d51349f", "value": "3072:ZmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ILc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618680426, "uuid": "0fec7aef-6a07-4204-bb15-8f13fcadd122", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618680426, "uuid": "45298dad-8a56-441b-bd36-2374faf2528f", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680426, "uuid": "525b55da-4516-4049-9501-a36c984fded5", "value": "3d1ed389c7bf823343932f092b502949357255505f6bc7c8317706f1fb62ad8a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79baadfd-9f2b-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618629463, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629463, "uuid": "52f6d079-96f9-4499-aef4-d4423cd2ad7f", "comment": "Malware payload (Dridex)", "value": "9edd0713a265175b4dc8eac46f7834be", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629463, "uuid": "73ca0164-a313-4997-9250-2fa1c4f23322", "comment": "Malware payload (Dridex)", "value": "3d2b74bd08733bea32a4d3262b868cce776fa796f4b5a97783e0d45261c11aee", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629463, "uuid": "927aef4f-a912-4c23-970a-ebf212514b56", "comment": "Malware payload (Dridex)", "value": "44bfdb543c53e754502c94c304de36ec79802426", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629463, "uuid": "27c60950-8ee7-43cc-9bca-8dc9a352758d", "comment": "Malware payload (Dridex)", "value": "7d3599d781a456c878d36a96b0d38363df2ca926e04fbe6272bb3da1b8ed89f17cc9eaa386a85f8a0d30e65b4f881f1d", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629463, "uuid": "20d3322f-2dce-4297-9d99-0d35d97bdf66", "value": "C9F3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B49671FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629463, "uuid": "69fb79a4-7323-44e3-b7a6-b2c9c6c3ee90", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629463, "uuid": "dea965c5-9f88-4453-81d9-3c0e8c7807d8", "value": "3072:tA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:t3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618629463, "uuid": "4c2d5296-4f8c-4bb5-a2f0-a4dbebf721c2", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618629463, "uuid": "332a191f-0bd3-4b28-9021-d62a3d0770ef", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629463, "uuid": "7fbd29b4-a738-4b5b-a511-107267118398", "value": "3d2b74bd08733bea32a4d3262b868cce776fa796f4b5a97783e0d45261c11aee", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8289c5f3-9fbc-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618691755, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691755, "uuid": "f58765e3-fef3-45d3-a1b3-8b3c2ddeb2f6", "comment": "Malware payload", "value": "7554b1eaadb42e310503a3246f7bf696", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691755, "uuid": "54c87544-b435-4e75-b540-bc228811ed78", "comment": "Malware payload", "value": "3d35a84bea82dc4ce3521f5f827fb2512e0f03ab1d6a9ffaeb897fe771f429da", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691755, "uuid": "a1a34c2b-803d-4857-946c-cd497b69f114", "comment": "Malware payload", "value": "93bd4bdd599d7630f559ba25899a6a013aa90dec", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691755, "uuid": "2d4f5db1-ecc5-4806-b4b3-963a8d4ae6c5", "comment": "Malware payload", "value": "82ffcc8457aa0eea3fc85b20d7d0e03fe87e35467adf08398f9b3037a2a187165783d08cbf186d2c298a50f54c5791a3", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691755, "uuid": "144fae02-0642-40e1-8dc5-452021b1df06", "value": "C9F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691755, "uuid": "4bed4e01-057f-4a6c-9b81-2ad9d47f059d", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691755, "uuid": "91be4a72-7870-4d9b-a360-e607451f7591", "value": "3072:mmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:3Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618691755, "uuid": "748d0141-1b88-4eca-93b6-6875192a00d4", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618691755, "uuid": "5e5c8b29-ffe5-4d0b-8e1b-2f4a9b051a39", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691755, "uuid": "46a4173a-3955-406e-98e1-2c0cd2451ca6", "value": "3d35a84bea82dc4ce3521f5f827fb2512e0f03ab1d6a9ffaeb897fe771f429da", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c76ca70-9f99-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618676605, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676605, "uuid": "26c5eb49-21cb-4e8f-bdee-ec24a853a869", "comment": "Malware payload", "value": "4c3d11ceeff9b942b400c6dd40bca76d", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676605, "uuid": "742eafe4-22a0-4f32-b8d1-2aa5d4c9aac8", "comment": "Malware payload", "value": "3d6a344181ebbfb0c221a1cb91892086bf806b52eadfb5fd3213a0573f934b1b", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676605, "uuid": "395474da-0eb7-49b7-940a-99099c5ea21e", "comment": "Malware payload", "value": "bd4cb41b30b0407731ab75a5460122100812c8ff", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676605, "uuid": "b84995b2-9ced-4885-9a4a-ce19eb663ba0", "comment": "Malware payload", "value": "5012b46138b172ef00e35a82cc3678c39f5f12369091a768ff5db401e0eba6be35b95afebb46e363e5b61a6ba2174ec3", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676605, "uuid": "bd8ed9b0-3cfc-4509-8fbd-e16113098594", "value": "29F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676605, "uuid": "187368f6-1f0c-46f1-94b4-8749a95adbc7", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676605, "uuid": "549ee02a-ceb7-423b-af5c-bd07fdd473b1", "value": "3072:omNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:xLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618676605, "uuid": "58ad928f-48b4-4760-8221-e95ea355a2f4", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618676605, "uuid": "4b67c1c5-a3fa-4b70-a5c2-722a714cbab9", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676605, "uuid": "8c9c66ea-9b11-46c3-8541-1b45ca208d57", "value": "3d6a344181ebbfb0c221a1cb91892086bf806b52eadfb5fd3213a0573f934b1b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5caca905-9fd5-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618702429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702429, "uuid": "9d66af12-795b-4354-b98d-91cb51a6d867", "comment": "Malware payload", "value": "601e67ab3c987871a9fc9a22d6871b3c", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702429, "uuid": "48a2e6a2-f5c7-496f-ad79-6bb128c79caa", "comment": "Malware payload", "value": "3d86135800d0968ddac2a752a0019509f29112be4617163a8792d7ab11206d3a", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702429, "uuid": "0cd2e515-64bb-497d-b480-e8ed217fc677", "comment": "Malware payload", "value": "193de633d61ef52d5b86c4bfb1126a5170fd5fb9", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702429, "uuid": "a31ee7b3-4ab0-48f9-b272-d38d842ff89a", "comment": "Malware payload", "value": "a5856c307b14164da8bacff06a6bd070884f908dcc2290e5961b03dbe95f4ae030451cd428b59666ae3be7cbc31f727b", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702429, "uuid": "715cbe09-7e7b-4b29-a237-c0945b0fe18a", "value": "49F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702429, "uuid": "85ca00f7-70c4-4d88-9cfe-a8e030ea3c36", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702429, "uuid": "ed77bbc4-f28b-47a7-af58-470a6bd458dc", "value": "3072:NmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:sLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618702429, "uuid": "b82b1f9e-20e4-43c1-9552-f7a61fd085ef", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618702429, "uuid": "e6eb4dd5-bf59-4423-9fb3-a9c59552acbb", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702429, "uuid": "0d08ab1d-e470-4e0b-9c1d-a1a54f263f1b", "value": "3d86135800d0968ddac2a752a0019509f29112be4617163a8792d7ab11206d3a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1a1a70d-9f97-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618676023, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676023, "uuid": "2c16bdd6-c2de-479b-a43f-0bd42d52850c", "comment": "Malware payload", "value": "d5f4c5eb7ea91117128f6ac9629dbf1c", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676023, "uuid": "d5c212e8-c9e5-407e-9227-1d69b31632e3", "comment": "Malware payload", "value": "3e116c4fa50ba6c6f7da72609d93d741f74e2507e99ff9286ccecf3361414670", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676023, "uuid": "bbeee8d9-65cb-413b-8067-591460493742", "comment": "Malware payload", "value": "d44dd8027ba4ee2e986188f868b9ae615f09df93", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676023, "uuid": "6182c781-6b1a-4285-ba66-768374ebee11", "comment": "Malware payload", "value": "203e6bbadc5752bec6089b87fc3f790aaf8a56ef08ca012c73665d650e804cab6a06c3585e91a65c4652a5f9f4fa08bb", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676023, "uuid": "52ca9cf8-792b-4a3e-96b5-04416c1041f9", "value": "C4F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676023, "uuid": "2bb504ff-8aa6-42a0-87b1-c8afc37818ac", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676023, "uuid": "1f9a2d7e-2a8c-4d82-94e7-1176ef0c1a33", "value": "3072:AmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:JLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618676023, "uuid": "2e19ce69-459d-41fa-b4b0-393aa10e53eb", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618676023, "uuid": "e9403238-c6f9-407e-b5a2-8550fb4a1217", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676023, "uuid": "9f98bbf2-b874-44a9-9a39-980601a3c225", "value": "3e116c4fa50ba6c6f7da72609d93d741f74e2507e99ff9286ccecf3361414670", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d84e20a-9fca-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618697760, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618697760, "uuid": "17472529-ef0b-40b9-bd1f-fbae05724274", "comment": "Malware payload", "value": "17d248f099565b101f737cbcf77a6ecb", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618697760, "uuid": "1bcdf837-75f2-4ec5-a2d2-d135d80a6688", "comment": "Malware payload", "value": "3e1ed85f33eeab0edf89b4ded4e435650e7056a73ee7857f585e91b777a3e01e", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618697760, "uuid": "0b13e1cb-3235-46e8-9699-69a716789869", "comment": "Malware payload", "value": "fbffa10791784f0b36bb9d500c8c1c05542dfd98", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618697760, "uuid": "938a1d07-1908-415a-83a9-d63b70308fa6", "comment": "Malware payload", "value": "b0d8673478c7eb69fbdcc9968aed74ae189b50a6c6d0db8164c6fc3664dfcea78fc19ac2fef058aea6a41d7aabda97ec", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618697760, "uuid": "08fc9f7f-e6d0-43fa-8682-1bbf32207ef1", "value": "36F3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618697760, "uuid": "b1a72a30-96ad-4f6b-82ab-621729c8a2db", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618697760, "uuid": "ecb21dde-505f-4c72-87b5-60f66ef5ff70", "value": "3072:7iFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:YeAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618697760, "uuid": "bd84e6eb-f3d5-4751-bf4c-02496dfd89f1", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618697760, "uuid": "4db948cb-4c1e-4e49-a683-e171639a275a", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618697760, "uuid": "85032c5d-6aff-44ad-9e9a-7bc7b91bbc32", "value": "3e1ed85f33eeab0edf89b4ded4e435650e7056a73ee7857f585e91b777a3e01e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57a704a8-9f93-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618674074, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674074, "uuid": "a42de28a-6600-48cf-a9e1-3a4cff428fd8", "comment": "Malware payload", "value": "97d1980612dbd0b7933daf97c6b0126e", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674074, "uuid": "a454ac8b-0a44-434e-98c6-50f2fc25f504", "comment": "Malware payload", "value": "3e48cc34101ab209043b6b95e200a593fe270c5734dcf056d2bae53ca9b58789", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674074, "uuid": "a0d025fd-8695-4c86-a807-6d208d16300e", "comment": "Malware payload", "value": "bac08ffb3fa02aa0316d8d3c5f4bca15ea2526c3", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674074, "uuid": "b7314b7e-3932-49a6-bc0f-caa9b7cafb03", "comment": "Malware payload", "value": "71fb8ed06c1a178692ff786530dc426488f2cdf17559367cd3a24dbd7cf4677ca8771d3aeb964fe3bd3fe92a0724380d", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674074, "uuid": "e5e7f714-a0bb-4e84-85a3-35682cbb75bb", "value": "84F3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B496B1FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674074, "uuid": "2924498d-7f0b-430a-9769-f4dac7c1eec8", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674074, "uuid": "47b774a4-7b95-464d-b639-3e856c6354e7", "value": "3072:bA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:b3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618674074, "uuid": "4b66aff0-ea68-43ab-8074-5b76cfc21057", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618674074, "uuid": "0836f068-88dd-44cf-89f7-229839cbf41f", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674074, "uuid": "f2ff0db9-79cf-4d19-b378-24dd57972226", "value": "3e48cc34101ab209043b6b95e200a593fe270c5734dcf056d2bae53ca9b58789", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e912bd9c-9f39-11eb-abe1-42010a9c0039", "comment": "Malware payload (RaccoonStealer)", "timestamp": 1618635663, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618635663, "uuid": "6a0ccccb-17e6-4b1a-aed4-c3de80f0669d", "comment": "Malware payload (RaccoonStealer)", "value": "a68bedcf4c614a60dab1934438bc0fd3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618635663, "uuid": "28cfbb7c-3126-448e-92ef-c54eb519ad52", "comment": "Malware payload (RaccoonStealer)", "value": "3f11a6c481b433ce5fa625ae1c43558335c9d281d203f3d5a0653bd2d6053940", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618635663, "uuid": "e5dc3ee9-bf77-4c0e-9e73-6b278a9793fa", "comment": "Malware payload (RaccoonStealer)", "value": "77926b7f5c22ab5c505b7cd2c342fba2fbc5e65b", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618635663, "uuid": "aa4e82fa-60c3-4c37-a4ac-f162a2f33fc2", "comment": "Malware payload (RaccoonStealer)", "value": "293fccf4257475875882e9f2aa04fda5110731669d09c1aec930d0de27b36dcbdd2514404afdc3325af60ae5b69c3706", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618635663, "uuid": "6cb2d3d5-a0e7-4872-8763-e84cd02aa27b", "value": "9DB4F12136D0C473D16324B18669CBF56F7BB53128266A4FABD80ABC5F347E1D72530A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618635663, "uuid": "dda20cf3-bbe7-438a-b01c-91b3053e1955", "value": "1891fbfa58d6ab0f5f4657e3a5d79ecb", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618635663, "uuid": "7dcbfd57-1cef-4797-bfe7-0b799e9adb0e", "value": "12288:viZYF9XuRES9w3eoCKAc5PCmmcwshTip4+:viZ21uRES9PKAc9C0dW4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618635663, "uuid": "eff8baf2-b16b-4487-82d9-51477015b4bb", "value": 540672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618635663, "uuid": "0e845609-9511-4a91-a1db-e9ee0c214e9b", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618635663, "uuid": "6c1b942e-b4a2-43d0-820d-dc72781a590c", "value": "a68bedcf4c614a60dab1934438bc0fd3.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d73daee9-9f14-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618619742, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619742, "uuid": "3f145af2-5793-4557-b608-9a32d1b3f260", "comment": "Malware payload (Dridex)", "value": "fccc85d8458aa8cfe55c168c31f18610", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619742, "uuid": "3fcf1325-563a-48be-874b-fd3363bde500", "comment": "Malware payload (Dridex)", "value": "3f27af683cb6d617ae82a57e725805b7d8be8504e17e9737abe31a322485f144", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619742, "uuid": "b53084a2-e3c4-41f7-99e4-0acc0ad14f0d", "comment": "Malware payload (Dridex)", "value": "e7122b4acf291aae5442b38314ff225a87ef40fb", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619742, "uuid": "f0586fde-4897-46cd-93ce-e4b813b616f4", "comment": "Malware payload (Dridex)", "value": "216cfb8ddea7d3ab9cf59b8c77f5fe73a65570ac4b16b77f734e3c38750a303d26c7ba519da7aa7bd1ea568261d8044f", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619742, "uuid": "c99990c8-b3e6-4b45-9626-720520ce3a1f", "value": "D1F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619742, "uuid": "a263ae67-0c18-4317-b5f9-1eb89b244b65", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619742, "uuid": "b360102d-6a92-42e8-85b9-ada4929aa039", "value": "3072:GmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:XLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618619742, "uuid": "6935ea56-5a45-4ed8-9c0b-a8082c88c97c", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618619742, "uuid": "029415b6-1519-47a6-8bf1-006e6169917f", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619742, "uuid": "85b59028-b662-4f9f-b6c9-4efd23428b6d", "value": "3f27af683cb6d617ae82a57e725805b7d8be8504e17e9737abe31a322485f144", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "163eb2b3-9f99-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618676541, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676541, "uuid": "64d7eeb1-286a-44a9-9306-3048ff070bd7", "comment": "Malware payload", "value": "5a27261939f20e8aede6a003cdd47f2e", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676541, "uuid": "996e561f-45c7-495f-b58f-0ad2beb2d8dd", "comment": "Malware payload", "value": "3f2d96ba0380b393de33a40a660f6df4ebf07cbf5cf0189cc07eb5f4c52da39f", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676541, "uuid": "a6a4e180-386c-44ad-a306-83ee47977609", "comment": "Malware payload", "value": "e26f62aefc2523815b95192f1cfee4cbd52d20fe", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676541, "uuid": "3279c333-ae2f-4983-97e2-41c63191524a", "comment": "Malware payload", "value": "275cfffece75e24b1a9c1a9d6abd4914f2685d8252aeb859358210dd39ead0071d02ed4bd7bc7ce110b04d0850295188", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676541, "uuid": "3858b82e-4729-499e-9171-7ba3d51bbf18", "value": "9FF3D088CBB3E4E6EFB3D37966F85E1B561574551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676541, "uuid": "ae82f83d-5e39-4d1e-b27a-1a123c77bf32", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676541, "uuid": "d163a5fe-2361-4175-93fb-7edc276907d1", "value": "3072:8mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:lLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618676541, "uuid": "aa60c161-1c2b-4ea4-9c64-ae8f8ceead68", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618676541, "uuid": "64c16b5e-f2f4-4549-8139-3057fd238e86", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676541, "uuid": "30df8d58-63b5-4e88-86cc-80d68cab925d", "value": "3f2d96ba0380b393de33a40a660f6df4ebf07cbf5cf0189cc07eb5f4c52da39f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "230b2ab9-9fd6-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618702762, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702762, "uuid": "4c2dce1c-21c4-478d-9e7e-dec64be022e3", "comment": "Malware payload", "value": "56faf4349c5002c69f902896a633eac9", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702762, "uuid": "179cd504-34a6-4731-9f18-1a22c7837d2f", "comment": "Malware payload", "value": "3f9cb4e5361d91481e4f02b0830e63c516deca42c23a6b858cc1973504fb21b4", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702762, "uuid": "e0d30098-1a23-409c-a885-a92e89d25368", "comment": "Malware payload", "value": "15d0435e541d862476b2c46d72892646cefdc15c", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702762, "uuid": "09068098-c74f-40ad-b655-7e80e8cfc51e", "comment": "Malware payload", "value": "5ab8f0dce820aff02b82b3491803f0a90fb63d5334c5d7f00a37b1b9fc891435349b6d0fd2363b5acba1c54213108e5b", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702762, "uuid": "aeebe5ec-39d9-4f50-aef3-174bc35c1763", "value": "69F3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B496B1FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702762, "uuid": "b2bb497e-1208-4522-b698-9e995fe6179c", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702762, "uuid": "1de8a796-7d01-4543-ba61-89d3cb949f48", "value": "3072:fA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:f3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618702762, "uuid": "359a42a8-d9a4-4b1f-a43c-22045696a0e7", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618702762, "uuid": "ec107fe1-429e-461f-926f-980fd8428a09", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702762, "uuid": "4bf5fce7-2f1c-4971-b11a-761cccab0619", "value": "3f9cb4e5361d91481e4f02b0830e63c516deca42c23a6b858cc1973504fb21b4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61a2a564-9f12-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618618686, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618686, "uuid": "9d8a7b3b-1535-4986-9a31-cd1ed95989f6", "comment": "Malware payload (Dridex)", "value": "84bbb6f670f4744604c5a1d59994b25b", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618686, "uuid": "3e6e14b6-5ef9-4ff9-9d67-be5aaa9ffcc7", "comment": "Malware payload (Dridex)", "value": "3fe45f19bfb9226cb98771e5fafd0ae9111b6af5334a6465ecb1f5282290f68a", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618686, "uuid": "75e6b606-b809-4536-994b-cc8da4729eaf", "comment": "Malware payload (Dridex)", "value": "d6722482dbc1ada2999d418d3785396e54785c10", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618686, "uuid": "7e8b6d3e-6750-4443-a8ee-10ee07e47e6a", "comment": "Malware payload (Dridex)", "value": "eb06293977381f788fcc338e7b9ef97888c99180912552840ba729209040b030db8980c222ec36fde8871714c56ced8b", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618686, "uuid": "421c5f53-9c3a-4890-a57f-5b24bbaad11e", "value": "CBF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618686, "uuid": "0821fa03-263a-4165-9e72-9f4818848c42", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618686, "uuid": "c7259560-1553-4236-8e61-c537b754036d", "value": "3072:0lpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:0lo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618618686, "uuid": "aaaf7971-3008-4637-81dc-8f09fb9cc7c4", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618618686, "uuid": "9f5d0449-1cbf-4044-ab0c-862119b6c3d3", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618686, "uuid": "4a6e89e0-3031-4a8f-b9b0-c4e20f49427e", "value": "3fe45f19bfb9226cb98771e5fafd0ae9111b6af5334a6465ecb1f5282290f68a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66a9a5aa-9fc1-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618693856, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618693856, "uuid": "fc38e58b-603b-4c85-9d0e-f25ebb63a9b9", "comment": "Malware payload", "value": "03af01e256796a6ca6c1da164dfb8998", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618693856, "uuid": "c246c9ec-deb5-4e53-b616-bbb093c55cbb", "comment": "Malware payload", "value": "405570d95817713f3f9664fbbc436b6fa9066751e6f3aace58c3a822792ee8b2", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618693856, "uuid": "e34d4096-1656-402d-bbf9-5f892d6b2288", "comment": "Malware payload", "value": "2f1eb369ac068d3a01dd0651ff8734516b038386", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618693856, "uuid": "7da4727b-d5b6-49e2-905f-fd7293bab7c9", "comment": "Malware payload", "value": "6973e61f1e4d5a08ce9ba366e6d088d8b3f108a3b731d6a1c4a213ad07b02e630c04ad7f2a1299e216f496d03e30392a", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618693856, "uuid": "f880d5b7-20c5-4a9e-b9fe-0bd06075827b", "value": "8BF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618693856, "uuid": "822e79ef-478e-4826-a20c-de32c3cebec0", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618693856, "uuid": "d78f94cf-97c4-4d1d-b7c2-c63d74a45b82", "value": "3072:ilpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:ilo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618693856, "uuid": "1d90948e-9121-47a5-a1cc-3ad5449d50af", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618693856, "uuid": "beb1e2ce-f8d5-41f2-b321-93d2cbfecb4b", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618693856, "uuid": "eb61df01-b374-436d-b5d7-0bdc2a792816", "value": "405570d95817713f3f9664fbbc436b6fa9066751e6f3aace58c3a822792ee8b2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb1b05aa-9f2a-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618629170, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629170, "uuid": "ac476d68-f5dc-4094-982a-6de8201b6cb2", "comment": "Malware payload (Dridex)", "value": "0aa3d55cce2ebeb2352a03b9e5aedb5b", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629170, "uuid": "2253a059-1623-47d5-9985-9cc4018229eb", "comment": "Malware payload (Dridex)", "value": "409cc576031948bda3c32262f0fb6fccb6653ce48522e0884801f62d1cb0e52a", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629170, "uuid": "5e505935-a907-43af-90cb-fa6fa3d7ed85", "comment": "Malware payload (Dridex)", "value": "5ec4e01eb0efaa7971974dd28005ba86e44c56e1", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629170, "uuid": "e727409d-98c1-48f4-9dcf-004dcb34fac2", "comment": "Malware payload (Dridex)", "value": "f14e74bec79b27f17b0ac124e6b1deb0d809a1c34d631f8be1996767b3726f5aaf77b3fbfa4c31959e80341b65729a31", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629170, "uuid": "bcb387e7-99af-4629-8dc5-19062eae3f4d", "value": "99F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629170, "uuid": "330fe0d4-2375-410d-b3b1-e5ebf2ec920c", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629170, "uuid": "507b5dea-996a-4e86-8f96-40edee9fc790", "value": "3072:jmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:SLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618629170, "uuid": "b153a618-4063-4ed6-b95f-3fd963d1e0b9", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618629170, "uuid": "e6afaf0d-c52c-4927-abf3-63beb49efb16", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629170, "uuid": "2c3ab3e5-42b8-4d90-94b0-1a45d85b5704", "value": "409cc576031948bda3c32262f0fb6fccb6653ce48522e0884801f62d1cb0e52a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d7a38e78-9f1b-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618622749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622749, "uuid": "5663cefe-a278-42e9-ac2a-9fd2b10baa40", "comment": "Malware payload (Dridex)", "value": "7f453248297aeb715f1d8e005a77ed9d", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622749, "uuid": "d4b8f801-6911-42e1-b271-9ad7a0af86db", "comment": "Malware payload (Dridex)", "value": "4115a51e041c517c611e6e5627e0a4ebe94bd3d85165a5683362fa3a6f6ed36b", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622749, "uuid": "ed3f10e7-49c5-48f8-ad00-9b502fc42d5d", "comment": "Malware payload (Dridex)", "value": "4ae556ea4df25f070cf481ddf04948b6227158ae", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622749, "uuid": "ecef2f05-9302-4d6c-a5aa-ed81045abbd0", "comment": "Malware payload (Dridex)", "value": "97941705468f3c891183645862d36ca2d832a79fd1079c20c5af940f36b2cbe8882d65d49f1a744849bf305ad25a2660", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622749, "uuid": "a0fed9d7-baa9-44ce-95e2-ee013ef5a683", "value": "E2F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622749, "uuid": "dd23e872-b13f-4d48-87d3-4fff3d419ff9", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622749, "uuid": "aff67d8b-95ff-4715-b863-5944b1d68da2", "value": "3072:ZmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ILc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618622749, "uuid": "53b1d70f-56f8-4419-b563-78efc893397c", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618622749, "uuid": "26d933aa-fd77-48eb-9cda-b29d3d8793d0", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622749, "uuid": "60a8ac44-28e9-495d-a67c-fdddef190d7b", "value": "4115a51e041c517c611e6e5627e0a4ebe94bd3d85165a5683362fa3a6f6ed36b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba322720-9f86-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618668656, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618668656, "uuid": "16cc7e83-d1e7-40cd-af60-b96c9735de0b", "comment": "Malware payload", "value": "e4ec246d5bfd957e2f25d7d6ca9a9f89", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618668656, "uuid": "a549bd02-1913-477a-89de-d049e2127f82", "comment": "Malware payload", "value": "41447d3bb35469125559c7cbd14cd4b063120f78a9bd79103c65d939458a88e5", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618668656, "uuid": "f0773808-62c6-4b89-900f-43f060500c4e", "comment": "Malware payload", "value": "8c067f0efa674521cbb7784a8eab9484a33e303f", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618668656, "uuid": "49bd115f-a55c-42c8-a8a4-3f73eb646a5a", "comment": "Malware payload", "value": "7d4ce6f4a540781db96651a37328d26c63f0026c188201a78239b9b3f061ffe7c19b560835d6925b0aa19c561830e1f8", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618668656, "uuid": "a76ef80d-4a58-4054-a358-dd1e6446707b", "value": "E9F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618668656, "uuid": "3910570f-d53b-4e47-9f6a-7202a1566e6e", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618668656, "uuid": "2f6d7660-6ae4-44df-aeb6-5ac6b5d6735d", "value": "3072:PmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:OLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618668656, "uuid": "082ff3da-0b6b-4065-baef-d85dadbe5064", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618668656, "uuid": "51e2de60-44f8-4e32-ae07-b59d4875e62d", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618668656, "uuid": "dffd62b0-b79f-47dd-ac9d-6fd1d3b2c585", "value": "41447d3bb35469125559c7cbd14cd4b063120f78a9bd79103c65d939458a88e5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6ade677-9f69-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618656168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656168, "uuid": "239bc4f3-d5f4-4de5-9b17-6d2b9a78d7ba", "comment": "Malware payload (Dridex)", "value": "777ce23f99ade30fc92d26b1a186acea", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656168, "uuid": "ba144938-a081-4537-a975-5adfca9ed5bc", "comment": "Malware payload (Dridex)", "value": "41493c062d92096b8c6679a622598b38e96f4db5d2fccb695c552a4301e9c3a8", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656168, "uuid": "eeaad572-4ca2-4b21-9b5f-32721a59e98e", "comment": "Malware payload (Dridex)", "value": "a5e699f73d826fd20641c0ff9f0037e73d83f88a", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656168, "uuid": "a49b6df9-d29c-4dc7-90a1-bb540a100d24", "comment": "Malware payload (Dridex)", "value": "035f825775425ebfe301bf969623abb00a0ba90e5d39364e19d81dca98752e88882f2b4a11064ff131cfcce7dd73432a", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656168, "uuid": "b8238146-84da-40b9-a067-afd0783cd37c", "value": "4CF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656168, "uuid": "81a7a0b1-f37e-41b1-b9e3-8bdfdac104c2", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656168, "uuid": "704faa53-00cc-4d69-9fc2-9a13f1d0316e", "value": "3072:Ilpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Ilo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618656168, "uuid": "013d4a87-99da-4c0c-bebf-1a71d2537ade", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618656168, "uuid": "15dc16c6-4b42-4ba0-9a0c-da6ad8bfc60e", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656168, "uuid": "98c298d4-cb3e-4e83-bec6-4d5484a13a28", "value": "41493c062d92096b8c6679a622598b38e96f4db5d2fccb695c552a4301e9c3a8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ecca5bb1-9f3f-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618638246, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618638246, "uuid": "10488bba-3dac-47db-ad38-0a5a730d5570", "comment": "Malware payload (Dridex)", "value": "06e10150aff21bfb8c4a93b356e3f7b7", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618638246, "uuid": "1bbe250d-0c40-447a-b29d-310f9997b6c3", "comment": "Malware payload (Dridex)", "value": "41bc0d82cee09232abe1c345a133df404916eb72e4b6db114fc507d7ab281251", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618638246, "uuid": "2b5ed897-f5ec-4bac-bb70-c7ef78fa7b09", "comment": "Malware payload (Dridex)", "value": "4bdd400f23b147740698ab4df2a049f208bb1983", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618638246, "uuid": "13c1b1b2-24d8-4f3d-92de-15d3f2d50ac6", "comment": "Malware payload (Dridex)", "value": "b8ce59b5d53dbf8f51c6e33be8856ed62d6ada3a1c681fdd9119d8716c320936f9885dc68efdaf22509b13393a44abca", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618638246, "uuid": "66e44d65-4bdc-450b-aeea-14f00a0bad3f", "value": "4BF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618638246, "uuid": "d598a0af-f408-408e-a333-898367618842", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618638246, "uuid": "10f5121d-16e7-4a25-8a15-b3638ab9d858", "value": "3072:TmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:iLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618638246, "uuid": "d93c037f-efac-41b5-9609-e5f3b6b05522", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618638246, "uuid": "d11a4645-95ca-4e95-a5c0-91934d2b9a30", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618638246, "uuid": "b5c3b652-5fdd-489f-843e-faa332da45d4", "value": "41bc0d82cee09232abe1c345a133df404916eb72e4b6db114fc507d7ab281251", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ed36afe-9f71-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618659429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618659429, "uuid": "4c83d42f-793e-4863-ade4-4a36f638f92a", "comment": "Malware payload (Dridex)", "value": "5131c1d40dd39c559766fe41d886fd85", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618659429, "uuid": "d1da434f-b544-4d32-a384-c2a623f234aa", "comment": "Malware payload (Dridex)", "value": "4201421216baf9e1f1ea72279ea6451cdb5d940cf5aa304ea65877076aee747d", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618659429, "uuid": "4c127800-5f11-40a9-8aa3-e46af4147209", "comment": "Malware payload (Dridex)", "value": "58277ca7c1119d3f74a8ee4ba9f676f38c55878e", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618659429, "uuid": "763d359f-68aa-4c63-bc46-b22a0e92a957", "comment": "Malware payload (Dridex)", "value": "b4bc408a42986d090e33748024fac1de6eeff86caba742d2343142e6c9f180cfb91124f04e4744460c735c909c45a425", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618659429, "uuid": "c947d424-c3c9-4849-a73a-08b4d7a6de9b", "value": "F4F3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B496B1FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618659429, "uuid": "b59ad297-8c0f-4d37-a6f0-ce0bbdc3bf1a", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618659429, "uuid": "1ce2a102-6e98-4468-a197-0f4b656527d9", "value": "3072:wA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:w3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618659429, "uuid": "122eef67-6e44-4a07-8d2b-aac433c70cf4", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618659429, "uuid": "f7b08797-f4d1-4dac-9a03-ba8f923ab28d", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618659429, "uuid": "b2277465-c5c0-4826-a16e-8de75a9e6cfe", "value": "4201421216baf9e1f1ea72279ea6451cdb5d940cf5aa304ea65877076aee747d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f8f56e1-9f9a-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618677121, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677121, "uuid": "57047518-8343-49d2-a96d-63b704438af4", "comment": "Malware payload", "value": "9367b4a7029365a6ff8d0a8e758214d2", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677121, "uuid": "f5753797-0ebe-428e-a461-cb6a2e6537fd", "comment": "Malware payload", "value": "42afd152a7fba59d3495bb6369ee110a6c106a7af2d3f2946b9a29f54fb6fcc2", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677121, "uuid": "3860c45a-46e3-4c36-8908-e1bec9257444", "comment": "Malware payload", "value": "bb4fdf323c9ed0e68c1db6dcd7a756823fe7288b", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677121, "uuid": "acf43b7f-cfd1-4b7f-827c-88efa28e39ab", "comment": "Malware payload", "value": "f9104bbae8f2c5786d39353d94ffd6f524528748c62d62c36ccf9992bea2b0b73b38bf24052dea3af150d3c5c7290b48", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677121, "uuid": "b8627323-9ab8-47ea-883a-252c945f1e69", "value": "62F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677121, "uuid": "6dd1f883-079a-4e7d-a787-f4af9cfc5f14", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677121, "uuid": "3d1dc022-e786-4da1-af67-6264278926ea", "value": "3072:OmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:/Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618677121, "uuid": "44cff0ac-ca1f-4f56-8ad6-25cca32b5e34", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618677121, "uuid": "f1cbbe86-1085-4962-a1da-8f2f5790249e", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677121, "uuid": "b3a77701-a281-4dc8-bab0-4e8de3ef3014", "value": "42afd152a7fba59d3495bb6369ee110a6c106a7af2d3f2946b9a29f54fb6fcc2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a63f6d9-9fa9-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618683608, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683608, "uuid": "25c03788-0ae6-42c3-bf19-9f4c96ac14e6", "comment": "Malware payload", "value": "cd682aab5304cab9507fc5541c1cdbff", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683608, "uuid": "0a89bce1-6750-44df-91cf-8c364d0dcfc7", "comment": "Malware payload", "value": "42c73acc496ac584aeb8bb5132610a90846f2ff0327c3d3dbac14b341ece4854", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683608, "uuid": "44bcce5f-f423-485a-8274-877716af30ca", "comment": "Malware payload", "value": "8be00de804ffb7e330aabd57998ed68d9cc3f17a", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683608, "uuid": "d709b246-1b13-453c-b1ef-580647923643", "comment": "Malware payload", "value": "5936d7f29cc4e803eac9e4c390750859a45bdfc1543615159ea88f4272317a04ee46e634ff40eab182c9de49014281b5", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683608, "uuid": "86dca905-b5c7-4b12-bb22-2e2ead35419d", "value": "97F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683608, "uuid": "59d16a1a-2d64-435c-9a1c-503d2ac01dcc", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683608, "uuid": "8a089591-3769-493b-bc32-f6d3939f1c7e", "value": "3072:Xlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Xlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618683608, "uuid": "d89306db-29ea-4895-81f5-353c1516f10d", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618683608, "uuid": "7735cffc-f46b-4f18-a057-f8f7bb18b1ed", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683608, "uuid": "809c94c8-8224-401f-971b-3ee9c428cd3b", "value": "42c73acc496ac584aeb8bb5132610a90846f2ff0327c3d3dbac14b341ece4854", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4fad277-9f35-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618633965, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633965, "uuid": "f5cc67aa-96be-48e3-8dd3-b34fac68f3a3", "comment": "Malware payload (Dridex)", "value": "fc154c119bf119371faff6a5cc9e0553", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633965, "uuid": "0db0021e-f66d-44be-a8cb-fd4d354374c3", "comment": "Malware payload (Dridex)", "value": "432f79315efef9333e77fe2bc4217ac2ae0f86ecc73376e02e9881e0a119b8c3", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633965, "uuid": "13699021-046e-4aa1-a86e-783107697dd8", "comment": "Malware payload (Dridex)", "value": "80d72c20f7217d59f89c056c10b63a8b3eca2084", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633965, "uuid": "1b2eb856-2fbb-4767-bb83-a92e17aaa319", "comment": "Malware payload (Dridex)", "value": "4faa1d73c2fe7e8542d32d642b7776ddbcad9a012d1c365db1bcc213bc84c3ce40f76fa1e1f51f2357bb69f4a704393f", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633965, "uuid": "7f74a01f-1e1f-47a9-8d72-08b48c167509", "value": "6BF3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633965, "uuid": "40560e27-5f30-497d-90a0-b50d9c115f44", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633965, "uuid": "d6a6f445-dfbf-49d1-b629-ef4afc9873b0", "value": "3072:wiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:beAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618633965, "uuid": "ca3e4624-46d6-4818-8d88-98bed003d20e", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618633965, "uuid": "3864e57e-631c-4ccc-90eb-6bb15c1ec23e", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633965, "uuid": "5bec993b-9491-4595-a94d-9e81eff9b2b4", "value": "432f79315efef9333e77fe2bc4217ac2ae0f86ecc73376e02e9881e0a119b8c3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9cdf560-9f2b-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618629571, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629571, "uuid": "3d6add34-dd75-4496-be3c-3fdaf36502f6", "comment": "Malware payload (Dridex)", "value": "ebb8a262143d2c925c81507774326bae", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629571, "uuid": "78018b59-0f13-4fe2-a85f-829ee18af81e", "comment": "Malware payload (Dridex)", "value": "43342aba84d6be181cffc73a0733b63110a01f87e537360234266dfc7f83772f", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629571, "uuid": "26be7420-7d8e-47fb-8b05-55e5aeef01bd", "comment": "Malware payload (Dridex)", "value": "176d25bd7fed200b79342f0312c07472311d8b14", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629571, "uuid": "1508e83e-773c-4735-9c5e-0b88bdd32e72", "comment": "Malware payload (Dridex)", "value": "a448d7ef3117aca53de28f9a2216165aad9ee854d3027439c2df0116faa0c3bd045e8be2e861e8e1c116c8dd355dbf25", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629571, "uuid": "9c9e8b3b-c602-4c21-9c83-865570ea18b8", "value": "86F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629571, "uuid": "cf6c1edf-b009-4d94-ad8c-3317fe59099e", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629571, "uuid": "6272bb98-b747-4ee8-8ef7-64569b1bcf34", "value": "3072:ImNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:RLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618629571, "uuid": "98340789-f48c-429b-8a87-faa3e4f2bd1a", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618629571, "uuid": "f77d9dca-0cb8-49a3-8ae5-987639186b92", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629571, "uuid": "cb934b09-c347-448b-ae68-8e16d6056a05", "value": "43342aba84d6be181cffc73a0733b63110a01f87e537360234266dfc7f83772f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4a85d66-9fcc-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618698711, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698711, "uuid": "eb8411c9-3fdc-4630-9c86-b15f4e90ce22", "comment": "Malware payload", "value": "c5bb85688a96b983d8ed3b269c3ac5fb", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698711, "uuid": "4acf304f-6f46-4171-9e69-8ede7c3a3384", "comment": "Malware payload", "value": "43c2a8cb4d626b9c185f4416a812ab7373930b5e281e753c56ce92902b1fedcc", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698711, "uuid": "65b96014-8c7f-4d51-9986-5f13d80333e7", "comment": "Malware payload", "value": "7e17aa27021ef4f16c749907b7559fa79194c33c", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698711, "uuid": "0268bb17-69e2-41db-8eeb-d57e7b05dcf4", "comment": "Malware payload", "value": "0f698061a25fe20ac6598460ce69568ff72723be84a29d4e2862e1e7da7dca88e460bb42ca10d73fdfbc0ea24749b7c1", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698711, "uuid": "1f1eb604-d7e4-456c-9354-0b923cd37ef3", "value": "F3F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698711, "uuid": "68a2d71b-3db7-4021-86df-63c917352055", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698711, "uuid": "6f531226-2c9e-42ed-992b-12dbf7db406e", "value": "3072:3mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:WLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618698711, "uuid": "eb2d5d71-6fdb-4782-af2e-2e51f2ce1341", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618698711, "uuid": "8021add1-8f63-4479-9aeb-571d9ba65e6e", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698711, "uuid": "45a0bf7e-1ea1-4d24-9637-8dcc15f84490", "value": "43c2a8cb4d626b9c185f4416a812ab7373930b5e281e753c56ce92902b1fedcc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a43f54c1-9fce-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618699543, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618699543, "uuid": "50167ef7-a637-4105-a11d-b0c10560eab7", "comment": "Malware payload", "value": "6754db1929564e9ad1695ff08b47bb58", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618699543, "uuid": "debbbae4-f25c-4cac-9006-30083fcfd9e0", "comment": "Malware payload", "value": "4441e410991e2ed09cc8e5a9847c0dbfec2f62d5867b4bb3066da4fbc4a65a16", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618699543, "uuid": "c6df9713-d7f8-408d-a988-87265ac27f89", "comment": "Malware payload", "value": "ed57eac9329ef464f3e50d99ba81db0d377cb920", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618699543, "uuid": "eed10b0a-7071-4a23-9343-1a12ee1e5b63", "comment": "Malware payload", "value": "1429c888fafe9981156ceec7d2d5aac668609afc012515142717c07795fb5a127b5b70f49d79ea50deb75ab901295e37", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618699543, "uuid": "65e5099f-a8c7-4bf2-8433-50ba57a22368", "value": "0BF3DF08D1CFCA46E00B69700D9A761BB79839812F7C8EA8B49671FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618699543, "uuid": "abdd392e-1c99-44af-8e2a-7977297fa2f6", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618699543, "uuid": "41046623-5379-4c67-a39a-2f05f4b6e828", "value": "3072:eA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:e3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618699543, "uuid": "8602838f-de55-400b-811d-22da2f1bc2de", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618699543, "uuid": "02f8313d-3d0e-4d88-8618-d314eb098a6a", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618699543, "uuid": "3f3841f9-b564-41d4-97bb-d79f59f0ecc3", "value": "4441e410991e2ed09cc8e5a9847c0dbfec2f62d5867b4bb3066da4fbc4a65a16", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71b563cd-9f9c-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618677983, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677983, "uuid": "8d22a83b-46e0-41c4-9593-4fc956aed2dc", "comment": "Malware payload", "value": "1c21fe3b4022c97c84fdb4dc0c7dd6cc", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677983, "uuid": "3069b2a7-fe52-4751-86af-c38cf2e374ff", "comment": "Malware payload", "value": "44605e9be8d3a9972cb7ae9b667f0b2ae312b0823964e6d2706af1fdf53e7e37", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677983, "uuid": "02020df9-dbf3-4138-832d-0bf2019e20f9", "comment": "Malware payload", "value": "934b4e55130ce5e5d18439e4708b4c08e5f2a27c", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677983, "uuid": "8086627a-11f5-4a36-8170-c1eaf37c13ac", "comment": "Malware payload", "value": "9859fb9fba5e2e12cd213bd9bcd1496e60111e3a91bec5c3b96201c017a6dd39d7c367f492545639bdb7c140b4b91c3f", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677983, "uuid": "1b9a076d-4858-4805-8fcc-fed456136ab1", "value": "DFF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677983, "uuid": "62f41069-3ab6-4838-ba55-a88fd723670a", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677983, "uuid": "09f829e8-fb1b-45fa-a07b-3e34ba5bb151", "value": "3072:zlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:zlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618677983, "uuid": "c27bb3e5-5a44-42c5-8135-a9bff12a46c9", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618677983, "uuid": "5cdd67cf-ded4-4f7e-b04c-dd22722315df", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677983, "uuid": "429ef690-e6d2-4e98-996a-5d4a46db9719", "value": "44605e9be8d3a9972cb7ae9b667f0b2ae312b0823964e6d2706af1fdf53e7e37", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29640566-9f25-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618626752, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626752, "uuid": "f6926743-644b-40e5-813c-f2f9cbbeb5b3", "comment": "Malware payload (Dridex)", "value": "6e6b31f1bd50fd4a58b81abda352c13e", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626752, "uuid": "6cc91022-2862-4ea8-9ab7-b4de4e712bbd", "comment": "Malware payload (Dridex)", "value": "446cf8b47dfafbe22ef63b3f614b75eeb53acd252d9ef0c29a62c5713ccb5469", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626752, "uuid": "45c55cad-979a-4fca-8a57-eacfab27c797", "comment": "Malware payload (Dridex)", "value": "1b0883045840696dd8e2a762a4a448084128d7b6", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626752, "uuid": "7ecd8105-0c52-4610-bd67-dcdcd536f52a", "comment": "Malware payload (Dridex)", "value": "792541a73a9f1c1e9d491776acb323831154185bc142bb51a6b238ae66efcc9f4971e6879fce14a6fc540d238f977e1d", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626752, "uuid": "ace34e43-3e63-4b83-8a54-bb38dc24175c", "value": "7DF3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626752, "uuid": "6d4c8dda-3667-4d7a-98e3-23d2bdca49a6", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626752, "uuid": "40fdf6e3-9b23-40d2-bceb-c862a2fcfc16", "value": "3072:YiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:jeAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618626752, "uuid": "ed86856d-f914-4043-8c5a-df844608db3d", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618626752, "uuid": "140fdeb0-e8ff-4607-bcef-9b3dff04b908", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626752, "uuid": "f3417df1-6081-45d9-8d22-880f5fbc3934", "value": "446cf8b47dfafbe22ef63b3f614b75eeb53acd252d9ef0c29a62c5713ccb5469", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2db1169-9f36-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618634284, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634284, "uuid": "f78fee6d-ef90-4b57-83e8-b7b9b1d93289", "comment": "Malware payload (Dridex)", "value": "95fb4df9ab19be559e50203311cad1bf", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634284, "uuid": "0534a8b6-3306-4660-96bf-7dbc848161e4", "comment": "Malware payload (Dridex)", "value": "44f11afc5748b771ab1b49d42f78e9a9a966d8a023f03f44e1149b219d4978a2", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634284, "uuid": "7bea3935-09ba-4609-918a-60c028dc2bb9", "comment": "Malware payload (Dridex)", "value": "5b2bfe149b4b23aaf76d82534bf67e6a1803fbd8", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634284, "uuid": "9f143b08-4f70-4bb8-af0b-f3672e6cecc5", "comment": "Malware payload (Dridex)", "value": "92c0f83ae7f9e8c51c29950a1eaff9357e4e626ae5c62888853e5efb37a5277c272d8e4af70553bafd33b472c261f254", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634284, "uuid": "26b4690f-652d-41a8-8609-d6f7e0959025", "value": "27F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634284, "uuid": "5211c474-c6c1-44a9-867c-4cbf66bffcf7", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634284, "uuid": "75cbc3f6-6930-4421-b764-14adb24fa35c", "value": "3072:klpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:klo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618634284, "uuid": "20c58f1f-40a2-4087-a635-8e54b2f1e8aa", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618634284, "uuid": "ab2a7872-f20c-43f8-b014-71161521404e", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634284, "uuid": "cef96959-5b93-4509-81e5-f7db799085ad", "value": "44f11afc5748b771ab1b49d42f78e9a9a966d8a023f03f44e1149b219d4978a2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb1a65c2-9f2a-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618629170, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629170, "uuid": "418581bf-678e-4441-8d23-a3b57b67ca6e", "comment": "Malware payload (Dridex)", "value": "6beec0171889cc8d443f4de26bf89aeb", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629170, "uuid": "287255ed-a26f-4051-872a-aaab62b05a83", "comment": "Malware payload (Dridex)", "value": "44ff7677d0c1692df5925bdea7691d729b5b3ecdabc52f9912b5eaa0e1849b23", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629170, "uuid": "7b53dcdc-cafd-44b2-900e-07e6c19308ae", "comment": "Malware payload (Dridex)", "value": "5c426afa4c5294572d8972cae05c54c8532db913", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629170, "uuid": "1304cc02-837a-44d7-b406-6ce70f8c919d", "comment": "Malware payload (Dridex)", "value": "62920f7903db590d69af987284e0e0e9a227a15b6b26d8e592d779b3ef680db03452a7fbde358a373937b20ab201d189", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629170, "uuid": "b5676ecc-969e-4eca-ac9f-b070f8ac6f27", "value": "5FF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629170, "uuid": "a652f294-e268-4aeb-8fe5-e3a0020cb213", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629170, "uuid": "e1ede60d-e932-4232-9aaa-2808b20a0eb7", "value": "3072:vmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:uLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618629170, "uuid": "51c80e4d-0097-4a21-93ff-007085463ddf", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618629170, "uuid": "126812d8-8089-41d9-9a29-9fb501e758b2", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629170, "uuid": "dee14ddb-d01a-4519-b064-dc9328917581", "value": "44ff7677d0c1692df5925bdea7691d729b5b3ecdabc52f9912b5eaa0e1849b23", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f74c992e-9f35-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618633969, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633969, "uuid": "334742b3-9147-42c1-8e67-4597d6a56691", "comment": "Malware payload (Dridex)", "value": "8ea27ee10051ee191e46ec05bbd48b9c", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633969, "uuid": "53252da1-5442-4df1-879f-d897939320c2", "comment": "Malware payload (Dridex)", "value": "453ae45380de00bffdf538f3c32d02a6be15ce1aa4cda379e8c064d476ccf15e", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633969, "uuid": "fdc7bc1f-a583-42d3-b1c8-34ba4d07b16c", "comment": "Malware payload (Dridex)", "value": "0ef443768fb1333f9c7f9fa6b041578e4f07506c", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633969, "uuid": "bb01ec63-b083-4571-955e-8f9874899742", "comment": "Malware payload (Dridex)", "value": "8dedaf6998d9db6cee1b2775b2d8a5b81d09d762e46fb6a84c4ecb0de1dbfd2615db096d508847e93b3d68e376b4353d", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633969, "uuid": "9b3daecf-7357-4dea-a352-7cfdd5434daa", "value": "06F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633969, "uuid": "53e39c31-8079-4a0b-af20-eb0e5c82ee42", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633969, "uuid": "05b4c712-a77a-4841-b3c2-7d088f7d8d44", "value": "3072:OmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:/Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618633969, "uuid": "1c4859f5-9c77-4898-a472-a9a993f0e69b", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618633969, "uuid": "4a6fa831-0dd8-4d00-82c8-71959ac5849c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633969, "uuid": "3f5e3071-8061-4bbf-87dc-7e8c071a4272", "value": "453ae45380de00bffdf538f3c32d02a6be15ce1aa4cda379e8c064d476ccf15e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4412976d-9fab-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618684349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618684349, "uuid": "0ff80d61-3baf-427f-ac40-de1690a6d102", "comment": "Malware payload", "value": "1758a55522219b379151f15937d522ac", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618684349, "uuid": "9c953449-1234-4798-a9d8-a65a1ab42946", "comment": "Malware payload", "value": "45406fef0a3dcbd5f2a4e28c38c7092ab3ec276ae39a93aba8c79f968eda9cce", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618684349, "uuid": "9222a97e-a1fe-4bac-992c-b4d2d8d73d7b", "comment": "Malware payload", "value": "65ba3ce7d63e2c82c0f40ee03d52c69f4ee614e4", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618684349, "uuid": "39a2ea7d-1210-4009-8f8b-de321bc07bd9", "comment": "Malware payload", "value": "07f62a8f0ca08871fe8e9e10843a68ea50c6719d275e71696bcb825d90ed5f9672594490b489115804e71a4997cfb7ff", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618684349, "uuid": "cda747bb-49e0-4836-affa-fa977e43af94", "value": "A1F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618684349, "uuid": "3152700b-b4a4-4f77-bed5-3adc74d4f6ec", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618684349, "uuid": "8c80d1e4-2632-41ac-8e5a-3bd702f809db", "value": "3072:fmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:+Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618684349, "uuid": "e6f34ed1-f3e7-4092-a7cb-d2cde56d7fb3", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618684349, "uuid": "3d7b8c12-3085-4e77-a222-446e1b8ff3d0", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618684349, "uuid": "1ce0f38c-1c23-4552-844f-aee6da393262", "value": "45406fef0a3dcbd5f2a4e28c38c7092ab3ec276ae39a93aba8c79f968eda9cce", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc9ec800-9f28-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618628395, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618628395, "uuid": "eba06c8e-9b50-4a98-948a-ffc2e8072a7f", "comment": "Malware payload (Dridex)", "value": "a44ea71f5e9e3d0d21232298956b102f", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618628395, "uuid": "bad679d1-8478-4c7a-b0b3-2aeafb9e1aa3", "comment": "Malware payload (Dridex)", "value": "45a55f013a3ba8fb4b06d97073faa94a5879e49f9003fa34e7070000c0993f30", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618628395, "uuid": "0ea667fe-4da2-4db3-850b-7d321369b20b", "comment": "Malware payload (Dridex)", "value": "dc360af0cf8bedc1d8cd2c3c36c3c3c02366823b", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618628395, "uuid": "3415cbda-49c2-47cc-9e3d-fbe3a011dab1", "comment": "Malware payload (Dridex)", "value": "413b1a5e528009baea373f92f008b0ae4c28c46b5883b449d38bd89fb11ecdead7b693405eae2dedbf8851591271c5b4", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618628395, "uuid": "83e7c808-fdbf-4da5-a3b9-db5c59e4b799", "value": "25F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618628395, "uuid": "ad4fa546-b13e-437a-8252-4679420a9cda", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618628395, "uuid": "517c66ce-513c-4f22-ab27-890d65c8e75c", "value": "3072:lmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:kLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618628395, "uuid": "5751468b-f550-4869-8002-ef12199354a3", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618628395, "uuid": "ef958455-f052-4860-968b-a0999fe05f6f", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618628395, "uuid": "73efabfe-72f6-4a3c-bdc1-b16c0f9bd765", "value": "45a55f013a3ba8fb4b06d97073faa94a5879e49f9003fa34e7070000c0993f30", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d09b70d5-9f6c-11eb-abe1-42010a9c0039", "comment": "Malware payload (Vjw0rm)", "timestamp": 1618657527, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657527, "uuid": "cc3b642a-0d49-4f75-80df-55309ddb0d57", "comment": "Malware payload (Vjw0rm)", "value": "d2aa6ce87b5a04efe5f7f1781c9532a8", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false }, { "name": "vjw0rm", "colour": "#EEC0AE", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657527, "uuid": "163762b1-1a81-4ccc-b987-e54010428127", "comment": "Malware payload (Vjw0rm)", "value": "45c58c8acba2fc00f3b054e715b07bd1a50c8076232aaae1b755d1be1f6640da", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false }, { "name": "vjw0rm", "colour": "#EEC0AE", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657527, "uuid": "355aba70-0841-45aa-a040-b7139265ac36", "comment": "Malware payload (Vjw0rm)", "value": "cf65ab36eee3dc8479a6dad4cecfd67ce78afd7e", "object_relation": "sha1", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false }, { "name": "vjw0rm", "colour": "#EEC0AE", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657527, "uuid": "55d5a9bd-9b37-4da3-9fee-d7ff3a3e3f1f", "comment": "Malware payload (Vjw0rm)", "value": "c53db0f92b50c29ab53bdcfbb021341c3676d3e25807107fa73a003f0749058855f2de446ca1403618fef3ce1dcd87ff", "object_relation": "sha3-384", "Tag": [ { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false }, { "name": "vjw0rm", "colour": "#EEC0AE", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657527, "uuid": "5d7fa5b4-3007-4f3f-ac46-180bb2de79d3", "value": "7222A9D1F74EA05F93F21264157E2C085CAECA7152F860F5FA77A464E438A2C439DBD0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657527, "uuid": "44bb5a0a-dd3b-4e75-8ebc-1cf137d26bee", "value": "192:QtlY8FeZr581RIhNSpKnBBBNNtlzuCtwfZpeZX9/gkR:QtlY8FCFcoHT7wj4FgkR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618657527, "uuid": "2a1ba549-8508-4b4d-b226-d97092e8232b", "value": 10864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618657527, "uuid": "1ee27fe1-79f1-46b5-a821-9cea98a72f88", "value": "text/plain", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657527, "uuid": "0ea2ada4-e66e-4142-a791-704876c2852d", "value": "!ZXOPMBNT82OPM9.js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40874bc2-9fd5-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618702382, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702382, "uuid": "b9dcdf3e-4c98-4713-8ba6-0153a194970f", "comment": "Malware payload", "value": "43b777aa69e6d5d2a614e4beb48409b2", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702382, "uuid": "de7a9ed3-4087-4ca0-a02a-913387300269", "comment": "Malware payload", "value": "45d1d44812ad6738e0875c9cd6833d6eeba48e28f0d644d279c2fb013fe1d95e", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702382, "uuid": "fca2287f-b36d-4545-afe4-55184a16bde9", "comment": "Malware payload", "value": "c8a7d36dfa0bfd3fd4e883ffb4f787f7fb5666fd", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702382, "uuid": "0b05ea66-de06-418a-84ed-6e38a2f03542", "comment": "Malware payload", "value": "511bdb29c6ea17c1ad22015a1ab024ea85a660941d731337fd5b327b68c2e04403c831c67beb1dbb840f53c8cbf0ee4f", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702382, "uuid": "329df661-b85d-470a-9326-47646eb5e6c1", "value": "61F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702382, "uuid": "80e0d0d2-1c44-4c69-86af-1284c7668221", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702382, "uuid": "49616d4d-054f-4551-86a2-f6f8c4d29b40", "value": "3072:omNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:xLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618702382, "uuid": "af56ddc7-34f6-4843-9b4e-c61d9dc4fc08", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618702382, "uuid": "ba1f028a-0da1-4c53-9962-3636049935ea", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702382, "uuid": "b3821f3f-5cb0-4a76-ad97-329b7edfdc3d", "value": "45d1d44812ad6738e0875c9cd6833d6eeba48e28f0d644d279c2fb013fe1d95e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5238dff4-9f8d-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618671488, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618671488, "uuid": "cbd2a35a-3446-4826-a135-568e4b7151e0", "comment": "Malware payload", "value": "13a98b60507645b3cb17a680843d9654", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618671488, "uuid": "c8774f73-504e-4a7d-8983-358407dd9994", "comment": "Malware payload", "value": "45eabc9c55124d1bd22058f26153c2f966b9e784d2417ab55aba0e93a94fdac3", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618671488, "uuid": "a20f27a5-44cd-4758-a79d-04acde873733", "comment": "Malware payload", "value": "856403327538946ab56d8af1456198239ea45b1e", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618671488, "uuid": "ab1aa301-c96f-4e8c-b572-5c5841203770", "comment": "Malware payload", "value": "872c5513fa97f9e8b3b6a39fe5aa3e39a6043ace79861a7b8f2b153ee01aeb37f24925c4161798b59e6f6a5c1da0bdff", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618671488, "uuid": "b819000c-b70d-4783-b247-2b8e1baf6f09", "value": "BDF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618671488, "uuid": "3f387e8f-6a3b-4597-b9c4-47cd69ea6212", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618671488, "uuid": "426d499f-8e5b-43a6-9981-aef47a63491b", "value": "3072:clpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:clo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618671488, "uuid": "1d226f26-3d82-4675-a462-9c461026cd42", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618671488, "uuid": "9bb58887-db41-4e24-b69f-5f2c79ac299d", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618671488, "uuid": "094350be-bd31-43f5-ab10-cfd9410b1baa", "value": "45eabc9c55124d1bd22058f26153c2f966b9e784d2417ab55aba0e93a94fdac3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "efa124ba-9fa4-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618681630, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618681630, "uuid": "9391e5cd-30e8-44f2-b601-dc697594fd06", "comment": "Malware payload", "value": "f76ede79968e02229068b5b74a57880b", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618681630, "uuid": "4c5bba17-b1be-4fd0-862c-cfba51934e20", "comment": "Malware payload", "value": "466a821d33727b53397db4c6b01f74a6a80e181f99aac4f15198df90cca3976f", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618681630, "uuid": "e0195ba5-75ed-4392-866d-20010e945784", "comment": "Malware payload", "value": "23eb452f5b14692b42dbbe1be76ea15ae212cd86", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618681630, "uuid": "da71d91a-58e2-4a1b-bbdc-07bce23ecf0d", "comment": "Malware payload", "value": "cf3785874a5ba15c712c2c6e7d725b693e70c8153ab0ffcbb9d810ae163eeb9d60a78ad22995e2c64375dd2eb47d9637", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618681630, "uuid": "0733cde4-eb3e-495e-9d0a-634ecee6aa88", "value": "53F3D088CBB3E4E6EFB3D37866F85E1B461174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618681630, "uuid": "0b4cfeed-cff8-4342-95cf-d01170edc76b", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618681630, "uuid": "b5e738b8-a72b-4001-88fc-19455f6e477f", "value": "3072:3mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:WLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618681630, "uuid": "236c1c7a-d32d-435f-9b4e-52755f358ea6", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618681630, "uuid": "3041e20d-b36e-4987-9429-34a2961a7041", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618681630, "uuid": "ebf78ddc-1507-46e0-a850-d6a2becb6c8f", "value": "466a821d33727b53397db4c6b01f74a6a80e181f99aac4f15198df90cca3976f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21984775-9f9a-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618676990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676990, "uuid": "68854061-eef7-4b15-9a74-1797a3befcfa", "comment": "Malware payload", "value": "fc73104c1e2cc0840ed6225086b592fb", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676990, "uuid": "ceeed34e-153e-4b7d-9d0b-1478e5612fe7", "comment": "Malware payload", "value": "467715a4f055fdc0c8a835ee87a26b7afc294b21958959f438e90b9f8be2af8b", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676990, "uuid": "d48bc507-dbbe-4f53-be7f-f6f228de780c", "comment": "Malware payload", "value": "2546cdc9ef7d89e97d6456f051a88fbf8510fcf4", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676990, "uuid": "147722f4-536f-4d9d-81b0-947e67e31d93", "comment": "Malware payload", "value": "d777bc063ce6190741dfb5fee1f5dd1f582f1d24771ab43096953aed09c60668fef144777222c2128a4121176dc90917", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676990, "uuid": "8a88c000-6c3b-45ed-9d2e-56a905ede2fd", "value": "BEF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676990, "uuid": "74acab70-fddb-4512-ac0c-3d7f910d898e", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676990, "uuid": "f5fccc52-a8a0-415b-8577-7d0b4758ea58", "value": "3072:hmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:QLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618676990, "uuid": "ec5abd71-c000-4381-8ccb-d3d039762f3c", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618676990, "uuid": "3f48f575-57b8-447c-ac58-3483709b3f77", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676990, "uuid": "9a5f064c-2505-43d3-bfaf-812a1d8437f9", "value": "467715a4f055fdc0c8a835ee87a26b7afc294b21958959f438e90b9f8be2af8b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7647b5a-9f5c-11eb-abe1-42010a9c0039", "comment": "Malware payload (IcedID)", "timestamp": 1618650612, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618650612, "uuid": "605d59eb-e97c-44ec-a485-7664fffd8d05", "comment": "Malware payload (IcedID)", "value": "0466a07af3df3dd74683e0918e8aa944", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "IcedID", "colour": "#819B92", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618650612, "uuid": "1b755afb-8112-4ff5-bad3-228fb2a47e98", "comment": "Malware payload (IcedID)", "value": "46e262225c225aeeee13d7141f1484821045308fd149e4de526bac8cf39e6ee9", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "IcedID", "colour": "#819B92", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618650612, "uuid": "5539da26-18a4-4c19-9601-7252e667c39a", "comment": "Malware payload (IcedID)", "value": "9fb66b1c3049d628a93c706568c6eb93c49d7227", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "IcedID", "colour": "#819B92", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618650612, "uuid": "0a4c749b-015d-490d-a469-1be208bed6c4", "comment": "Malware payload (IcedID)", "value": "47e36c62205f00d6249575dcee3a26462c698213370a2d981c02c4668cdbefc5297eab0e67954eea9397b1b5ac79c20a", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "IcedID", "colour": "#819B92", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618650612, "uuid": "e9020a0a-3287-44b1-b07f-e2a8e3a8f074", "value": "2734C5C6A5BE12B7D81F4272609206385B217FD14ADB8FDFCE685E4D56137E0A827323", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618650612, "uuid": "56249d4e-6881-48ec-b9df-d5f26f4e1502", "value": "3eb5471c5370e4bcb3be6637e4995a6b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618650612, "uuid": "8c8ac29a-eca6-4fa6-9294-da08cb2bc44f", "value": "3072:OCHCrCVCVC/CtCczk8PkyGtzjU0c28vPr:Wk8PpIzw0c2sP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618650612, "uuid": "655e9d10-09b0-4291-9733-43d3eaa37982", "value": 242627, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618650612, "uuid": "747daf70-07a6-43a1-9eea-01841b5640b7", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618650612, "uuid": "a0f5172b-4dbc-4523-9425-fb276381f0f1", "value": "0466a07af3df3dd74683e0918e8aa944.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a2da9a0-9fbc-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618691795, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691795, "uuid": "86e1c0af-4f4f-422d-a7bd-3004e5a15ce9", "comment": "Malware payload", "value": "090feabf88e1871d0f1a943240f0e69d", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691795, "uuid": "95dc9ab9-3383-45d3-b782-d92e408deee5", "comment": "Malware payload", "value": "4712f2c001006d606cda0a111ba0d8a5557f0f558442d14d1208e80efcbba89d", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691795, "uuid": "68acbd55-c5e6-4a25-9493-9b4a1d7e6048", "comment": "Malware payload", "value": "a412ed353170bcfdbc5ce35d88d0fe7bbda794e3", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691795, "uuid": "3f9c5419-673b-4a88-8d6f-731fec51915e", "comment": "Malware payload", "value": "da210266185ad11014c36606eafe1946d1b5106425aad3c329d019feef26f8d858905abdba17923c089798a7fdc4d2a1", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691795, "uuid": "2b2fae0d-6355-4cc4-bb4a-be4df099962a", "value": "DCF3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691795, "uuid": "b79f2c39-d2a4-4e9a-877c-7fe75a46d932", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691795, "uuid": "ec652cad-017c-4f78-a0e9-55301d9c6ba7", "value": "3072:5mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:oLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618691795, "uuid": "1abd6e38-c9ca-4096-a054-aff716e2bb3d", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618691795, "uuid": "67e174f8-7075-4ae4-b41d-145a06c6d7ef", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691795, "uuid": "6265bd5f-0bac-47d5-8c7d-73892614e56f", "value": "4712f2c001006d606cda0a111ba0d8a5557f0f558442d14d1208e80efcbba89d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e8627bf-9f8a-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618670301, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618670301, "uuid": "85050ae3-f273-42d7-950c-41e14675622a", "comment": "Malware payload", "value": "2b4d091220072e19fa52029194c7662f", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618670301, "uuid": "e2885c5d-4218-44a8-b29c-614a2ac33e7e", "comment": "Malware payload", "value": "47588c0b95ea22869acdc54ccfe62e06952fcf39e01ad73d4e7bce5af6ae51d4", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618670301, "uuid": "e047df3c-7fb9-4bfd-8692-fbc42e84f2ae", "comment": "Malware payload", "value": "1694b5788bcf64dc8af41c9e701bb92c15b85629", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618670301, "uuid": "3a996ea3-b845-4344-af4d-9c062bed6140", "comment": "Malware payload", "value": "021341f38bbd7c0db4276a86942a6a6ce340694a37d1814d0a5d1c78ed89e784c4307f0787dd48f39b329f7377bbafdb", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618670301, "uuid": "01cf97e3-877e-4e4a-9220-ab6044fc7490", "value": "4DF3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618670301, "uuid": "b056a617-d4f1-4410-a4ab-c3c70859885b", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618670301, "uuid": "d0d2ec36-0867-4d81-92bd-afd40d9e7701", "value": "3072:zmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:CLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618670301, "uuid": "ac2005e3-ec5c-4fd6-a9cd-5e09df357669", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618670301, "uuid": "78c5aeed-6b5c-4cdd-a257-b0b9b8401fa1", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618670301, "uuid": "99cdbaeb-bb21-4e86-85b4-886d66aebc4a", "value": "47588c0b95ea22869acdc54ccfe62e06952fcf39e01ad73d4e7bce5af6ae51d4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25130089-9f3a-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618635764, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618635764, "uuid": "c4cb9f98-fa47-4f2f-ba12-cfb698ff761a", "comment": "Malware payload (Dridex)", "value": "7bede8ac8c18b5e1b6ee29a9bc21eb3b", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618635764, "uuid": "b939dc99-58f2-4b3f-9c1d-7aaed025ccbd", "comment": "Malware payload (Dridex)", "value": "49a344ee4026c8b115a0b1fa7c1c416e988566dab8cc2359d8309cf9cb1b2de6", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618635764, "uuid": "3c4211fa-8c99-4888-a243-1c773aba5271", "comment": "Malware payload (Dridex)", "value": "f78c6560001a53a1648ece5bc0a6ec0385d4b9d7", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618635764, "uuid": "a0073b9a-f211-46bb-9702-953ba36edc08", "comment": "Malware payload (Dridex)", "value": "570f652a724b0654924d389f340d5dd851437de82b30a14ae7ce28d90c4cb0654f2ecc663d1ab3da6bdf2cb6a101b296", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618635764, "uuid": "220cf9f9-7e5c-4566-99af-2fa66a5bd40b", "value": "C3F3D088CBB3E4E6EFB3937866F85E1B461574551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618635764, "uuid": "3e6f5a4b-137d-4d60-acca-092e04246480", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618635764, "uuid": "030a3875-c113-491b-aa39-11e921b0ec37", "value": "3072:lmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:kLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618635764, "uuid": "1470d369-e478-418e-b5b6-c17d86c11435", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618635764, "uuid": "9fa70dc3-39eb-4023-be9a-ec95c6c22c4f", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618635764, "uuid": "ddffc18e-3f0a-4e9d-b1c2-e54ebccb412e", "value": "49a344ee4026c8b115a0b1fa7c1c416e988566dab8cc2359d8309cf9cb1b2de6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "029b483e-9f51-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618645584, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618645584, "uuid": "4fe1ece6-d62c-4594-ac05-920a1b7061c3", "comment": "Malware payload (Dridex)", "value": "7596b5925d161da6ffed8413bd1861aa", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618645584, "uuid": "bd338f92-76ba-475b-9831-315d3177b24e", "comment": "Malware payload (Dridex)", "value": "49eec8f3dff2f9b5aa9040a80353967620ffec752d6cc27bc0c8b6067e7f291e", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618645584, "uuid": "cb47e4d5-079e-4e29-b245-d2e4519c1bd5", "comment": "Malware payload (Dridex)", "value": "7dfd1346b348f65540fffc24ce4f9d7bbc9439a7", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618645584, "uuid": "999dcec3-11ae-49c7-bcbf-3386cc102466", "comment": "Malware payload (Dridex)", "value": "f7139a6f60e15fcc3357c56215b02521bc4273439db051be5408bd207add66063b2716a586a19844fbc26c066f24694b", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618645584, "uuid": "e104f818-cf8d-49c0-903f-b67afb0de2f1", "value": "06F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618645584, "uuid": "d4f6e7dc-c8af-451a-a2a1-934a0b283fc0", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618645584, "uuid": "4cad8e2a-df78-48c1-9879-a178cd2d55f7", "value": "3072:VmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:0Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618645584, "uuid": "2d4801f7-440c-47e8-a2a0-aa5ebbbaf99f", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618645584, "uuid": "16fa0627-c0be-4378-9b65-2e6053201b1f", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618645584, "uuid": "fd7f9978-e69a-4721-9b54-8ca99c3814db", "value": "49eec8f3dff2f9b5aa9040a80353967620ffec752d6cc27bc0c8b6067e7f291e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7fae3f69-9fc4-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618695186, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695186, "uuid": "abab1e70-901a-48b5-ba91-2968cace97c9", "comment": "Malware payload", "value": "385c19e624e7f04a0f593a78b0a8e112", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695186, "uuid": "c63976df-d772-459a-9a70-465358bb1c39", "comment": "Malware payload", "value": "4a1739e0e08c3bac37015bcb6eb035ddcc69cf75b225912654a3b34f6e29d0ac", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695186, "uuid": "a914a69e-f23f-43a9-a3bb-2b5932ca96de", "comment": "Malware payload", "value": "f1c0f64dbdeb814afb076339ae063b0980efd46c", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695186, "uuid": "97892daf-4423-4591-ba44-2a4d8ff53b44", "comment": "Malware payload", "value": "107526dcc0636a048c947290492588f1b079b2a2e1297980c3a7f94ef686f5ff903f8ee54083313124739870bb54c601", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695186, "uuid": "1bd5cefc-b9ca-4038-a88c-13a84a5aa2af", "value": "AFF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695186, "uuid": "4da9a0ce-565e-423d-8b58-7b225f8f415c", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695186, "uuid": "905b1f06-e19f-4c7a-8390-f039c97b703b", "value": "3072:Rlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Rlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618695186, "uuid": "0f941fe4-139d-4b4d-a5fd-4e3e37d25769", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618695186, "uuid": "8f0e7ff4-b6f7-465a-8866-0eac4191abdc", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695186, "uuid": "70fd23b8-1f67-437c-9cbd-2c82763628f4", "value": "4a1739e0e08c3bac37015bcb6eb035ddcc69cf75b225912654a3b34f6e29d0ac", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4d0ac3e-9f1a-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618622369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622369, "uuid": "bd6bd763-39c3-4111-b62d-c5d5aad370a9", "comment": "Malware payload (Dridex)", "value": "00eddc773ef11c324b0fb744a880c048", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622369, "uuid": "05c30907-dd10-4bfd-b79f-3e4fafe9cfd5", "comment": "Malware payload (Dridex)", "value": "4a26f1cc4310fb3cd4b361fe691b9c2fc0a76c31841d07e34d0faac23c58c1ca", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622369, "uuid": "361b8c26-99d0-4799-ba84-cfde02089882", "comment": "Malware payload (Dridex)", "value": "0c14192789e5ec77a0f1d82f3e9ce7e7312b9670", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622369, "uuid": "9090b9de-a581-43b9-9685-f4cfe8f8be27", "comment": "Malware payload (Dridex)", "value": "79d214353e06e39c2d647bd448bce5cc293b4249f0536492cbe0567b3593a3f5b88f4c2b623e53e640f795b7015af86d", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622369, "uuid": "64066995-04f2-44cd-b38f-9ccaed6aceed", "value": "1BF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622369, "uuid": "53ed30d5-2071-4d81-8747-175992aca77e", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622369, "uuid": "07a4f0e2-9411-4ce6-acdf-9d0db9a5a696", "value": "3072:zlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:zlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618622369, "uuid": "508aa76b-7e54-4f93-b6a4-5b999b955ff5", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618622369, "uuid": "3f3f56f7-c4cd-46f0-b197-fb698b23930e", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622369, "uuid": "153fdbd9-8979-4161-bfa0-e803d15d7d6f", "value": "4a26f1cc4310fb3cd4b361fe691b9c2fc0a76c31841d07e34d0faac23c58c1ca", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa174f85-9f67-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618655449, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618655449, "uuid": "78a2e617-a10f-455a-81bd-14ce38596891", "comment": "Malware payload (Dridex)", "value": "ca4906462ad75b8cf06f331872b0650e", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618655449, "uuid": "a3cb1df5-b2e5-4d73-97f6-8b675c901491", "comment": "Malware payload (Dridex)", "value": "4a2cee75980116af6b60ee2b5085cf03585a82544fdb3d7ef62a103fc8610319", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618655449, "uuid": "21595a25-64f8-4e9e-a3c2-67e78d9314f1", "comment": "Malware payload (Dridex)", "value": "c42697c1d2a07818f152a6249768f0bce05352a7", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618655449, "uuid": "32070044-e4f2-43d7-a461-dfbcffa99ed3", "comment": "Malware payload (Dridex)", "value": "d11d047f1440fde82c94441f1d1c3344676c45f9e80cbdf5d0ae79881f035092ca24b91acb1df7df62652f2548604653", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618655449, "uuid": "9566b672-1321-4129-8210-e75595d2604d", "value": "2AF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618655449, "uuid": "7827a17f-42a3-482a-9485-41de9287893b", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618655449, "uuid": "045ae24a-08c0-4210-90b4-dca5bc4b42ef", "value": "3072:mmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:3Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618655449, "uuid": "3718d617-f235-4920-8c34-ad451953dd57", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618655449, "uuid": "590335ba-c56e-4117-ae8f-4f7215bff5aa", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618655449, "uuid": "e8a5ad24-c7db-40b1-a9c2-7f1c7daea0d9", "value": "4a2cee75980116af6b60ee2b5085cf03585a82544fdb3d7ef62a103fc8610319", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3262ac42-9fb4-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618688185, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688185, "uuid": "40a39117-40b9-4e11-85ac-ebb6310696c1", "comment": "Malware payload", "value": "5c1255b45d5af7599e67414478b2917e", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688185, "uuid": "d881cbda-0f9b-47db-8c8d-ca95ae055705", "comment": "Malware payload", "value": "4a3dd6e70f4dc415905b495c900b7ebe21fdaf6bfd6197df3a77b1e79f725f0f", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688185, "uuid": "2e097101-4051-4480-a7ec-4eb37d4654d7", "comment": "Malware payload", "value": "e9bc483a3f1edf7d801d673d1ee0c72bbc9ac3dc", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688185, "uuid": "e195f219-5249-4552-a3cb-4d5d5c70e573", "comment": "Malware payload", "value": "09ebefc58bea663e347a5bb1f18de22b6cb2425715fa25772f843bb88e90b8ab51ebaa0d12eae69a76cc047977a6bc27", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688185, "uuid": "464c37eb-65c0-450f-a045-0654eadff362", "value": "31F3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688185, "uuid": "a0bb10a0-ecf8-4c01-8af7-28a1c198b674", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688185, "uuid": "efd36c29-0a50-482d-9f4e-1431fd334aa3", "value": "3072:3iFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:MeAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618688185, "uuid": "b602ff1a-0f95-472e-a4de-41eb7f3d1cff", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618688185, "uuid": "62048171-cae6-45e2-aa4b-a0a072821930", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688185, "uuid": "cf922d8f-347d-4d91-93a3-4a147375e0df", "value": "4a3dd6e70f4dc415905b495c900b7ebe21fdaf6bfd6197df3a77b1e79f725f0f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c9e6fbc-9f89-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618669895, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669895, "uuid": "a7911215-9213-474e-b9ff-34850e9addbe", "comment": "Malware payload", "value": "00ee2e7b3f04c4aa19cb4669d4b3a232", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669895, "uuid": "f7073560-1731-48be-b338-f0ca1fa7d562", "comment": "Malware payload", "value": "4a6a75809dc1a5177486509f8cf9e71df8572b1a89cdb4edda30182342ba9d58", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669895, "uuid": "77d6c608-52ae-45f2-b27f-6631ae5ce141", "comment": "Malware payload", "value": "41cc432a0b6d569d875052ac88e53150eaa60bc8", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669895, "uuid": "3666ba0e-4f76-40c4-920e-61f3aff588fb", "comment": "Malware payload", "value": "3aab332b9c2d477c42734c6cf293fa567ab493be7275238ceb1428b22c4f70c53d7c3aab2a37c69a7bfa0cb6a29cdf64", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669895, "uuid": "4d536687-f522-46c3-a140-4dd2a2e7cbae", "value": "70F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669895, "uuid": "46af573a-046e-496f-8c8b-ec2a976ea833", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669895, "uuid": "7779e894-b728-4c24-b436-9363fff8fc49", "value": "3072:imNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:zLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618669895, "uuid": "e030594d-26f7-4efb-a6ee-8413f784f3c1", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618669895, "uuid": "0fee6067-c7af-45d3-a2fb-fd5fe6b37d05", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669895, "uuid": "23bbf646-3126-44cb-a0b8-48f98445c7d4", "value": "4a6a75809dc1a5177486509f8cf9e71df8572b1a89cdb4edda30182342ba9d58", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17d0230a-9f89-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618669672, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669672, "uuid": "53d98211-8020-49ce-ac39-33d321049900", "comment": "Malware payload", "value": "199ebd754abee33898d34f3dab233681", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669672, "uuid": "2137dfa2-1d56-45bd-8f43-5aec8dc48029", "comment": "Malware payload", "value": "4a79879b1130f31d116f6098a856ca445f1c9107abd340fab1187b42c4300bb5", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669672, "uuid": "8b9db8da-e173-4534-9006-7862335b3a61", "comment": "Malware payload", "value": "a675aa3e87f3cc1da0033f5feb1644c899b3ef8f", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669672, "uuid": "75efef07-8f89-4943-beeb-3ce65c3f83ed", "comment": "Malware payload", "value": "a66a14494ea6bd152cf26b93c2d5d0198c9e29c20d974f31a833e61c716b0188cf22035bddc24273d9d972d5c06e50e2", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669672, "uuid": "efe0e823-33c0-4886-a814-7d7b1a4c4d6b", "value": "7CF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669672, "uuid": "b926356a-801d-4aec-80ef-e4fc8c4cc52e", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669672, "uuid": "29bfe5c9-66c5-4577-a209-cede91b2e81b", "value": "3072:hlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:hlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618669672, "uuid": "1cb05c4c-dd58-4bd3-8e07-cff8f27a2ffc", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618669672, "uuid": "399b6837-8ac8-4b84-b431-866fa9ac6dcd", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669672, "uuid": "a810b547-4df7-4328-bdb4-0cf59a4f1377", "value": "4a79879b1130f31d116f6098a856ca445f1c9107abd340fab1187b42c4300bb5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01f8ada0-9fbc-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618691540, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691540, "uuid": "9fc27711-8401-484d-a49a-0f91e6d6244c", "comment": "Malware payload", "value": "4dd2bfa7a42e87805953806d97419a7c", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691540, "uuid": "6c257dde-210b-49ff-be53-dce930ad0c57", "comment": "Malware payload", "value": "4a80a60f0d444967bfcb37d8e3c0d5fc012775479c313719ac0505412932a2c1", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691540, "uuid": "fb558d71-24df-41e4-8571-dea3080fce2e", "comment": "Malware payload", "value": "0e060f433085bb473be58d4ffa4dff707aa3a784", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691540, "uuid": "c58805f2-4a6a-4eb7-8778-1f8ee25b3ef7", "comment": "Malware payload", "value": "019f5a644375eac984afb76bd45ee5de436061e0b18c2f6ac1fcab629954ab7beafa9540672f975d647fdc143a7f00fb", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691540, "uuid": "2ce7a307-9321-49ee-b2df-90d2f21c23f4", "value": "8CF3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691540, "uuid": "283cc824-d5f3-4d93-b7d4-aa893fa0e983", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691540, "uuid": "19bd0015-758e-4087-864b-466930e4f0c3", "value": "3072:iiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:heAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618691540, "uuid": "33926c79-bc8b-4b89-b2fe-1a8fb2536f28", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618691540, "uuid": "2f8e762e-80a3-45d7-b74c-3e168371b315", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691540, "uuid": "a951af52-0236-4953-8050-705f7a40b622", "value": "4a80a60f0d444967bfcb37d8e3c0d5fc012775479c313719ac0505412932a2c1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f3e16b68-9fcb-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618698388, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698388, "uuid": "b30efbda-1fd7-4e9d-b1e6-1d5c82cea510", "comment": "Malware payload", "value": "49d8d556e3dac5770e04b8e6b0f655cd", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698388, "uuid": "8af15b4b-4539-44c0-88c4-eeaf71395f5b", "comment": "Malware payload", "value": "4b2caba7fd5f06879860d2179cce13dcfeafc36b2e53913d6cba243721e538b3", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698388, "uuid": "e3e79458-ae57-478f-9006-228e708721f6", "comment": "Malware payload", "value": "1a974da12540f21b1fefec438179d3c93aa9b135", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698388, "uuid": "33ef1943-d997-4965-98f6-4bda9198cbf0", "comment": "Malware payload", "value": "bbf802959dd31cbf31e1fe91f6fbf9f48d2fcd55232cbf22d03ed131690057115b049c93503e329e30619bfcca5e6bbe", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698388, "uuid": "4eb5d3d4-297d-401a-8704-7990dc4e71ba", "value": "D9F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698388, "uuid": "1731722d-a52c-45d0-b14c-bb00204bcd43", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698388, "uuid": "eda78ed4-c9ca-4a94-ad57-6f06b4a6c7e7", "value": "3072:ImNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:RLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618698388, "uuid": "b4863ab0-2896-46c6-9a0f-5a2614ce818e", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618698388, "uuid": "fe813727-cbb7-482a-b3a7-c293d45b4aab", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698388, "uuid": "335e231a-d3cc-48e3-a116-30067964e9a6", "value": "4b2caba7fd5f06879860d2179cce13dcfeafc36b2e53913d6cba243721e538b3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e01063c-9f61-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618652717, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652717, "uuid": "e75a8ebe-7245-413a-b31c-411aca1d294b", "comment": "Malware payload (Dridex)", "value": "2f543a5dfc882d3ecd204c3c5eaaf00f", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652717, "uuid": "1c55d55e-ada6-4ec5-b8b0-48a4012e7d9a", "comment": "Malware payload (Dridex)", "value": "4c80c41897b833bf41da511e3cf7228104ff7617d2696c824b7f4c7f102fce7a", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652717, "uuid": "df8e74d3-75bf-4019-8a09-99160c1ae53c", "comment": "Malware payload (Dridex)", "value": "784c98c00a137af73c0f8b5ba9c3bd151f07eaf4", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652717, "uuid": "176e2ff6-e1e8-4e0b-b8a3-22fa51aebadb", "comment": "Malware payload (Dridex)", "value": "0479091ab1e907a2079eedd30a43a05c021d9b983ad55dfd1a1d1418389d17ab8a8a3b8e8be16127cd09f072bef29786", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652717, "uuid": "63d62d7b-e8c2-4e6e-b290-536c1e10e39e", "value": "E8F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652717, "uuid": "e8360e49-0f55-40c1-a544-0c86b9aab0fc", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652717, "uuid": "9eefa70d-8173-4eeb-b43c-5ef7611ad5fa", "value": "3072:Olpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Olo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618652717, "uuid": "56645c88-32ea-4173-894a-11dd738fa1df", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618652717, "uuid": "25235346-48f8-4214-83f4-e682a6771c76", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652717, "uuid": "7fe99d1b-bf8e-4518-b921-9983b3eacd3d", "value": "4c80c41897b833bf41da511e3cf7228104ff7617d2696c824b7f4c7f102fce7a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b10d008c-9f78-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618662628, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662628, "uuid": "4618f90e-6720-47b6-a169-91727e4a2e26", "comment": "Malware payload", "value": "ed9006a1acaf071f7f0a0f941a9ac6a6", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662628, "uuid": "409b97e4-ef61-430a-b944-d02ab0c2dc0e", "comment": "Malware payload", "value": "4d0a71828c4e74265ad962fe9fc7507b6db70053fccfd3bd3dd4345bff97cbcb", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662628, "uuid": "ec11ef75-b31f-4029-a4df-34092d074c5d", "comment": "Malware payload", "value": "4a7b932b2d85a4fbed99a09b8ea065feae589f13", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662628, "uuid": "4350b55f-e4b9-456d-9f4c-39fb46279829", "comment": "Malware payload", "value": "de93e3d3f644b463d9368797c5cb5a56a6e3d91fc4597b0db2143a893755402767603e3f39ad4c3e45f5a0277119ce5b", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662628, "uuid": "0ea479ef-1756-4bc4-83d3-c1b5cea7fdd5", "value": "D0F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662628, "uuid": "519ff9f8-c54c-4a8e-bd07-532c34ac9c7a", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662628, "uuid": "1b833e22-2153-4d26-925b-8b45ba8f227c", "value": "3072:SmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:DLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618662628, "uuid": "388695c9-a83b-4408-8c02-447aff66035e", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618662628, "uuid": "3837b4c6-c413-4476-b5d5-61cfb941b03c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662628, "uuid": "9fd5339a-7c09-41d2-9ca1-a426dff4104d", "value": "4d0a71828c4e74265ad962fe9fc7507b6db70053fccfd3bd3dd4345bff97cbcb", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b0f369c-9fb5-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618688709, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688709, "uuid": "d0f5c47e-6ba4-4b6f-975b-6d66e0f76138", "comment": "Malware payload", "value": "57f95aca3855fe2161dd1722a6963d6e", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688709, "uuid": "60dfa834-8519-4e22-8bc2-c8ea68417bf3", "comment": "Malware payload", "value": "4d7e2ebf1abca19c0fd017375d3bc9b27a3dd189e6842ce27de21c13db432786", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688709, "uuid": "2585dd77-6646-4cc7-989a-498aaf787211", "comment": "Malware payload", "value": "b009ce89cb6fd111572cda439a83f0ec62a64eac", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688709, "uuid": "89e3b6c9-7845-4561-ac53-3c045097f47f", "comment": "Malware payload", "value": "d140f30ac687b858d41af2f282dad054f3796e183cd530281619387ce6be020ce2ecb9a6e3890e0452b1927a5492848f", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688709, "uuid": "921908f6-777e-4dc8-a63b-ae7c2d0048aa", "value": "BAF3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B49671FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688709, "uuid": "1fa6563e-aa4d-445f-ac6b-f188e4f8054a", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688709, "uuid": "f0afe3cf-b218-416a-81e3-29a086e71949", "value": "3072:GA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:G3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618688709, "uuid": "3d26f5eb-0b9b-419a-9781-56d23157e402", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618688709, "uuid": "e0797de0-0861-4baf-92d8-936947f1690c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688709, "uuid": "9210014d-b24a-4bd6-8037-a57a7a560af4", "value": "4d7e2ebf1abca19c0fd017375d3bc9b27a3dd189e6842ce27de21c13db432786", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a79cca4-9f3a-11eb-abe1-42010a9c0039", "comment": "Malware payload (BazaLoader)", "timestamp": 1618635773, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618635773, "uuid": "213efe72-e9a5-4d66-90a4-d5cd88742c3a", "comment": "Malware payload (BazaLoader)", "value": "9454f2737270b5990173d234b98895a5", "object_relation": "md5", "Tag": [ { "name": "BazaLoader", "colour": "#16B619", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618635773, "uuid": "300d7345-3f27-4854-8668-4fe0c870644a", "comment": "Malware payload (BazaLoader)", "value": "4dc24a8bc92ce652fe90d90cfa7e1a9b4758955c79789daae6db825cbd1950a8", "object_relation": "sha256", "Tag": [ { "name": "BazaLoader", "colour": "#16B619", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618635773, "uuid": "3363e378-16a6-4101-90e1-36754b7f6d06", "comment": "Malware payload (BazaLoader)", "value": "243f0e1806fd0e98e74c6d8bd91bbc9df04415a5", "object_relation": "sha1", "Tag": [ { "name": "BazaLoader", "colour": "#16B619", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618635773, "uuid": "3cd99c03-1524-4540-9065-5cba29837d0f", "comment": "Malware payload (BazaLoader)", "value": "c3a4eedff86f54027b82270f08b3a3d3635912d64a41bb9f78850c0e043ed5a932b01245c46ab4ae7893c59ab8ac7c07", "object_relation": "sha3-384", "Tag": [ { "name": "BazaLoader", "colour": "#16B619", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618635773, "uuid": "d1171923-7f0b-4a6f-8fa0-cc560b132722", "value": "B084CFB9B60438E6D67F477BCA56ACD8537636324A87EDCE40A466C30E63371EE16C04", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618635773, "uuid": "f1db0a29-17c1-47d2-9579-5672e28132ea", "value": "8e4b095726b731232989edaf403d176b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618635773, "uuid": "17d5132e-1501-4ad9-94c9-7259cb08a630", "value": "6144:Ucw9o6vkBja86iA7Z2HLGJab4LVJVhL2H6lhzrEo62azxcdKvKJGCXH+DODby2EO:UcGMBr6iW9Va6llEo62a9cHGKHqODHEO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618635773, "uuid": "a5d1a940-37de-4e21-930e-f1e7081b31e2", "value": 389120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618635773, "uuid": "7e734b10-b4c6-4820-94ba-13c5c80b476e", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618635773, "uuid": "476ca998-553e-4657-bbdb-e44bb5bec758", "value": "9454f2737270b5990173d234b98895a5.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc240938-9f16-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618620582, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618620582, "uuid": "ccde37ce-7ab0-492d-bf53-70d93c531ad4", "comment": "Malware payload (Dridex)", "value": "2897ec3b956732340b44e22f75ff884f", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618620582, "uuid": "da1639e3-cb9a-4108-9a77-83e91056c1bb", "comment": "Malware payload (Dridex)", "value": "4e38f51019260b014f544d6d643df8dfb8c8c1cc8975dcd073d591621c3bedef", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618620582, "uuid": "959682fa-9017-4ad4-9d4b-9e23c95ffd05", "comment": "Malware payload (Dridex)", "value": "be0711dff6c1b53c62d9d5152a7ff2fe55fb9d3f", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618620582, "uuid": "650eb4c7-b9c2-4ba6-8d70-bfe1d7b8cce2", "comment": "Malware payload (Dridex)", "value": "0af89fdaf5422d94f5b2ece8009a0ebccd0b87ad116bb811380ccbfd5c6c390e237cf1154ff36131f481b130417719d8", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618620582, "uuid": "77fd5200-8cde-4b27-8bd3-46adec658bcf", "value": "7CF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618620582, "uuid": "19760b72-951c-4275-abe3-c6f023e1beca", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618620582, "uuid": "46650c3f-119a-4e56-b2ea-eea4be74ee8b", "value": "3072:VmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:0Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618620582, "uuid": "5689eef1-3ca6-458c-9af9-b75362988f13", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618620582, "uuid": "6fc61484-f33f-4a62-9979-d2be372af564", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618620582, "uuid": "b74c5002-2188-40fd-b706-1c4857543d52", "value": "4e38f51019260b014f544d6d643df8dfb8c8c1cc8975dcd073d591621c3bedef", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13953601-9f6f-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618658498, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618658498, "uuid": "6305760a-0540-4c15-a40d-e008f62b686a", "comment": "Malware payload (Dridex)", "value": "fa26be5d1ffb73c2bf24a23d6c2464f1", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618658498, "uuid": "d23420b1-1899-4556-913a-0e9062a3111f", "comment": "Malware payload (Dridex)", "value": "4e59a964d2d9575681f37bf99f241ff0cbc624e83d0600a309233a90e235176a", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618658498, "uuid": "e2b2b5e7-b18a-4788-98b1-a26ef5bfb7c7", "comment": "Malware payload (Dridex)", "value": "16873f13ad028b66879b37d6544be00376b89e80", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618658498, "uuid": "cec234ba-6b0e-4854-ba61-486ab4c94db7", "comment": "Malware payload (Dridex)", "value": "ca0b7adba669b417c93870e367c1e6c30b83c2d9c71de04b5e93da63f69d8654a4ec18f3a8efd68c4ee41bc98613d3b5", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618658498, "uuid": "75efea19-b13c-4e70-a208-4878e809fe0a", "value": "BEF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618658498, "uuid": "bb9bd4b3-14ca-4c0f-8273-48fa69b5ef10", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618658498, "uuid": "99cb4811-3ca5-4278-b528-f4ec8448f451", "value": "3072:imNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:zLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618658498, "uuid": "372ed12e-f190-412c-a358-4d65ef6683ae", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618658498, "uuid": "afb5e8f2-392a-4ac4-9596-740618b68c48", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618658498, "uuid": "6d77175a-eaaa-4f36-be05-a38e34f1136f", "value": "4e59a964d2d9575681f37bf99f241ff0cbc624e83d0600a309233a90e235176a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e7b64cb-9f3f-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618637900, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637900, "uuid": "83547199-f592-4e92-9ea8-8705fa674a91", "comment": "Malware payload (Dridex)", "value": "0e109094a5e8b349cbd2eebd7102a89d", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637900, "uuid": "08b81232-8fad-4198-b248-3c5bfb5235f0", "comment": "Malware payload (Dridex)", "value": "4e5bcef35167870a416e9a8fb57b028922f8d20987284248ae9b34f3142f9a67", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637900, "uuid": "ecf10634-a9cb-44f4-84e0-1e85e44109f6", "comment": "Malware payload (Dridex)", "value": "0429b692befcbff9da4366ff8370688c80e755a0", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637900, "uuid": "4ff3b7f2-bcff-4f6a-8a8a-1814e36975d0", "comment": "Malware payload (Dridex)", "value": "64fd9984ccc97b14ae0e5772fc66d8301e889564e849fe28a4ac51271abb69635a1939baab0d2c4072fe99027374d62d", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637900, "uuid": "95a048dd-d356-44bc-8217-b91a40446c10", "value": "B6F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637900, "uuid": "8518170c-1900-45fb-b2b3-3d7f5c03e3d5", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637900, "uuid": "c591cb39-61fa-45dc-92ac-7a77a341d6e6", "value": "3072:slpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:slo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618637900, "uuid": "4cbac477-793a-403a-aea5-adf848f28c12", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618637900, "uuid": "4c13cf97-9409-427c-b868-370174dc8982", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637900, "uuid": "04e25ff9-94e5-4352-9ff9-33768ea63230", "value": "4e5bcef35167870a416e9a8fb57b028922f8d20987284248ae9b34f3142f9a67", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8cb3d8fe-9fcb-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618698215, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698215, "uuid": "15587ff3-bc93-44e6-bad7-4aa09aa07880", "comment": "Malware payload", "value": "984c8731d160851d0a4126fc7c194424", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698215, "uuid": "e7cca788-874f-4f49-9661-b9214a12d648", "comment": "Malware payload", "value": "4e7b6714294de8a5ce88500202c83b501c33221e7ba92c63b4990e4ae576900c", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698215, "uuid": "e427f1d0-e210-48da-9425-a82be1abddb9", "comment": "Malware payload", "value": "e0be3e5e3b609cb87d0a28425606882c53874e4c", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698215, "uuid": "2bb63e04-405a-4849-98f8-99cd4a73f8c8", "comment": "Malware payload", "value": "46b23d98ae40b71492b10522946fe2f95ec3e9be3a23bd06fe5dd84ddf355e65cefbcbb0530cd9f9b954a575f34027d0", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698215, "uuid": "be9828e4-2220-4f88-93d4-38d57ab86b09", "value": "49F3D088CBB3E4E6EFB3D37866F85E1B561174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698215, "uuid": "5fd33310-9904-48c7-9362-9b3ac22b98f2", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698215, "uuid": "ae0ab29e-a8f5-415c-ba5e-8a3bbec9e77f", "value": "3072:2mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:nLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618698215, "uuid": "5f33d214-ecfa-43c7-974e-6b6d13d5c7ae", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618698215, "uuid": "dae288f9-4837-412b-90c7-092c01a73256", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698215, "uuid": "54b77fcc-763a-4f4d-b07e-ae125b235faf", "value": "4e7b6714294de8a5ce88500202c83b501c33221e7ba92c63b4990e4ae576900c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4379a78d-9f40-11eb-abe1-42010a9c0039", "comment": "Malware payload (Formbook)", "timestamp": 1618638392, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618638392, "uuid": "144f61b1-c41f-49e6-9b36-e75d32007e0c", "comment": "Malware payload (Formbook)", "value": "3ee6077e9bccf9c939181abbd73b0683", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618638392, "uuid": "a3770752-bac0-49ce-ad57-87f93531141c", "comment": "Malware payload (Formbook)", "value": "4fe5115259b2c032f03275273349549ab896959c818d771a4ad755ce64866379", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618638392, "uuid": "4e66020e-c1cb-4eb9-a670-b61332ef16f9", "comment": "Malware payload (Formbook)", "value": "f96d64e4d904fdfdfa9a34ecb6d6220236db7a42", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618638392, "uuid": "3a3a0e05-9f2a-4667-951e-ffad7fff3b39", "comment": "Malware payload (Formbook)", "value": "699332ee226cabb51673fa5c07e614e5889c757840c398a1805ef6ca4846a05edb29dfbdd744fcb65f59f36e2b1febb8", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618638392, "uuid": "5f9a8303-640a-474b-8b32-d5adad4a4512", "value": "FB3412BC23A0D0D7CB3346F129F4B967AAD9931050EA73477F602FA93A51DD26E0E542", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618638392, "uuid": "465e19a4-2273-45a1-b110-155bdfa78174", "value": "ea4e67a31ace1a72683a99b80cf37830", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618638392, "uuid": "3f566cd8-35e0-4a68-baf5-2d07790f80d4", "value": "6144:FPXarOjhbPOYRyszzbQ5ocolZ5Pl2vH2sF2b:crOjhbP7yszzC2lOHbG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618638392, "uuid": "af960a8d-4e7f-475a-851e-60e4e88527c9", "value": 233833, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618638392, "uuid": "79d75d12-32e4-4b22-b843-d502c8917eb0", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618638392, "uuid": "20b97345-8f65-4f7d-bc6a-0c7bb9dbdc13", "value": "PI.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e15cb6b5-9f68-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618655837, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618655837, "uuid": "2cc770f4-4529-492c-80be-0ad32a193f68", "comment": "Malware payload (Dridex)", "value": "6399fb683b8e6f2658d09a1a6803440c", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618655837, "uuid": "890dd47a-9cd6-4a00-abe3-13be2fe5a26f", "comment": "Malware payload (Dridex)", "value": "4fe6b057d11e8f8311d3d0757e46b8560b8efeb21071fadde511be20d5699d5d", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618655837, "uuid": "8771daeb-501c-4414-bfd8-f5430ff099f1", "comment": "Malware payload (Dridex)", "value": "6918ae94e81cb83d390fd576b4098cd21e6fdfbe", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618655837, "uuid": "eaa8719c-df80-4afc-9b00-52382246dcec", "comment": "Malware payload (Dridex)", "value": "df97da7550c1abd352e99468af245db207b1fd6da1899348ab5d5af676ee323f2f8179c18573c4f3f40703fa9026e3fe", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618655837, "uuid": "0717fbb7-3528-4e2a-a3bf-5d0bb62b30a4", "value": "DEF3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618655837, "uuid": "b3be5567-31d0-4d05-b2dd-d00a2884883b", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618655837, "uuid": "84c6deab-c8f1-4dea-b991-cba14a38803c", "value": "3072:emNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:vLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618655837, "uuid": "d10f5918-fb36-4bd2-81b1-3730bc69dc99", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618655837, "uuid": "ec5c2ad0-8837-4ac7-aece-5aa23e9daf54", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618655837, "uuid": "416eb3e5-f2c0-4716-a480-bf746276fc4a", "value": "4fe6b057d11e8f8311d3d0757e46b8560b8efeb21071fadde511be20d5699d5d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f1a3e1f-9fd4-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618702084, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702084, "uuid": "27927db5-f34c-496c-a5a6-cad8ecdfb325", "comment": "Malware payload", "value": "70b512c6cbc0f1bb9cca7976fe8c9709", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702084, "uuid": "c8186764-2dd1-446a-b942-e56dbc47d7d8", "comment": "Malware payload", "value": "505c0691ad72274cb0c7ef2bd90262a911b6ff41b8f74c8c04aba814796b0774", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702084, "uuid": "6b561587-5b3e-4351-b989-93f6ffeac68d", "comment": "Malware payload", "value": "ca1cb0c7c29105f10bb12ff80ce33389c4ffd1b6", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702084, "uuid": "e6541fc6-279d-4306-8d34-f2732ee8990d", "comment": "Malware payload", "value": "3d3d566839829790a25768a60c5ae9b40589322de4071eab9ed29f0c2a1141086f1bbdbc330280682dca32d8d503be8a", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702084, "uuid": "55680e25-1f92-418f-afb5-e9653c4ba6fc", "value": "ABF3DF08D1CFCA46E00B69700D9A761BB79839812F7C8EA8B49671FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702084, "uuid": "7f0c6d76-ae97-42fe-ad36-8b6d26e1482e", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702084, "uuid": "83cc13b6-8b4d-479f-b248-01e26679fa40", "value": "3072:3A6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:33J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618702084, "uuid": "bc492547-89bb-43d3-bf3d-738c150867e5", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618702084, "uuid": "e658ea55-956f-42ce-96c1-7931f5a21ca7", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702084, "uuid": "730a90d5-d2af-4324-8018-e60cba5c2e73", "value": "505c0691ad72274cb0c7ef2bd90262a911b6ff41b8f74c8c04aba814796b0774", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f497a33e-9f9b-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618677773, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677773, "uuid": "e4e7af3b-0587-452d-87ce-79c1c2bde651", "comment": "Malware payload", "value": "48a8a42ec385742a3da5d3e7f824cf76", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677773, "uuid": "a0c86ceb-6fdd-4046-a26a-9ae892461eb5", "comment": "Malware payload", "value": "506c353eacf288c8536adba4a45025a731435984a48cd9e31f3691f3e1068e09", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677773, "uuid": "69f5ca06-e894-4c77-842f-58786f4a2bd6", "comment": "Malware payload", "value": "a115900b0d8aaecb23c0909648314f0a631ba459", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677773, "uuid": "e4f5008b-d340-415b-a558-d4a7e7681950", "comment": "Malware payload", "value": "53d8a474e1a3edfd4b00ae08a3dd06debe5ae3b9e39c7064aa8e3d7ff8327af46d95c58ca0cd96033041dc7336ddbe4e", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677773, "uuid": "000f6474-3324-44cd-8099-f1c89d7df8c0", "value": "F9F3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B49671FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677773, "uuid": "e87f3781-02b8-4abf-9859-5577b8600e74", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677773, "uuid": "467ccd9e-e576-4900-85a6-cb3d60d3d8c5", "value": "3072:uA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:u3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618677773, "uuid": "7d2cde66-9f34-46d5-b273-9cac89b2fc09", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618677773, "uuid": "01402e78-6e48-429c-ba6e-77c055e58950", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677773, "uuid": "662c45fe-1b8b-436a-ab6b-bf00538c0fb2", "value": "506c353eacf288c8536adba4a45025a731435984a48cd9e31f3691f3e1068e09", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4cba1f4f-9f39-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618635401, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618635401, "uuid": "a71663ca-ce3d-4a89-a536-beb010fb333d", "comment": "Malware payload (Dridex)", "value": "1be3f2c9e6bc92310d042f3c45599242", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618635401, "uuid": "cda5b119-4a76-4155-a3a9-f3cbf3b6dc5e", "comment": "Malware payload (Dridex)", "value": "506f57f70c09e9396a86cf44a5c0a6dce90f9c8cb11903178163445bd30b5c39", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618635401, "uuid": "3d7c79d3-7fc9-4372-ad31-f328d87fc3d9", "comment": "Malware payload (Dridex)", "value": "ffd0f05733a03cc1f9d32be56e95dcdd9ad058d8", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618635401, "uuid": "d4003ffa-7755-406c-8166-81bd94bef731", "comment": "Malware payload (Dridex)", "value": "e7de101c03d84e917c55a510ff858fa71c71e44d226ed47e39229cd9245b4585cb7fd7474c70d3591c3e87d57c24e636", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618635401, "uuid": "7ae273b9-af56-4ef4-a009-44d5daa6b75a", "value": "20F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618635401, "uuid": "bcd44422-98a7-439f-b077-ffc600019773", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618635401, "uuid": "09aa953b-7598-4534-8c4f-18dc0d4aa7ce", "value": "3072:/mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:eLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618635401, "uuid": "8449f548-8595-43c6-af3b-3ae4e5ffe32a", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618635401, "uuid": "0035ce3c-795f-4544-bef7-7029d81ae7c9", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618635401, "uuid": "2f1f529d-4813-4372-acb4-5cf7cfb17878", "value": "506f57f70c09e9396a86cf44a5c0a6dce90f9c8cb11903178163445bd30b5c39", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b93994ff-9f89-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618669943, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669943, "uuid": "8089dd8f-a59e-4694-ada6-5f4c3eafee99", "comment": "Malware payload", "value": "e65e733589ee613397dcdea9320e34f2", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669943, "uuid": "c0681da7-963d-4351-b8c1-dc546efc0870", "comment": "Malware payload", "value": "507a4ce5a0d44aae3aa36f64860a6138ea4ad17cb8bfbad06044698087e13485", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669943, "uuid": "712f2c63-14e1-48c2-b535-44999b9657f7", "comment": "Malware payload", "value": "90f4ebad0ad896d989718f8e81efc0de59678cbf", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669943, "uuid": "7dd6fb29-f2d1-4cab-9074-2f4b7af57e03", "comment": "Malware payload", "value": "0ddc0c02e2659dbafc55469780ca75c3d270a9188b1a2ace01202fe89c7fbb999106338b6858781a32d06ac799a1a583", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669943, "uuid": "73c104ff-d07f-4c3a-bca1-11b4345ded07", "value": "4FF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669943, "uuid": "a787fdef-d430-4eb1-835f-5f944da090c1", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669943, "uuid": "e4491c56-c36a-413a-b333-3540e71edde7", "value": "3072:smNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:1Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618669943, "uuid": "6a45be39-c651-4cba-b4b6-6933f978e9cb", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618669943, "uuid": "d0a56f95-f298-4694-994e-4371fd64fbe9", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669943, "uuid": "3bfdc948-06f5-42c9-8301-910372178ea0", "value": "507a4ce5a0d44aae3aa36f64860a6138ea4ad17cb8bfbad06044698087e13485", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cbb172e9-9fba-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618691019, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691019, "uuid": "6fbf9bc9-b75d-44a9-b01f-1a318e1cfb1d", "comment": "Malware payload", "value": "6af95c091f024d1f0a1b242ba874e5db", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691019, "uuid": "b5d65609-378c-4a88-bd43-ef5cad50b200", "comment": "Malware payload", "value": "51dfbcc55ee70df329644dd6ebb7624e9d270e3a2d9ac94d6218f7409806579a", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691019, "uuid": "68bdf258-b841-450a-8934-67ac44892b99", "comment": "Malware payload", "value": "7d987003490097b4f7355e026688c9adbeae5d69", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691019, "uuid": "542eaf1a-07fb-4ee4-8e88-7dbcb771e13d", "comment": "Malware payload", "value": "70b4fed14149e1b5bb0b12af3e23f27305ed1df2cdad4b365eb21e457f3aaa1cca43df62e384e1995d04d70dcbfa3023", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691019, "uuid": "5f1be7bf-22c9-4dfb-80ff-9f18eae20d0d", "value": "63F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691019, "uuid": "9ca8600d-b66b-4a4d-9a7d-ae1da24873b3", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691019, "uuid": "2f1b4bff-eebc-476b-a028-9a6d2e74ca48", "value": "3072:Ylpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Ylo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618691019, "uuid": "5b1b3831-0392-4cd4-8840-162d8d03b1dd", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618691019, "uuid": "ff0bb528-e5fd-40a1-a894-03aba309b531", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691019, "uuid": "f4913230-abc3-462b-9471-2595aabc8661", "value": "51dfbcc55ee70df329644dd6ebb7624e9d270e3a2d9ac94d6218f7409806579a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f7bdee1-9f95-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618674866, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674866, "uuid": "968aad33-a0de-415c-94df-da767938a3cf", "comment": "Malware payload", "value": "ac4d9cc2e4c2712748ae5c07b19922f8", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674866, "uuid": "9b8ac5e9-c45c-403e-b992-d6e87b0f7d63", "comment": "Malware payload", "value": "51f2d6ad315171433b9b85d1470e7df2a9657c6a19fedf039ae1b3cd3662f255", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674866, "uuid": "4ad32a0b-d76e-4a64-85e9-66c6279e430e", "comment": "Malware payload", "value": "e4387af4632bd9f84581e09287bc82f1bde816fa", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674866, "uuid": "598b510a-8c2f-4dbf-be8e-f5eaf9a0bf7d", "comment": "Malware payload", "value": "fbe5337496395e6d7cc6d0a171b0b8a9860dbe4895c05b996e412e922c1202ac841bbb1a46e5fb4855d0d3c4754c2be4", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674866, "uuid": "73d58245-7356-493f-8f4f-004948ca2f66", "value": "CEF3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674866, "uuid": "c4cedcdf-eeb4-44f3-8b46-4f6a3653518d", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674866, "uuid": "51b33874-0aa8-4404-b63f-06a76e0c7df9", "value": "3072:VmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:0Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618674866, "uuid": "0611acf3-cda5-44d3-a94d-dfcc0184a5a3", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618674866, "uuid": "a699d263-9c1d-484a-8263-c7a9863227a3", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674866, "uuid": "f55401c9-f010-4e72-bb67-85b87d386ea2", "value": "51f2d6ad315171433b9b85d1470e7df2a9657c6a19fedf039ae1b3cd3662f255", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09d882df-9f6a-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618656334, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656334, "uuid": "d58e2995-8e06-4e81-82cb-41e73d774723", "comment": "Malware payload (Dridex)", "value": "8e2639862d1f08b79c69ef9ea0f69947", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656334, "uuid": "12e0eb33-2c5c-4d1f-b2ce-18ff05dbc9ea", "comment": "Malware payload (Dridex)", "value": "522209b57d48273718a98900d539ec13a0844d0990fd91b3ee90732e290f8f35", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656334, "uuid": "eca00f01-b852-45ed-8a10-4c204240d94c", "comment": "Malware payload (Dridex)", "value": "b1d62d606dfd5b65aa04428fd08faea8ca6cf868", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656334, "uuid": "6bcf57fe-6e9e-4961-a8d3-965a34e3a48b", "comment": "Malware payload (Dridex)", "value": "008c623ee148e8e3165d4ab74f1264718c9507634b79126694fe291b8b3d3559824339fe50e151a925741e5c05a05ac5", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656334, "uuid": "b0675866-63d1-4679-baec-433ad5acc722", "value": "38F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656334, "uuid": "ded1e08e-1619-49ca-8612-1690523e5622", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656334, "uuid": "a7981cd7-52b3-4731-b4f5-d1cce4442b44", "value": "3072:qmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:7Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618656334, "uuid": "6199e889-5024-4bee-9c99-b851a0572623", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618656334, "uuid": "3abb0143-1dc0-4a3f-9259-fc74c5e387f6", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656334, "uuid": "2a0a5214-825e-4b66-9eae-d5b1b24cf500", "value": "522209b57d48273718a98900d539ec13a0844d0990fd91b3ee90732e290f8f35", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35a19ef2-9f5e-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618651254, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618651254, "uuid": "5e686e26-dcc4-4b5d-b823-b1547e8c5325", "comment": "Malware payload (Dridex)", "value": "ae365f55d2b52ddf0c04d09409439da3", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618651254, "uuid": "24dd8db8-6cd2-4615-b397-0b67c6e59d93", "comment": "Malware payload (Dridex)", "value": "522cdd6123bca14dbb292d1f32e28ef5afb47928e044794057fa052762c09a4f", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618651254, "uuid": "91c10959-d9c3-40b1-825e-f8b7d9d5e3ac", "comment": "Malware payload (Dridex)", "value": "8e9c6615ae8593c3ffd38a21def80290d04b3c23", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618651254, "uuid": "2823be52-c1f7-4469-9eaf-95d7f0a8177b", "comment": "Malware payload (Dridex)", "value": "738df4b381a1376f591bbd509d4f7c087db98e81be265e05b427dec5792877df706fb8503d05e4cf4ec5e3ba97509b0e", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618651254, "uuid": "42537f4f-161b-4034-87cf-0184a6bf7b16", "value": "CEF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618651254, "uuid": "8b6c6886-fe43-4bee-9761-4111a956d2da", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618651254, "uuid": "149e568c-e424-4412-808e-29a02217fb6b", "value": "3072:6mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:rLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618651254, "uuid": "cc366942-d927-4a1d-992b-fa5c208b21cd", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618651254, "uuid": "694ef401-dbea-4156-b5b8-cc70d3d18336", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618651254, "uuid": "82cf8434-5ce1-4b46-b33d-7764f2bfa9b0", "value": "522cdd6123bca14dbb292d1f32e28ef5afb47928e044794057fa052762c09a4f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e0418a6-9f57-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618648207, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648207, "uuid": "c57ae7df-9c28-4620-9e90-842ca9f59881", "comment": "Malware payload (Dridex)", "value": "e6ed501b7adcb10f773b8f9d5feec323", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648207, "uuid": "bf12ce95-9da3-4e28-b7f5-36da7f299ff7", "comment": "Malware payload (Dridex)", "value": "52a837e29d16af3a4f967e33a0f8619897401672d2629ef3625249a7fc65db97", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648207, "uuid": "41dd659f-dd8c-46c6-b6d7-982fb007d1d4", "comment": "Malware payload (Dridex)", "value": "95861ff2328e001a67343fc16a989b25583ea5be", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648207, "uuid": "937b5d0a-e125-44bf-bf55-986287378f75", "comment": "Malware payload (Dridex)", "value": "6e8bb9f888834b3be03e4ca1515b6aae7200364b2ddd91a7c0826de061edebdbd591b0da90fe16cb01d5b706b2bb27b0", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648207, "uuid": "8b86262f-e328-41bc-b0dd-e46195654907", "value": "5CF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648207, "uuid": "de63bae3-07aa-4dee-87dd-74d49f679621", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648207, "uuid": "f90b5332-5190-47f8-a1fe-45452453717d", "value": "3072:ymNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:jLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618648207, "uuid": "f19523be-7913-43e8-bc34-f82294fd2100", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618648207, "uuid": "2460a580-9e6e-42cc-b5ab-161a3a3d4c12", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648207, "uuid": "585f5860-0c4f-43f3-a64c-1630cb9e5b89", "value": "52a837e29d16af3a4f967e33a0f8619897401672d2629ef3625249a7fc65db97", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b5d3e21-9f8f-11eb-abe1-42010a9c0039", "comment": "Malware payload (njrat)", "timestamp": 1618672228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672228, "uuid": "42dda162-d0b4-4792-836e-3ca2733748c3", "comment": "Malware payload (njrat)", "value": "a1599941b0a02cf95854f59ab650cecf", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672228, "uuid": "2fd13671-1f96-426d-9f1f-860d399707b4", "comment": "Malware payload (njrat)", "value": "52a9e4894d96bf96c878a5bde478f37b791cc60a6dd4ffce68d0c88ab97501b5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672228, "uuid": "c9243623-a97c-4982-8bd2-5b0315369b5c", "comment": "Malware payload (njrat)", "value": "7c2c79ea9baebed3aeaaff090b51efdeb48cc94f", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672228, "uuid": "4b17bc64-6f30-41bb-bd66-0d7fb5e21532", "comment": "Malware payload (njrat)", "value": "1145089e094747288e66a8d39fb6ff4ba50aec0d9b5684236b64466e162a8c1c4db6d868cb5dd3ad3ee06668e9930631", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672228, "uuid": "cb0ab2bd-cad9-420b-b3ca-c1e741e62442", "value": "8613D74CB694E174D5FF8BF1B4A2B2890B71A017AD02D20F99F154D94B73EC0AA11EE7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672228, "uuid": "29e8ac49-be2b-47dd-bc55-837077b6b477", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672228, "uuid": "8e7a05f5-b858-4d42-b926-5bcbc1437e81", "value": "384:RZyVKhg98NaIyrFln3usSEExi07azsIij+ZsNO3PlpJKkkjh/TzF7pWnj/greT0k:Dl2ywFrrn3u3dQuXQ/oO/+L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618672228, "uuid": "2279a468-f7d0-4d1e-bd72-58785cc2750a", "value": 44032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618672228, "uuid": "d77c0b67-2a29-4925-892f-501ce2110f85", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672228, "uuid": "722a51f5-12b2-4cee-b633-d586e8a3c9a0", "value": "a1599941b0a02cf95854f59ab650cecf.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c53a65aa-9f6d-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618657937, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657937, "uuid": "4b6e70ab-e040-4ffd-95c8-f953aaa3b938", "comment": "Malware payload (Dridex)", "value": "35df70d4a679781c880cb7c3d23dffdb", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657937, "uuid": "a5ff415d-3a31-495f-b832-30b5ccd5bac8", "comment": "Malware payload (Dridex)", "value": "52c10f801eaa7bc07b20a2fefe546fee9b4d06ad995d6d0ada6bb95d864833c9", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657937, "uuid": "987eb59d-bc31-4d7e-928c-e963aa52fd5d", "comment": "Malware payload (Dridex)", "value": "c341e3698cbc929982755ae894592b983af542a1", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657937, "uuid": "5545d5d1-e37a-4e91-bdaa-e7134f2ffb08", "comment": "Malware payload (Dridex)", "value": "9668a15bf571ad516a926239da4a7f54fcd30ed3721a3083d09b498934f20fbca86ce45d6514f9ba022e33afa8df5d34", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657937, "uuid": "7009c629-9b0a-4454-8c12-7c4281248360", "value": "54F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657937, "uuid": "b70e16a5-4b31-47df-b4d2-2fc5d2bc7053", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657937, "uuid": "fb72422d-d1b9-409f-a2c6-3cf613ccc74b", "value": "3072:gmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:pLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618657937, "uuid": "9a62746b-a9cb-4742-bb17-a867ed6d6e6a", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618657937, "uuid": "8e2084cf-4ec4-482c-b6d3-820812d2cb53", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657937, "uuid": "48091559-f5bb-481b-8b9d-c95f9fd64704", "value": "52c10f801eaa7bc07b20a2fefe546fee9b4d06ad995d6d0ada6bb95d864833c9", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa5f6292-9f7f-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618665623, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665623, "uuid": "9a175bb8-88df-4d20-9ffd-844b24e56c62", "comment": "Malware payload", "value": "d99e18d858af3575a8f46e0991097d1e", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665623, "uuid": "e40f834f-a3c9-4194-977c-47eb9edb241e", "comment": "Malware payload", "value": "52ec015d248415e96be83d32681af299cbba0650475a1c1992f45cac0f42dcef", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665623, "uuid": "138095b3-e39a-4e93-b0bd-f26e6076e1ca", "comment": "Malware payload", "value": "5f9a7e64071a9f0d65c98d95ae0d02f964b06b07", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665623, "uuid": "b1a8f3a9-b502-44d5-b230-54b53a76edf7", "comment": "Malware payload", "value": "a700be5cf07aea0f9906e92e19130f003ae09cb78d24a7789b1135de69738287badc93a67067daff31b9c550421f3c66", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665623, "uuid": "6ed0f281-0a03-4d83-adfd-8d8b705ff08b", "value": "74F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665623, "uuid": "7fcfe862-a688-493a-b4db-5d7c8ade46a4", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665623, "uuid": "01c03710-5ccb-4be4-8dc1-b94fc0313d85", "value": "3072:gmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:pLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618665623, "uuid": "21d1de9f-e7e8-44c9-adf7-0fd83a959c18", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618665623, "uuid": "b679a207-20bf-4f67-a9b7-761c29dd4c9c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665623, "uuid": "10c37832-a4b0-4acf-88d8-25e9841d7599", "value": "52ec015d248415e96be83d32681af299cbba0650475a1c1992f45cac0f42dcef", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "03d96a1e-9f20-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618624541, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618624541, "uuid": "297ca34e-ad41-45fd-b8e1-3ea148de3e58", "comment": "Malware payload (Dridex)", "value": "a4a1338a8038deb427d9252de7d97de9", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618624541, "uuid": "3a0f06e6-6d4b-4ff3-aafe-87f842149055", "comment": "Malware payload (Dridex)", "value": "530fd94507d763268c27fc633ab45b24fc486549e5b7765637c7177a94d54bfb", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618624541, "uuid": "b0a2aeaf-2572-4063-ae05-69af6e3362f6", "comment": "Malware payload (Dridex)", "value": "7e417466876b5e94d39389a8834d8e534db9978c", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618624541, "uuid": "fcb95f22-62c4-48b5-8d13-75692bf45e49", "comment": "Malware payload (Dridex)", "value": "fee47a79041ee604a1ac3bf6c4c66f8abe5288f8fc8569807d5e414162257284d1c563d62a9f7b9acdfdf8255edcf6c6", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618624541, "uuid": "93502503-b2fa-4cfa-b05a-b599468abbc2", "value": "6CF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618624541, "uuid": "816fd0d0-2f90-410b-85d7-85981306f984", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618624541, "uuid": "27750c0d-c238-4075-a483-6d3403bf3d0f", "value": "3072:ymNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:jLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618624541, "uuid": "7302a18d-766f-4454-b344-8f5c67e8cd6f", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618624541, "uuid": "f3858db8-34c7-4f6e-9c87-99df178eb3c2", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618624541, "uuid": "1a05aec5-7e96-4dd6-a462-bebb30f01a05", "value": "530fd94507d763268c27fc633ab45b24fc486549e5b7765637c7177a94d54bfb", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce61cb7c-9f2a-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618629176, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629176, "uuid": "c9e5acba-7ccd-4d38-a3f3-2602576ed3f4", "comment": "Malware payload (Dridex)", "value": "e34370beef57ad23d07b26bff2822498", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629176, "uuid": "8daefd62-2800-4ea7-be18-6dcc4d44044c", "comment": "Malware payload (Dridex)", "value": "542d6cfc4786e92900a25588ba5b2108ab8842def99b7642eb9450e7b85949d1", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629176, "uuid": "5641c5f8-3c1b-49e0-afad-2e6021007a6a", "comment": "Malware payload (Dridex)", "value": "66f629630fe59cb78d31f973781362a42b2d6f79", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629176, "uuid": "b42de4c4-08c9-4ecf-ae69-12bb15d82ad9", "comment": "Malware payload (Dridex)", "value": "9e19f618664a994dc53db50419901f07eaddb452ca1e5261a7b4c551c3a5cb2535bf89362902cc383968a4254f1bfd42", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629176, "uuid": "37cf9a00-2555-4dbc-9988-5b5a5fd18742", "value": "12F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629176, "uuid": "1270190b-39cf-4a66-8d47-8ad6cab2725f", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629176, "uuid": "3c1ea9c4-01a1-4183-aa37-865595e2e35e", "value": "3072:1mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ULc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618629176, "uuid": "dd5a4798-cb75-41fd-b1e6-4de4b1d0eea4", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618629176, "uuid": "d60ce7c6-f5ec-4886-a0a2-3544c93e0151", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629176, "uuid": "85a8fad2-11ad-4467-859b-6c1c757611de", "value": "542d6cfc4786e92900a25588ba5b2108ab8842def99b7642eb9450e7b85949d1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8bf6df1-9fd0-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618700409, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618700409, "uuid": "6e0e3243-48ff-4e88-9f7a-1fa95c89ffaa", "comment": "Malware payload", "value": "ba54856bcb5213ecc7d62a2a5c75f1ae", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618700409, "uuid": "015a6c64-fc2b-474f-87e2-efac67ffa09d", "comment": "Malware payload", "value": "5434e6a71043bb145c4c49820299b89e713af7ca458d54babb3e1a9aa9088a20", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618700409, "uuid": "7427c4c3-76fa-47f3-8989-9bd14a634e55", "comment": "Malware payload", "value": "97ea43165ae6d27229221ddb5f8a7281b760fba2", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618700409, "uuid": "c31ec01d-a01a-4ee6-a9df-085154287d5c", "comment": "Malware payload", "value": "b2da9d086446ee6969dcf96210ef5b3fe5d24125f450a271bb2419be705a3ddc5be7bcce7d1358b93d0a91152b11cc41", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618700409, "uuid": "96d0afc1-025c-4db9-bbdf-1bc5866b12d1", "value": "71F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618700409, "uuid": "e84e6711-095d-4ef8-bf6b-af2500db54d7", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618700409, "uuid": "53335419-d489-4f10-86b1-675172740bf7", "value": "3072:+mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:PLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618700409, "uuid": "0aed8d93-4e7e-4212-bf7b-1316bc5f61fc", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618700409, "uuid": "0cab3150-afbc-43a5-8053-7eb387682860", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618700409, "uuid": "67524455-3e48-4526-b3ac-ed7a7ca91546", "value": "5434e6a71043bb145c4c49820299b89e713af7ca458d54babb3e1a9aa9088a20", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a044413-9fcb-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618698237, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698237, "uuid": "e54a9dd8-3438-4e74-9239-4a13efca55eb", "comment": "Malware payload", "value": "e962abb5b34ba77c4cac73044689a4e4", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698237, "uuid": "878cc926-d032-4752-bf78-0e9c0d8c8c0d", "comment": "Malware payload", "value": "552e1e7953b11745b62369292f47e988024f43a4fb02e5db7b84de2b5302e961", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698237, "uuid": "a882be12-b6e8-4e72-baed-75d7ccdcba71", "comment": "Malware payload", "value": "1df951ad09b8156875defa4f992d56a3d30aa9ab", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698237, "uuid": "d92604f2-b368-40b0-ac73-df6b6de5ca4b", "comment": "Malware payload", "value": "be41782138cb76752153ad76efd46e25a6d9ae8ac16066382e5dd0fd66067aac922bc84bc7446017fa5d6ef13f615f27", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698237, "uuid": "c1e749ff-b7d8-410e-b4b9-ab3d5027d14e", "value": "8FF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698237, "uuid": "f1d79cca-919c-4440-aeca-40b0f882edd1", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698237, "uuid": "67523df5-ce59-4239-9e14-89e2211d6d45", "value": "3072:rmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:6Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618698237, "uuid": "00aa1590-c84e-4257-80ae-8a3901798731", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618698237, "uuid": "c777da2d-c17f-4398-972f-fa4803cd7422", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698237, "uuid": "3d49911b-f185-42a2-acb7-aea5382d74f5", "value": "552e1e7953b11745b62369292f47e988024f43a4fb02e5db7b84de2b5302e961", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5305c81-9f80-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618666044, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618666044, "uuid": "b7543d27-bba2-40f2-aefe-9e851a049604", "comment": "Malware payload", "value": "07cd7cf7a5ef4e4d2827d2fbae99ff0e", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618666044, "uuid": "94725ff7-2c6d-49c0-8405-f5319cb5a722", "comment": "Malware payload", "value": "5549e41dc7638153699a51d8d7f8b73fa60009845cb754d8077b92fd67adffca", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618666044, "uuid": "4d7fa88f-3e7a-4e3e-a456-9c01d239cfec", "comment": "Malware payload", "value": "25a4ab5499cc1cc63e25cbad1692b4cfb2bae202", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618666044, "uuid": "7580de02-0a72-433b-8c97-cbc12c93a9ef", "comment": "Malware payload", "value": "3e33ddf2c64e2fd4137190be1e1a970bde7c8b3e063f04efcaf837f3628e34e24a7684982a57aba5587968a8374bd07f", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618666044, "uuid": "e64e537b-9ff4-42f3-9e6a-455ee47d2628", "value": "32F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618666044, "uuid": "37c1ca12-d9c2-4564-942e-9014c23b7339", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618666044, "uuid": "bcfd19ea-2583-4254-85f1-4abe274f9f45", "value": "3072:emNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:vLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618666044, "uuid": "df3aa7b6-8533-4554-9504-a92463a51896", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618666044, "uuid": "7f4875fe-434e-4494-9b1f-a638600212a2", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618666044, "uuid": "b2929d93-7b91-430c-a4af-4a44fae822e5", "value": "5549e41dc7638153699a51d8d7f8b73fa60009845cb754d8077b92fd67adffca", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1b58be2-9fd2-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618701337, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618701337, "uuid": "2d77d9a2-f947-4b3f-8e0e-0c9a43afa0d9", "comment": "Malware payload", "value": "087dcc415c9edbf9c747198e7ee51c38", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618701337, "uuid": "ab600012-e14a-4b94-97a8-2f20645260ac", "comment": "Malware payload", "value": "55ad5336ce9a46776e37bcf129383a52ecd502de49eb7be16316ef8905fac66c", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618701337, "uuid": "a5b5bbb9-aab0-43ed-a380-6f6156754b29", "comment": "Malware payload", "value": "14eb26f3181d3c12c894f6b4b2338d7649be0cad", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618701337, "uuid": "928c9d66-5fa7-48d4-b123-061a77ffc618", "comment": "Malware payload", "value": "cdebdd5d2eeb8e380e45924eafe7fa1aec812091c6991ce1d9fd44653f2341af16cfc548998b82cf9feefb783dc0a9af", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618701337, "uuid": "7bcb36e4-7299-4852-8e04-256f82fb1d4e", "value": "A4F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618701337, "uuid": "847faef5-af97-4550-82b1-b7c83ffa60e2", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618701337, "uuid": "1248c923-70c5-4868-acf7-5fdf04998788", "value": "3072:kmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:tLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618701337, "uuid": "a6e875ad-49e4-47b8-800c-94e1051830da", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618701337, "uuid": "92cfe32d-b322-4926-b3df-ee982b702505", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618701337, "uuid": "f02c4c44-46a5-4b18-bc55-41f62f1d19ac", "value": "55ad5336ce9a46776e37bcf129383a52ecd502de49eb7be16316ef8905fac66c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "599f7e02-9f8f-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618672359, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672359, "uuid": "09b841c2-0efa-49aa-a349-cddbe7bc31df", "comment": "Malware payload", "value": "d53936b615586feb9fcf9c8619cbd517", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672359, "uuid": "98c1488d-2e8e-454f-b422-99ec58363b51", "comment": "Malware payload", "value": "5644bab4db45d8431a3b48729c63b044e61932da11f4a5f71641525e105de8b8", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672359, "uuid": "3980ab47-d348-4581-8efc-d070aab320fc", "comment": "Malware payload", "value": "b7002154af684b15652abe02b0ee21618c3394a6", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672359, "uuid": "2479772f-38f2-4f39-9934-f47f2f972778", "comment": "Malware payload", "value": "b2c73c195417a0bb94dc9363c6404791ce83f434a873fdd726bbdbefc9181a4a0d8025feaf2af2d6792251e90b80a6f7", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672359, "uuid": "1868222e-f87d-4faf-b096-c7f58785ee25", "value": "ADF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672359, "uuid": "49970dea-e556-454b-ac48-0bdbfd8d03d7", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672359, "uuid": "0075bea7-ce93-4e61-a2ac-ab7e3ea0e3ba", "value": "3072:VmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:0Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618672359, "uuid": "9f8d5f15-0bbf-4237-8a61-e198c40d434b", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618672359, "uuid": "fc68ba05-389e-48fa-bb7b-da1152023ee3", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672359, "uuid": "a833db3f-cc70-4cff-992f-b73c6ec40dc3", "value": "5644bab4db45d8431a3b48729c63b044e61932da11f4a5f71641525e105de8b8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "26bd135c-9f60-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618652088, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652088, "uuid": "f6030148-598b-40ff-9046-ed04a3b2d034", "comment": "Malware payload (Dridex)", "value": "7973286f2bac4c5ac13fa6b2f089a2e2", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652088, "uuid": "6253dedb-38a8-4da7-a89a-418acfd7e15e", "comment": "Malware payload (Dridex)", "value": "56ce16ea0dafd1923694d3407d13fad98b8183a3e3d629269ff0dfd64104ae59", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652088, "uuid": "ff0705fc-436f-44ec-ac91-342dbd7a8ae8", "comment": "Malware payload (Dridex)", "value": "563bd43dfe476ec4acc8fe33e8cb759e0d8e281a", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652088, "uuid": "c8a48782-4d80-48e0-97a0-584ade1c7e3d", "comment": "Malware payload (Dridex)", "value": "679e0c1cfd200595767a21fa690795d2cbf1f3d676ef5675acf5c9d9c90eaf795b38465f42a482029f9f4ec835815931", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652088, "uuid": "9d8e68cc-07ed-4d87-a3e5-e09d11f5c742", "value": "BFF3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652088, "uuid": "ae7ab9f7-d227-4cb4-998f-c577f2961e4d", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652088, "uuid": "5ed01f30-0a29-4aca-8048-a7bbf8c363b4", "value": "3072:fiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:UeAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618652088, "uuid": "55499757-2262-4c60-b4eb-b1ed412d0fb6", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618652088, "uuid": "1e8687d9-0c17-4402-a5c0-be0007579716", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652088, "uuid": "4e5b775e-1030-414f-bbe2-dbe46c6e324f", "value": "56ce16ea0dafd1923694d3407d13fad98b8183a3e3d629269ff0dfd64104ae59", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff721add-9f3f-11eb-abe1-42010a9c0039", "comment": "Malware payload (AgentTesla)", "timestamp": 1618638278, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618638278, "uuid": "3db2d616-0065-4043-8bd1-cc8bb7de97d3", "comment": "Malware payload (AgentTesla)", "value": "39325dc80666e2dc1124846ee05d4538", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "INVOICE", "colour": "#75F0D5", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618638278, "uuid": "df7217a6-9067-4e71-937a-623d326565cb", "comment": "Malware payload (AgentTesla)", "value": "5710878413615a629139b9d577c3fe4a603038a1cc5ac73a9f98b1b5d6e88854", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "INVOICE", "colour": "#75F0D5", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618638278, "uuid": "18962df2-6f24-44ae-adc6-eaa4575949a7", "comment": "Malware payload (AgentTesla)", "value": "f9f4436183214043e75e39e86d2e8793f4459f6d", "object_relation": "sha1", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "INVOICE", "colour": "#75F0D5", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618638278, "uuid": "4e9cab50-7443-4b86-a6ff-c6ad6b8bf5cc", "comment": "Malware payload (AgentTesla)", "value": "504cc7a5a0579ef2ada8672fbe175b2f6073c97e7d87c3f79867a06612d2367deb02bc02c57baab153fcfcb0e9f0a9e1", "object_relation": "sha3-384", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "INVOICE", "colour": "#75F0D5", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618638278, "uuid": "e3c03b57-506a-45af-ba75-faaca009b013", "value": "50B423E65A1E01658D24CBECDAD093387279D91C27A102361DBA5C268AF3CE2DC5727F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618638278, "uuid": "79122840-dcf6-4053-ba1c-c80df38de21e", "value": "12288:c+Zv++64TJrj4Ku9uk6VxRg4UfzWP28CCCoN0Pzu/S1ztc6XnDFV9C5DDD:c+g+jrj4KuxMPIfKPVp8z2+caFV9C1D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618638278, "uuid": "920323a4-17d4-4bec-ac51-802d88fb4aa6", "value": 532688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618638278, "uuid": "17265458-2fb7-4a76-8927-46a98b9dc1fc", "value": "application/x-rar", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618638278, "uuid": "966e0467-87d3-4cb1-ae7c-b430dc5cd525", "value": "confirm below invoice.rar", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b936e8a3-9f89-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618669943, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669943, "uuid": "87d709f2-9bf7-407d-b523-ca9635538b81", "comment": "Malware payload", "value": "149cfcb05d230688b48b80fadfbcfb08", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669943, "uuid": "b3e1375e-316e-4be8-a557-a8ec1adeab38", "comment": "Malware payload", "value": "578b24b40478f8a06b30eaf08723e30201c38fe5ffbeffb8dab86cca2cf4b48b", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669943, "uuid": "c030741d-680e-46e6-95d1-477b25af0ebd", "comment": "Malware payload", "value": "8292f2dde516a5996cc2bf62a1433d240a000a0c", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669943, "uuid": "0023437f-84ae-444b-bf61-690633d09d1f", "comment": "Malware payload", "value": "e7fb07fdb4d5b5f06274d6291c322ba53732c11fd64d8729039aba400f57f6de24329c42e7673aca3558afa00a7ea38d", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669943, "uuid": "930fa841-cd88-452d-81b9-12d29f78d9d0", "value": "F9F3D088CBB3E4E6EFB3D37866F85E1B561174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669943, "uuid": "c442f10f-3ce7-4b86-80ef-c65b719bc6f8", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669943, "uuid": "eec93dcd-c532-43ae-ab5a-209dd697b76f", "value": "3072:3mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:WLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618669943, "uuid": "025e1434-15af-4b92-b16e-53aedaa841a4", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618669943, "uuid": "c232d0fb-ae0c-4eec-a799-67e60e6119cb", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669943, "uuid": "990546d8-7948-42ff-a9e0-1a925f3a8252", "value": "578b24b40478f8a06b30eaf08723e30201c38fe5ffbeffb8dab86cca2cf4b48b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8e40ebf-9f89-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618669942, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669942, "uuid": "05ec7d3c-460e-42da-bb36-29f3fdd49828", "comment": "Malware payload", "value": "b9d0565e2667916e71f6fd3cd9b0e49b", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669942, "uuid": "cc4870c0-73fb-48b5-8f3a-d17352bd3137", "comment": "Malware payload", "value": "57a2dd18a680d1b2f62cc9da846635669924544ac80a5e11b1694c87fc8ffa8e", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669942, "uuid": "9145aa3d-8630-421c-b4ac-c9303dbcd1a7", "comment": "Malware payload", "value": "ef59732e2107acd4da756dc7197e49a4aac7c25a", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669942, "uuid": "07d09533-ff32-41a2-93cf-e47a430cda0c", "comment": "Malware payload", "value": "e09201b80003915942b5ad678e4d8df8a5b55bd0e2d18c206ab77be15b830266249293016f33a196e42c138d70ca1451", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669942, "uuid": "760c51f7-c09e-4c3d-aad4-944f032ab508", "value": "5CF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669942, "uuid": "18f218ef-3ba6-4108-9266-727fa3e4d8c8", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669942, "uuid": "8e2a651c-18a7-4a0e-8d84-a25f06bcac6f", "value": "3072:/mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:eLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618669942, "uuid": "5d57a368-8851-4636-8285-594c6863fe85", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618669942, "uuid": "874ee0dc-9968-437c-90d5-a7e387f2ab03", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669942, "uuid": "e7f6be80-e550-46ac-af06-ec587c49a2d3", "value": "57a2dd18a680d1b2f62cc9da846635669924544ac80a5e11b1694c87fc8ffa8e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe49d24b-9fbe-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618692822, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618692822, "uuid": "9bbd05e8-ae80-470b-9682-7d36a6d7b946", "comment": "Malware payload", "value": "49d785f97ab76c008bed17e2b08a8230", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618692822, "uuid": "93202598-6ce9-4147-ae34-e7a994edf364", "comment": "Malware payload", "value": "57aaf4f4ed419f1dc25e4e8fab6afe9b19f985bcac3c2c3872999901996bec3c", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618692822, "uuid": "35f45ebf-0c9a-4770-8dd9-50f012eea716", "comment": "Malware payload", "value": "7354dfe5a30f884d7ff537c30c89157f3a8fed58", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618692822, "uuid": "f8c8657a-f049-46af-ae6f-006d10c5eeff", "comment": "Malware payload", "value": "591d5098a0c77b1cb86e93f4ba108d8cb74c75d5e814d8d3db8d3fa3402c3786e5f9a83649ad2df69d037a8412612e8f", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618692822, "uuid": "577e5b5f-10b0-412b-bda9-c36e59117bda", "value": "9BF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618692822, "uuid": "62528a30-207a-4ce2-9bbe-98a46f1e704a", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618692822, "uuid": "bc93d44d-ee8f-4608-96a2-bcc778cb2ff0", "value": "3072:cmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:FLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618692822, "uuid": "38481256-39e3-47e9-bd47-d674d4204dea", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618692822, "uuid": "bffef4e3-bd67-4771-9a60-2ee234aaf651", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618692822, "uuid": "7e0c061f-e755-455a-9136-6d621979e9ac", "value": "57aaf4f4ed419f1dc25e4e8fab6afe9b19f985bcac3c2c3872999901996bec3c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5594d28b-9f6a-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618656461, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656461, "uuid": "3f812fa7-953c-4a53-a3a4-0472a50f766d", "comment": "Malware payload (Dridex)", "value": "77fb46a1dd355e50108764a14ab4a1d3", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656461, "uuid": "521143c8-1978-40f0-915b-9cf89ead6148", "comment": "Malware payload (Dridex)", "value": "58413ececf282ec5b83448ad86d84691d040122e0c8bc023fde1bd8986ebb3ca", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656461, "uuid": "cdf3b216-caa5-4ab5-a53b-7343ffb15679", "comment": "Malware payload (Dridex)", "value": "7ecc7dbaa04565fba373d51b5a2ecf707ef1dee2", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656461, "uuid": "da045e81-2db4-438e-8ea5-6ebf493bad7d", "comment": "Malware payload (Dridex)", "value": "bce842a22459388193af8732bf5c191f6ca76fd5763bf3f488b3ee83c58510312d9f56bd5f5b7b88bc03c186966b2875", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656461, "uuid": "8cc04ba2-66c7-4631-91ec-9b3ceeefb7b5", "value": "8CF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656461, "uuid": "6caad4a5-bc8f-4b32-a75f-b69ffe7d3fc8", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656461, "uuid": "5a584aa4-f650-4409-8355-7a8e76869c30", "value": "3072:Xlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Xlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618656461, "uuid": "fd392278-e000-4353-9ab3-8607587a9f92", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618656461, "uuid": "6e0ca971-d3ec-4b83-896a-34a0e38aefd0", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656461, "uuid": "4121f081-7e47-4021-a417-4fc8f2aaec2c", "value": "58413ececf282ec5b83448ad86d84691d040122e0c8bc023fde1bd8986ebb3ca", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90b5f2ee-9f52-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618646252, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618646252, "uuid": "34fc5f88-30e4-47b9-9baf-18b9763227dd", "comment": "Malware payload (Dridex)", "value": "8386db652b7420142dfddf8d07a7251d", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618646252, "uuid": "7a84d906-db78-4ba7-8780-ab0845246849", "comment": "Malware payload (Dridex)", "value": "59ca03301cf44cf8c8f5e294d2afc97a163b8240db36695c542d55cf337fda3c", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618646252, "uuid": "684d1b6a-375c-4428-b2e5-15b9a013916d", "comment": "Malware payload (Dridex)", "value": "c38f4ec3216782863935e6d3d7b8c7eae1db52cf", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618646252, "uuid": "1c77c4af-a92c-4558-983b-8c6a75f315b2", "comment": "Malware payload (Dridex)", "value": "c1b703e65b38521b0983358f9578c35bc7244e1f5cf17cd724436a43a2f6d6f3a66bdffa7427f1de9bda4e447cc837fb", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618646252, "uuid": "ca0dddca-2537-4c4b-8da3-f8df5dc324c9", "value": "68F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618646252, "uuid": "154b4d22-27f8-43ee-b4af-4aaa7b0cc4b9", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618646252, "uuid": "7622d48f-ab88-49d6-b3f7-38024f47ee1e", "value": "3072:YmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:BLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618646252, "uuid": "83014906-507f-4ff5-986c-111733814f7a", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618646252, "uuid": "8fba954b-db18-46be-aec2-31620f287706", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618646252, "uuid": "65168f07-258e-4e0d-a99a-426228426243", "value": "59ca03301cf44cf8c8f5e294d2afc97a163b8240db36695c542d55cf337fda3c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16d45700-9f58-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618648625, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648625, "uuid": "c060ecda-23df-45ae-b735-8a4bce0d0f71", "comment": "Malware payload (Dridex)", "value": "0eaf8810caddafad2efeef83af0f9f9a", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648625, "uuid": "d4f1b7d8-aa94-451f-9371-f62282e905fe", "comment": "Malware payload (Dridex)", "value": "59d37758179a0ba46072c108d05d87837f254be2d4bd731cdea563bf9bf70011", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648625, "uuid": "be3c8a09-d139-4843-80f2-52836e68a10a", "comment": "Malware payload (Dridex)", "value": "d1881b31fc7a3fcc1bd6143e28145e0ed49d58f7", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648625, "uuid": "6bc6f00c-ddf9-46d6-8981-803624d580b9", "comment": "Malware payload (Dridex)", "value": "9ac0d5fa9588b6000fb2f6339e7c6973ab3dbe2559e2263b9dd55c58c57d96109814dcba7c51af48d454bd4d00cf1bde", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648625, "uuid": "d047b30c-9bcc-4935-a4de-3d89c8a5d18a", "value": "D2F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648625, "uuid": "0d63c651-20a7-4a27-9458-2f97bdf790a2", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648625, "uuid": "c260ddef-7b43-4f2c-8043-c03351c355cf", "value": "3072:wmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ZLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618648625, "uuid": "cf601ca7-824c-4f9f-92e8-173751c193cc", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618648625, "uuid": "fa269d2e-f4e3-4a27-a48d-9ece6e431700", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648625, "uuid": "3106ec3e-01ec-4b42-bd60-742d71950032", "value": "59d37758179a0ba46072c108d05d87837f254be2d4bd731cdea563bf9bf70011", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c72651a2-9f33-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618633029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633029, "uuid": "e080e665-744c-4361-9bbe-97caa122344e", "comment": "Malware payload (Dridex)", "value": "d61f3b36e2417e89dd003eed14f9b874", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633029, "uuid": "88f39756-b6fe-4332-93c8-dcb042b67a14", "comment": "Malware payload (Dridex)", "value": "5a05e428ddb8a10a2d675261c89e317d675ec5c6309823a335a67393b42efb8c", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633029, "uuid": "1056e7b2-4860-452a-a1bd-87fc2c10ca41", "comment": "Malware payload (Dridex)", "value": "8553a50ce6aec236cde22f69d7c006be153ff13d", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633029, "uuid": "60652ba8-4c24-4ada-bbed-6460041478a3", "comment": "Malware payload (Dridex)", "value": "0325f45eee32a6858cbe8c7dd73a4927ccf6545788341107a7b5126d287c78dbde6449b712c4e619e73f4483aa55d8dc", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633029, "uuid": "d278c815-2c64-414e-8078-a0f0c9946bfb", "value": "21F3D088CBB3E4E6EFB3937866F85E1B561174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633029, "uuid": "75901c5d-d7a0-4eac-84da-c03703ad33f2", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633029, "uuid": "d2dc94cf-0a71-4938-860f-15913cd5932b", "value": "3072:CmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:TLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618633029, "uuid": "dea3b0e9-ddb9-4d15-bbe8-613007845865", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618633029, "uuid": "11281e7d-2a6c-4d9a-8059-f6369fbd51f3", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633029, "uuid": "8d92ea43-3c5b-4ee2-b7ab-e8a9f62c949e", "value": "5a05e428ddb8a10a2d675261c89e317d675ec5c6309823a335a67393b42efb8c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9591a616-9fa4-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618681479, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618681479, "uuid": "4ed78a53-ae00-4e40-a32a-49d822ff3e0f", "comment": "Malware payload", "value": "650a27504b7c27adde3bd55d5c42edb1", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618681479, "uuid": "d4b639bf-0eab-4127-a7dc-35bbd87c4e8b", "comment": "Malware payload", "value": "5a1fcadd4bd04aa35372ef0721582e457e7aea95c8913029de1c645865bb84e3", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618681479, "uuid": "cc091b6b-af32-43da-9514-0f1991d624af", "comment": "Malware payload", "value": "f511717141401890d7754c7d37da9e480d88c0b3", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618681479, "uuid": "97157b8e-3f5b-468d-8623-2aa5382da39e", "comment": "Malware payload", "value": "5c82fb7ed5e5625ba69c0ef599faa5bee2babc64c0d23a036e43d058c1e26b959184422a32a890af8cb383fe247b80f5", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618681479, "uuid": "18be364f-f20d-4683-8773-64edf0b9997e", "value": "DDF3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B49671FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618681479, "uuid": "d89f4086-c02c-41d7-a1ce-8538391688b8", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618681479, "uuid": "ebd3c944-72ca-42d3-b039-349987e040b4", "value": "3072:YA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:Y3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618681479, "uuid": "f74d6c8c-bc7e-4e82-9989-2f9b9daa7ed8", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618681479, "uuid": "26c178ef-9933-46f3-8b75-7df0b3398395", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618681479, "uuid": "d504117a-5ba3-44dc-8097-6305dd117883", "value": "5a1fcadd4bd04aa35372ef0721582e457e7aea95c8913029de1c645865bb84e3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eccf71cf-9fcc-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618698806, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698806, "uuid": "e689eaec-4274-4577-a69a-d0271311e135", "comment": "Malware payload", "value": "797ff179e3fbd42c81a91b6cbe20df2a", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698806, "uuid": "cfe02a74-9371-4473-b365-88104e2badd1", "comment": "Malware payload", "value": "5a3de13c2fd11a7c2f57aaab4c50f5e543e21d0b703709122fe212af65d60d23", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698806, "uuid": "3c8994bc-f9da-4e83-879c-82d4f25955f2", "comment": "Malware payload", "value": "b68d973b8f855cef5880af2bcfcf89d075a84dc8", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698806, "uuid": "e5dd1027-31c5-4383-bdbd-9c50eb556218", "comment": "Malware payload", "value": "6d454e51f05c089cf1d7cc643a154c159358ed9b4c105169177b83a1b90df78c4f746d9310df15c939c2c27999adac2b", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698806, "uuid": "54087915-fd93-4146-a3c8-75d9400debe1", "value": "F1F3D088CBB3E4E6EFB3D37866F85E1B461574551408F4F0C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698806, "uuid": "3b553bde-2d76-47a1-b3a5-fb0658e1c5a0", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698806, "uuid": "328f4dbf-0e23-4ff1-bf68-2e2ac7b7e8f3", "value": "3072:OmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:/Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618698806, "uuid": "7765aa0b-1655-48ab-a945-f0d16879e4d9", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618698806, "uuid": "8d959875-be4e-4cbd-8af7-bec5ae5602e2", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698806, "uuid": "cc0e63cc-d617-4a07-bb46-a6921da3f4da", "value": "5a3de13c2fd11a7c2f57aaab4c50f5e543e21d0b703709122fe212af65d60d23", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "759cdc37-9f93-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618674124, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674124, "uuid": "a16f0023-7c2c-44fc-9288-9cdfe473f3b8", "comment": "Malware payload", "value": "99021d1e4bfb28bc69f8e3220f04793d", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674124, "uuid": "fa796de7-f36b-45db-929c-9b00421441ac", "comment": "Malware payload", "value": "5abdf96b8d6c0698501c0fef853fd8e140235db12dc833b78c18a9760a65cacd", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674124, "uuid": "14ae245b-3881-4cb0-b1e7-89ca611c106f", "comment": "Malware payload", "value": "9a22bb3b6ca3e87ac949cb5ea8502226614ff00e", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674124, "uuid": "5a1d9e55-ef6a-429d-ab92-93ec3f553e08", "comment": "Malware payload", "value": "94f42884ab58ce4348c7a1903363979b3f5fcaf8ee5f104f7bf98729dfbc1137d868a64c8390b727adea72b69448eea2", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674124, "uuid": "2e800bff-cc0c-4948-ad08-adbf09c74722", "value": "1CF3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B496B1FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674124, "uuid": "f3fd9647-9268-447e-9c31-c592df83a105", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674124, "uuid": "c9714f95-9edf-4188-8027-cd934090344f", "value": "3072:QA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:Q3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618674124, "uuid": "d7cedcdb-7a1a-43a8-b415-dd68d95311d9", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618674124, "uuid": "72f7fe83-545f-4dd1-90aa-33225f03a427", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674124, "uuid": "670a5d9c-6603-4206-acc2-ddfbe137679d", "value": "5abdf96b8d6c0698501c0fef853fd8e140235db12dc833b78c18a9760a65cacd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1005ee6-9f30-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618631784, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618631784, "uuid": "6de374ad-9542-4812-9555-0941da1e0163", "comment": "Malware payload (Dridex)", "value": "b1838a749b78d9e788c16a39b63fc236", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618631784, "uuid": "d6e2a4b6-ebe7-4176-b272-fcad75c9c792", "comment": "Malware payload (Dridex)", "value": "5b49afb2127a475b9b042918cf417ff51e5167daca1acbf493760bf6cdfc5188", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618631784, "uuid": "fc1dca34-b6d9-4209-b81e-b8809f2d91a6", "comment": "Malware payload (Dridex)", "value": "7fb8f1af6f8d902de4773bee2ce7f0ade4c03d40", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618631784, "uuid": "7c2f1e99-32ea-4431-afa7-17c2c9f042b1", "comment": "Malware payload (Dridex)", "value": "10b2f32922a1931b8ef65630368e5b5bd5244e32e62e3e15a8f85bc49aad6f9ad89195f503f0b0b2819096e92e888d11", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618631784, "uuid": "28380362-1518-4652-bc03-f14111447923", "value": "AEF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618631784, "uuid": "f7f8a6d1-0d39-47fd-b3f1-679d46020c10", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618631784, "uuid": "d7b1d4b7-fc25-403f-98c3-756d9bac2485", "value": "3072:0mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:dLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618631784, "uuid": "fbff71c2-2246-45e7-8ec5-ce2cc31a75bd", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618631784, "uuid": "e07475d5-43c8-4e58-b5b2-1791f0c65272", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618631784, "uuid": "e307b194-6320-44da-a9ac-39539ade48ff", "value": "5b49afb2127a475b9b042918cf417ff51e5167daca1acbf493760bf6cdfc5188", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6d3ad9e-9f89-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618669939, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669939, "uuid": "8f76fecd-a092-42f3-9a6c-4a793891be11", "comment": "Malware payload", "value": "687a5f71258e3dcc6064c6d937ca2c9a", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669939, "uuid": "81a5050d-ea5d-429c-87e7-5b925dfbfc17", "comment": "Malware payload", "value": "5b708d070b5bc0c31cada9ef9c31b5225892d5efcb28afd53d31f0c49c777f27", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669939, "uuid": "44da48ec-a7b2-41e6-afff-d6c3a3614fca", "comment": "Malware payload", "value": "55200627f4410eaf41271588ce1dc116eaf05237", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669939, "uuid": "154a9d12-8509-4a77-9aa4-def9801375d7", "comment": "Malware payload", "value": "88391912407d72ddee08a97813cc56518949fb6a381297b9c41480cb2ef297609842e2e84096b98a9c4d7a1acbcbcf53", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669939, "uuid": "8c0d4a75-4b9d-47b8-8bab-61d35f6a0c59", "value": "DCF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669939, "uuid": "585d3609-4bca-4938-b3dc-688a43d0646a", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669939, "uuid": "2326389b-1f20-42c1-9d77-62b7124e7872", "value": "3072:7mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:qLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618669939, "uuid": "0b9cc9a1-67f5-4a40-ba1b-c5b684eeaf2e", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618669939, "uuid": "55895bc3-2058-4544-b288-6944071d792b", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669939, "uuid": "7435d648-2798-47e1-a398-755a894051ea", "value": "5b708d070b5bc0c31cada9ef9c31b5225892d5efcb28afd53d31f0c49c777f27", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "171f1744-9f10-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618617702, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618617702, "uuid": "e0ca7792-c291-4ff8-b83f-4585ea8de0bf", "comment": "Malware payload (Dridex)", "value": "5a40dcef1970ff6c54a9484813900186", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618617702, "uuid": "7b0e66e2-87ce-4ff8-9032-f1980e9450a6", "comment": "Malware payload (Dridex)", "value": "5b721d4f4e5fd3e45be7afa13287aa200893523b9de9414fa5d04fc7b6f1e760", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618617702, "uuid": "e8c307d6-b979-4851-88c4-9a3400ebc1a7", "comment": "Malware payload (Dridex)", "value": "aaf4f5b05883e8b46e0284b025e8f170bcab6ea2", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618617702, "uuid": "dfaf1c6e-d055-4923-b186-f71651be52de", "comment": "Malware payload (Dridex)", "value": "250d658ea8a8fcc4fb51dd844351042bf9ee92ff0f33be656cb642806bd907482f3687eddfed64514238376321cec5b5", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618617702, "uuid": "a4674828-25cd-4b79-a7e1-561dfba8ed69", "value": "8DF3D088CBB3E4E6EFB3D37966F85E1B461174551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618617702, "uuid": "3c44fc23-3181-4543-9f47-39ff2f329dcb", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618617702, "uuid": "2f16686d-f804-4ff5-94ea-af8c7ccc6ef5", "value": "3072:RmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:gLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618617702, "uuid": "f01e2bfb-043a-4cd5-91b6-bd19f10bb185", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618617702, "uuid": "9e0b8287-5bf1-4689-8f8b-28256f2c058f", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618617702, "uuid": "c99afe57-6570-4de1-b190-401206e24cbe", "value": "5b721d4f4e5fd3e45be7afa13287aa200893523b9de9414fa5d04fc7b6f1e760", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "242070b1-9f37-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618634474, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634474, "uuid": "7ad2874d-f622-4e76-b98f-c0522a236c8b", "comment": "Malware payload (Dridex)", "value": "ccd99f787ca70a84516c8401e70c4d6a", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634474, "uuid": "a71b1916-12c3-4390-8451-f530f9b35a3e", "comment": "Malware payload (Dridex)", "value": "5bd25459fee2b61ad40e52a491c04cd22675ca7a980c0d4f135b3bccacab70f8", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634474, "uuid": "28333e49-58b1-4ecf-862f-b4d286016b7d", "comment": "Malware payload (Dridex)", "value": "65e8015610ab69bda645fc1d0ef27726f2d07b6b", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634474, "uuid": "6e5422ba-805b-4524-9c28-844ce0badaa9", "comment": "Malware payload (Dridex)", "value": "4b43a0f53a2f65718b4cb3d5ef6547b6ba2924c2ad79290543a1e9dad516b97347b0dccca504a3d0f088e1d4f6ed79e2", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634474, "uuid": "6b2578e5-93e0-48a7-8da7-dd59e967d9b8", "value": "3AF3D088CBB3E4E6EFB3D37866F85E1B461574551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634474, "uuid": "8dd51701-5023-4c58-abed-8ad771d02934", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634474, "uuid": "7cbc6112-1e62-4867-8a67-b312a02faa39", "value": "3072:QmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:5Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618634474, "uuid": "3dfe501b-e49a-47f9-b920-aa6c403db68e", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618634474, "uuid": "8b8e0d2b-5d19-4a84-a94b-41fb620498a2", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634474, "uuid": "2e8e0f28-8218-4144-88e8-c32ed64d5752", "value": "5bd25459fee2b61ad40e52a491c04cd22675ca7a980c0d4f135b3bccacab70f8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf0461d2-9f5b-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618650222, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618650222, "uuid": "53eee009-cb16-492f-9d5a-4f4274d33747", "comment": "Malware payload (Dridex)", "value": "84fee21ddb11c7e59b2ddcce05f84964", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618650222, "uuid": "d0f53f1b-c49b-4e49-a47e-e8884b2b8079", "comment": "Malware payload (Dridex)", "value": "5beb8bd30feddd9b4dbb655a3af89f416ba3b8a2f52df5a0ba78d2df98cc47ea", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618650222, "uuid": "d8bb421b-95dc-4505-bf95-b8c47f3d1f04", "comment": "Malware payload (Dridex)", "value": "dd5e52716a1c5b685c1c64c4e1f38385210a4d49", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618650222, "uuid": "4016bead-4668-4b58-a4db-02bb97657016", "comment": "Malware payload (Dridex)", "value": "b4b3a4b5aa5016cbece05da43a531d97d894c5b4e690c2fbceecb1422cef235494ba122a1287fcbb80a6b2b2f1e759bc", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618650222, "uuid": "fdc06674-8c0c-46b9-8808-f6d5444dd651", "value": "23F3D088CBB3E4E6EFB3D37866F85E1B461174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618650222, "uuid": "8d8625f7-6a10-47e9-88c1-69af91321ca5", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618650222, "uuid": "e3456c83-17c0-49f3-9870-d7a361ac2f34", "value": "3072:emNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:vLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618650222, "uuid": "32949e2d-786f-4cc9-be36-b7c2d9f55e74", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618650222, "uuid": "93943317-e52d-4d92-81ff-1e4c47d9d097", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618650222, "uuid": "1956e4b3-7bf3-4e51-a1c3-53d057f42fe0", "value": "5beb8bd30feddd9b4dbb655a3af89f416ba3b8a2f52df5a0ba78d2df98cc47ea", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3409c77-9f4d-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618644190, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644190, "uuid": "773d2851-cc64-4876-8ec1-54dfc48c55f4", "comment": "Malware payload (Dridex)", "value": "135173f94a379b8bce270dc83ee543dd", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644190, "uuid": "80a60a53-22a1-4c98-bcdc-811125e32308", "comment": "Malware payload (Dridex)", "value": "5ce72d9b2060716fbfbdd8567f6a7bbd583d4d5f9e8071c647bfa9549624912a", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644190, "uuid": "fd092442-c967-4d22-803b-3ec92119da4b", "comment": "Malware payload (Dridex)", "value": "5a0e672849d9d20ce0c7d880f962a6a701940aab", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644190, "uuid": "06a8dfe9-885b-48e9-b47c-c0d0c12c5ec7", "comment": "Malware payload (Dridex)", "value": "f13b5a547626c1afd0044d14690cb21b3f1d08926fc4d75462737764d27012098f468115803ab922cdef4de7a45ce32f", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644190, "uuid": "e36b5157-7c0b-4aac-9342-fef88564c8c7", "value": "13F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644190, "uuid": "deb05c6f-835a-4dee-b168-484a2cd5d3a0", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644190, "uuid": "b8df253e-3619-428f-94b5-d1f3dc9735b5", "value": "3072:hmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:QLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618644190, "uuid": "85da47a3-9155-4699-86c3-e5eb2ba3a141", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618644190, "uuid": "f1896daf-7594-4a65-b7c3-f987721c9dbd", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644190, "uuid": "513e2f56-c94a-46a9-9b4a-655c04b8669a", "value": "5ce72d9b2060716fbfbdd8567f6a7bbd583d4d5f9e8071c647bfa9549624912a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d7fc82a8-9f22-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618625756, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618625756, "uuid": "a79a83f7-49f3-4979-82ec-b4121a829c81", "comment": "Malware payload (Dridex)", "value": "7119412039931ae6242d34cd2e99a834", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618625756, "uuid": "96a341ce-8b6c-48b2-8ec4-501019e686ea", "comment": "Malware payload (Dridex)", "value": "5d70e84f06414629d95ab03355eb2e0a4099d26893e455a7d644a273e1706c66", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618625756, "uuid": "1240b3df-8682-4c85-ada9-f5ef25ca26fb", "comment": "Malware payload (Dridex)", "value": "fb85949e71c509cce82e7b536bfb75f2937dc318", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618625756, "uuid": "d1f155f0-07c1-42d0-b5ba-379f1ac779e2", "comment": "Malware payload (Dridex)", "value": "48fbf9817712bd226042a791bdd8e54955684248f4191b23449a9859d19629bc64f5567fb0e8780c31d2a1aca6bd2e6a", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618625756, "uuid": "518673ec-a349-4504-bc85-424e8a52f1fd", "value": "D9F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618625756, "uuid": "a386133f-2932-48f5-8056-81f2c11b77e7", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618625756, "uuid": "18eca89e-5f00-4eec-8f89-ae2850235dd6", "value": "3072:smNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:1Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618625756, "uuid": "c3761637-ac60-4ab6-86c1-9f28647ae762", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618625756, "uuid": "8dd0b960-7ac6-4383-8c67-46d08afebe3b", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618625756, "uuid": "a9382809-2b1e-4324-9fae-88693cbc6cab", "value": "5d70e84f06414629d95ab03355eb2e0a4099d26893e455a7d644a273e1706c66", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f40097ed-9fa9-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618683785, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683785, "uuid": "2939b32a-5644-44de-8571-95893564db66", "comment": "Malware payload", "value": "f04972ad4d4316bf4868f3ad1fb41ac5", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683785, "uuid": "0b0e53b6-567a-4701-acf9-04f50d769a7f", "comment": "Malware payload", "value": "5d9f236658d562170c20d469a0e15dc9279b43068cd668b4c7174e2baf4bae34", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683785, "uuid": "1a05018b-9a9c-4a16-bfcd-2eb75f723211", "comment": "Malware payload", "value": "213cc35d7ab6292e87212d64cd8b87b2f05b7ca5", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683785, "uuid": "a3f5f30a-ed7b-4225-aa5a-27e4fb6d2cce", "comment": "Malware payload", "value": "c6c2500fced07392b838d28dd3a5db822bf0d6ba54b106562ad240ba67b2d65738252fd6610508d6f441bba0db1ff76a", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683785, "uuid": "5b53c727-186d-4552-9648-909d9ebde8a1", "value": "43F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683785, "uuid": "bdbb93e4-64c2-4f22-986a-5e22d421ab0b", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683785, "uuid": "a4a21f46-c5de-4b3e-8043-8ee263ad9115", "value": "3072:alpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:alo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618683785, "uuid": "c2e27568-ada3-4966-9c4a-abcc2f90e26d", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618683785, "uuid": "0ba62685-2325-48a7-9175-cee9c8da75cb", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683785, "uuid": "76ba7547-8804-4579-b37e-bb0359677f5e", "value": "5d9f236658d562170c20d469a0e15dc9279b43068cd668b4c7174e2baf4bae34", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "713c7379-9f99-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618676694, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676694, "uuid": "4c95e0da-7c7b-4d04-95ff-57c1365312b4", "comment": "Malware payload", "value": "e55dbb278d421b15efc69d22e4493510", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676694, "uuid": "ad1641d9-31bd-407d-9d9e-724558db8cc4", "comment": "Malware payload", "value": "5dab243c54c304e19cdd2d6fbeb2460c23f52c5f4d25cefa3ba9ed690b61d6bd", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676694, "uuid": "d3617d51-46d7-4edd-af02-f18b6f40b1ff", "comment": "Malware payload", "value": "5f4a2a16078e8c8a23425612afbd138c89a4d082", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676694, "uuid": "c12d4ed9-80ba-4a3b-bdea-0cbb74550da0", "comment": "Malware payload", "value": "2ba654a055c8750701d32e665ad8f10e8766f47e1fb949e3880397c5fb2dbe928ed3f804b0cc0348f480bd9a432ef409", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676694, "uuid": "a2a3c8b6-1dbf-4517-9191-fbdf16a52a08", "value": "82F3D088CBB3E4E6EFB3D37866F85E1B461574551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676694, "uuid": "7039d689-1d7f-4770-99e1-48b38ad20304", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676694, "uuid": "f97417ea-ec7f-46d7-b434-9b9654af396a", "value": "3072:wmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ZLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618676694, "uuid": "1be444a1-3bd9-40fe-a3ab-0a6c99ae5865", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618676694, "uuid": "dec3f50e-1665-4b6c-a4fc-cdce65d02e93", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676694, "uuid": "c023d37c-5fc9-4528-b3cf-500380d0da74", "value": "5dab243c54c304e19cdd2d6fbeb2460c23f52c5f4d25cefa3ba9ed690b61d6bd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "696cc7cf-9fa3-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618680976, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680976, "uuid": "c2e1b19a-0aba-46d5-97d3-8a486bc75ce1", "comment": "Malware payload", "value": "85c10d0da02b5d00b262b0694e62a0b5", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680976, "uuid": "a83f5249-0efe-480b-8ec5-299d897e84b5", "comment": "Malware payload", "value": "5db9f25e992957a28f32d4913bb59a8583362d45af2e75a4a20ebca8bd852430", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680976, "uuid": "639fe2a9-279a-42bc-8647-2518940117e6", "comment": "Malware payload", "value": "48fd6cbe5f16e6228af45b5b003a8729a6afa2e1", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680976, "uuid": "fb4cc903-764e-4a18-9216-1242c5a25a6d", "comment": "Malware payload", "value": "76ad3326b597893ebc84573bc125fd77b6b239600607ec352baabf2236770951b64623cf3e1c373eb24d653f9d504b45", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680976, "uuid": "ed5d973d-3f6a-4118-a0ce-7e0d9e8f005b", "value": "A9F3E00AED9FE988E84C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680976, "uuid": "ba78db18-e33a-4201-a7a3-aa67da8aa22c", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680976, "uuid": "8aa2ee3b-c54a-4e2c-bdf2-9270355e06b0", "value": "3072:EiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:HeAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618680976, "uuid": "8f6e22a4-dd6a-4593-9bdc-d948d83ec1bc", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618680976, "uuid": "84350434-34a0-490f-9ebc-c524dd6693b0", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680976, "uuid": "1d93938f-743a-4981-a1b8-de0d567b0920", "value": "5db9f25e992957a28f32d4913bb59a8583362d45af2e75a4a20ebca8bd852430", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b470d66f-9f89-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618669935, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669935, "uuid": "32bd9947-188a-4e0c-8225-08f886647cf8", "comment": "Malware payload", "value": "e8cbf193ceff21e1ac7e52ae48ce8746", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669935, "uuid": "ff4cf270-2224-40cb-a213-2b624977f440", "comment": "Malware payload", "value": "5e5513b9d3bd629fb4b03e797bf8ad4e39b732e6e00281ea8e1beba09a8a6a15", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669935, "uuid": "2ff810f4-5178-4daa-b695-616b0640028c", "comment": "Malware payload", "value": "de4397fb8ffe31b47c8754fa1ec2890e9e4b6bea", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669935, "uuid": "e179c0ff-771c-4c40-981d-4e1b02825fbf", "comment": "Malware payload", "value": "3d492f1257d0c3b389086b672e43544bd60958080dd3ce24b82d1b096073e9d61946d9ee98b43edb63838e2940354ef1", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669935, "uuid": "0dce1fea-c8c9-4321-ba59-31924464891b", "value": "8CF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669935, "uuid": "ec342650-a373-44af-af74-4d320c980a99", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669935, "uuid": "4a5adb46-f0e4-4fcc-b0f2-6574bfc66c6b", "value": "3072:tmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:MLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618669935, "uuid": "bbff67ef-f869-4d2d-a382-6ddf649adb43", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618669935, "uuid": "b2f44bc6-281b-4613-9504-e3c893a402cd", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669935, "uuid": "e720aa51-386e-4e5c-ad13-435fdf8e0eb0", "value": "5e5513b9d3bd629fb4b03e797bf8ad4e39b732e6e00281ea8e1beba09a8a6a15", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a86c43c5-9f90-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618672921, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672921, "uuid": "045bdcdc-57ae-4df0-b4af-96022cbf5e6f", "comment": "Malware payload", "value": "7a503a1be99d75352179aba968d54f61", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672921, "uuid": "ca5c1495-51ac-446c-b012-9a215763a176", "comment": "Malware payload", "value": "5e61833649e41461d370d24edc175b22843fecb3c0dff67c590e6ee7338e6d03", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672921, "uuid": "e40526fb-9ea9-4879-8f54-4dcfb64cd2b2", "comment": "Malware payload", "value": "7dc987c1549a7b874545740549631e046c5d1877", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672921, "uuid": "b14fbf0a-fbde-4969-b3a0-4a9a42fb16ba", "comment": "Malware payload", "value": "46ee269cede8bd35b7cedb78fc1fb1dac7f3e0bf060b1eb31160a443b0cdae1e9bb1fd47e1676e0ca8f563e451376f70", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672921, "uuid": "980ba179-5453-410f-b0a1-bb52b049f34b", "value": "C6F3D088CBB3E4E6EFB3D37866F85E1B561574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672921, "uuid": "f48dc26e-516e-462e-af24-708c9c564378", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672921, "uuid": "cdd4b232-2677-41f2-8801-8e94d7d2af4f", "value": "3072:amNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:LLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618672921, "uuid": "59c7452b-7a57-43c5-a5c8-ba1121f143a6", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618672921, "uuid": "d85114f0-dc5f-4e6e-a5c3-a6a2337175bb", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672921, "uuid": "99a42bb3-9d06-4811-9c43-7d505601d785", "value": "5e61833649e41461d370d24edc175b22843fecb3c0dff67c590e6ee7338e6d03", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fefbf209-9f56-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618648155, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648155, "uuid": "c0b3f6d4-0b8c-40bd-91e6-7a1ae54a380b", "comment": "Malware payload (Dridex)", "value": "ec3ece5f9696cc3cc48054006dee585d", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648155, "uuid": "f3534069-e90e-407c-9359-dddd697ea774", "comment": "Malware payload (Dridex)", "value": "5e85308c37ecc8ea2309573897f52c64892a51a97236d24ea72d3a99dc5453b1", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648155, "uuid": "96f8fb0c-181d-4930-9331-afc56cdbfece", "comment": "Malware payload (Dridex)", "value": "67831e1d4cb334312b43a55e224dd29b9e3fe8c5", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648155, "uuid": "afdbd215-773f-4fef-807e-880349f8da49", "comment": "Malware payload (Dridex)", "value": "8dedd3cb07b59b65030fbf226a9b7359c2043c32172d4aeee0f288f27a3dbb8f3ec7b4ac10bf7e21c2adc6d971043f03", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648155, "uuid": "150d037e-4011-4390-b3a8-186ca7048dbb", "value": "50F3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C5846E9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648155, "uuid": "2c9b0c03-62d2-4c45-935d-52df3cf401f4", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648155, "uuid": "6f3596dc-3268-4e77-b84b-6e258495050f", "value": "3072:GiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:9eAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618648155, "uuid": "d5821694-fbde-46f8-b58b-d4767c06ba0a", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618648155, "uuid": "72961f18-5701-4dcd-9362-0e3c28cfb30d", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648155, "uuid": "e4d6011f-99f4-4eff-a5d3-a4a02b9ae4cb", "value": "5e85308c37ecc8ea2309573897f52c64892a51a97236d24ea72d3a99dc5453b1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e7e27eaa-9f95-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618675175, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618675175, "uuid": "7f60120f-35e0-4c52-8d17-2f07b77a67c6", "comment": "Malware payload", "value": "2097606009228e30fa7a39d4626dc7bd", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618675175, "uuid": "21c4cb3d-5599-4272-a1cd-960320da0f0d", "comment": "Malware payload", "value": "5e8537cc737960e5f8d907251e4697161fb17140fab80d017e620c0445fde0fb", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618675175, "uuid": "782f5ce6-9976-439f-a244-d9fa92a4244a", "comment": "Malware payload", "value": "f36abfaece00eb62a8345dc3a57b16fe7b1c3ec1", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618675175, "uuid": "a059bee9-f262-400d-ac8c-a4c1d2a1f92f", "comment": "Malware payload", "value": "d07d7a4491d11eb02614a284bfc0d92a8e96625c604cf942acd935a31f316b4b1be56af2180a7a4beb38ef6e76421d46", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618675175, "uuid": "054f3dba-938e-4b53-89ed-343480e552b8", "value": "D3F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618675175, "uuid": "8b964007-1f0a-4ddc-9042-574ace085ae1", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618675175, "uuid": "d1df40e5-de0e-40c8-ac13-47a481389645", "value": "3072:OmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:/Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618675175, "uuid": "e80e52ef-d0cd-4ddd-a9a2-118617aaf690", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618675175, "uuid": "f989f3da-63b1-4d39-89d8-6b8257224070", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618675175, "uuid": "811f0379-8990-4490-87e4-3a0ea905afba", "value": "5e8537cc737960e5f8d907251e4697161fb17140fab80d017e620c0445fde0fb", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5300ce0b-9fbb-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618691246, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691246, "uuid": "82d54b6d-d34b-41f1-8491-7ad8da6e9cd6", "comment": "Malware payload", "value": "a64539272f5ef48b7f333a8d6529e43a", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691246, "uuid": "39bfa635-278e-4de0-a7f5-62c863533d3a", "comment": "Malware payload", "value": "5ff767d4da98b2cb31badba2b7694db8385fe54ea1b46ebe04011122b6180fad", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691246, "uuid": "4c3d2d1b-0dbf-49da-8520-e24ddb3266ae", "comment": "Malware payload", "value": "cde31795616d38cb5407e440f22bce34383ecb49", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691246, "uuid": "ff28e8fb-564b-412f-9106-730e28e3326b", "comment": "Malware payload", "value": "af43f5dfe27820dac0ce1686a114605fdce8a63c2ca189a2a0a416118a18b4a7461390bacf5a9e8553f95f550b2b1308", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691246, "uuid": "4b812bd0-b95d-4d0b-990b-a721888d7a2f", "value": "ABF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691246, "uuid": "877132ca-6f98-4da6-94b0-df01e808f19f", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691246, "uuid": "0095dae9-4634-45e4-984f-25d082a5d473", "value": "3072:slpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:slo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618691246, "uuid": "f6c3ac96-4247-4d33-bb48-149dfd226212", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618691246, "uuid": "f1fa2d69-717c-4d69-8fcf-b5039e4c0ddf", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691246, "uuid": "b06c6792-6c04-449f-9aac-c00a360829a1", "value": "5ff767d4da98b2cb31badba2b7694db8385fe54ea1b46ebe04011122b6180fad", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a383519-9f46-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618640980, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618640980, "uuid": "acdfd5fe-20d6-4692-81f9-c73332bbe604", "comment": "Malware payload (Dridex)", "value": "288481aaba2e6e117fafadec998c5498", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618640980, "uuid": "ac9264b2-38af-4b56-8e53-03b6d5805825", "comment": "Malware payload (Dridex)", "value": "6030d612ba6015cf041a6707bd8203a11176ed53d0df300b9d1ef79459fe58af", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618640980, "uuid": "47a84bdd-9784-400c-9ce5-bdafeeeae268", "comment": "Malware payload (Dridex)", "value": "3c911508f3c29a46f73fbc2b9a5a3c2d48c6c713", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618640980, "uuid": "e39266b2-d4e8-49ef-9a8d-fd0e411fdadb", "comment": "Malware payload (Dridex)", "value": "0edaae722000bdb7e9e6a807eb9fe142060699d90fcffaa9ec6614f0ac64e842dfcc09c4c552fb3436c11deef3ba2839", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618640980, "uuid": "1552045f-4b38-42b6-b008-c6516db60f16", "value": "31F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618640980, "uuid": "b95c7a17-34a5-4589-89fa-fd6abff8b2aa", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618640980, "uuid": "a3d036b7-8284-424e-9778-ea18a222d18c", "value": "3072:imNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:zLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618640980, "uuid": "0781ba7e-d059-48a5-859e-4367960ba050", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618640980, "uuid": "82d50468-e059-469d-8268-771ea4656fe5", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618640980, "uuid": "aa62e36b-36e1-4530-b843-e5fa43e12edb", "value": "6030d612ba6015cf041a6707bd8203a11176ed53d0df300b9d1ef79459fe58af", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8cc587fa-9fc3-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618694779, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694779, "uuid": "d1db738b-292f-47ad-b054-b75f59813c0b", "comment": "Malware payload", "value": "d60bf16e04a43dd58c498699b86ff939", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694779, "uuid": "b929ce7a-dfe1-4aaf-beea-075765a952dd", "comment": "Malware payload", "value": "6039a6f987d5324e7afac4107356a5bb6501b692b8fee5efd3a33762d25b4b22", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694779, "uuid": "0711fe45-72a5-40c2-81d3-375dde5eac93", "comment": "Malware payload", "value": "a0abafb442a170e90a990e0a5a82aff40bc309de", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694779, "uuid": "68eab95e-5bf8-4f36-9b60-dd6c3df01731", "comment": "Malware payload", "value": "8b8c81bf513d3ee48e647439b7539e447db761c032e14de009a76c8d69a431e201238e9f4a6d369b47e700bad35a015b", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694779, "uuid": "4487c9b7-3241-4a29-a9e1-77aecf6eba6e", "value": "EAF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694779, "uuid": "a4ce3833-9002-47ba-9122-786dd95dc027", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694779, "uuid": "2a32a083-98d7-45e0-ac0b-7266e633305c", "value": "3072:AmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:JLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618694779, "uuid": "384c5728-e90f-4cd2-bcb2-94b2ad3b5924", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618694779, "uuid": "c6ff7213-66ef-4b15-9b19-bf8348607799", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694779, "uuid": "f9bccf64-5feb-4ec2-ab02-b681a5223d06", "value": "6039a6f987d5324e7afac4107356a5bb6501b692b8fee5efd3a33762d25b4b22", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c19a0ae1-9f23-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618626148, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626148, "uuid": "7348d707-7ef2-470e-abad-c656e7ccd35f", "comment": "Malware payload (Dridex)", "value": "07b65cf3c11cda2f75bda5c75676dbdb", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626148, "uuid": "54106549-735c-41e1-bbef-bfe16e231d3d", "comment": "Malware payload (Dridex)", "value": "6124093f4446b4395bab7ca9b8ed68dbbfb82ebb7a4fd4076e3409d80407f9ad", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626148, "uuid": "b6678b6b-cb91-486a-990e-717b88c5d9a2", "comment": "Malware payload (Dridex)", "value": "ec8949bb08cf23f98ac85ee3049b5b6bea39201b", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626148, "uuid": "dbfc1b08-ef6a-491f-b87e-0095dabbea0e", "comment": "Malware payload (Dridex)", "value": "67252d745ba77e692b7bdae28d0abfe4cca814e108822bd4666b1a903c9b3219031b05559ad5afeb4c4e76cab5c4f391", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626148, "uuid": "028fb40a-87cb-41f5-a96a-fe7b52216241", "value": "F9F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626148, "uuid": "344670f8-9c30-4991-8b67-87a52738a5bc", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626148, "uuid": "405bfcaa-7f67-40f5-98bf-1bf127a00935", "value": "3072:lmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:kLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618626148, "uuid": "58357651-38d7-4837-8b3e-823841c31e28", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618626148, "uuid": "523a1534-6036-4a28-aa76-34865a8c8e27", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626148, "uuid": "84580a33-c10f-4abb-b15a-d6fa574ead36", "value": "6124093f4446b4395bab7ca9b8ed68dbbfb82ebb7a4fd4076e3409d80407f9ad", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c3ed314-9f44-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618640259, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618640259, "uuid": "fda61129-08b5-4b09-821a-705c963cc0b5", "comment": "Malware payload (Dridex)", "value": "2a0b192171c7afaed7bb5abdaf52f105", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618640259, "uuid": "1365b769-865a-490e-8624-f0cae54b0186", "comment": "Malware payload (Dridex)", "value": "6185527595ecbcd7ae063035dfdde5cf0b40371b6a9cd899fc3f1a3184a70a27", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618640259, "uuid": "df462fa0-ab53-495e-8bcd-208f288ee06e", "comment": "Malware payload (Dridex)", "value": "2c8145befc972dd2ae5445c5e66525199e03e036", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618640259, "uuid": "4bc144b6-e585-4d32-9c9d-b8e1d93ec669", "comment": "Malware payload (Dridex)", "value": "c1f2a77e26cbdf60641d00326bf6f62262a7d336617b477d7d3ceb6ee5791ee6c90ce1e572dc943dfcbf1fa9880e22c6", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618640259, "uuid": "8f173e29-bf60-445b-9f54-590da7211c94", "value": "4BF3D088CBB3E4E6EFB3D37866F85E1B561174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618640259, "uuid": "b66036e4-b25d-4a39-9790-3634c29f336b", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618640259, "uuid": "a0b33055-0c82-403b-bb8f-05387f05b6bf", "value": "3072:amNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:LLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618640259, "uuid": "24a553ca-f79c-4ff3-b0dc-fcc0a4f45493", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618640259, "uuid": "6de3b9b0-b60c-41b9-b12c-c00ad2ab4108", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618640259, "uuid": "ee8bb468-3aa5-4e63-bd68-4be1dd916e28", "value": "6185527595ecbcd7ae063035dfdde5cf0b40371b6a9cd899fc3f1a3184a70a27", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d86994f4-9f49-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618642507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618642507, "uuid": "78c57e12-a053-4bff-9f23-1ee16de7c4b7", "comment": "Malware payload (Dridex)", "value": "36f2d63010ef5cbac108f3ea64b50f9a", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618642507, "uuid": "8ad9514b-cf46-401d-8259-e7243d0036c5", "comment": "Malware payload (Dridex)", "value": "6197d2ebf8c0a46c262d70aa1b60a1e5c4dc36d5f314982396f217778bc86580", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618642507, "uuid": "b6a2b00a-2c5f-425e-b945-93b69379df2b", "comment": "Malware payload (Dridex)", "value": "19f85adeaa26353f6dfeb99c9ab0fbe6b8827c32", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618642507, "uuid": "10179fac-bf97-42b5-9ab9-0aa3576e1e73", "comment": "Malware payload (Dridex)", "value": "74e87e4af1ab63ecd6a2d0790a15764d4cd558d6bff49109554e2e89fa1874fd9b84ebff8c379262344fa09d77e3461f", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618642507, "uuid": "77320ce2-4668-4f1a-9e14-5d33c5dcb4a7", "value": "5DF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618642507, "uuid": "645087b2-f858-41c7-8a14-e926f12d5d83", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618642507, "uuid": "fb17db4b-b986-4834-bb91-ee6685010f3a", "value": "3072:WmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:HLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618642507, "uuid": "cfafdd87-ec45-4803-b128-c0a60ddb214c", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618642507, "uuid": "cf10a407-2811-40df-ae46-9ecc644a1a43", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618642507, "uuid": "884dca90-c666-4312-ae7b-14d236647e50", "value": "6197d2ebf8c0a46c262d70aa1b60a1e5c4dc36d5f314982396f217778bc86580", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d2a91e5-9f33-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618632932, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618632932, "uuid": "b60b3034-cadf-42db-ac7e-4995bc6037de", "comment": "Malware payload (Dridex)", "value": "01adf7bf59b87ba06b9998c224e4395a", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618632932, "uuid": "d916c5b9-ad7a-4076-945d-e44aae2e2715", "comment": "Malware payload (Dridex)", "value": "61f51eb1f9955674ef95fda759e35418aeeecc65d0c29663b1d2874f9e9a50a9", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618632932, "uuid": "6f0c39d3-8b01-4f93-ab32-b7abbbef35e8", "comment": "Malware payload (Dridex)", "value": "4ea4c7593deafdfa47a5e263daabcf5d1bf72865", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618632932, "uuid": "220849cd-339f-4fc2-b14c-5a9091389c8b", "comment": "Malware payload (Dridex)", "value": "b3b8bc70aed1c2f6f3316f90c2a7de6e954201d1d7f21ecd32738bef72d03fae71829cff9ce640de5057d557886ac18c", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618632932, "uuid": "00abe602-c9df-49ce-b6f4-fcb22de45cc5", "value": "33F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618632932, "uuid": "c507090f-51f5-40bb-b4ef-13ec32f389d4", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618632932, "uuid": "01e5cc69-60b6-4aff-824f-6d76187e15b5", "value": "3072:jlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:jlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618632932, "uuid": "45c0d623-7dc1-489f-9c48-75e0a715c404", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618632932, "uuid": "5a493547-fed0-48ea-b09a-3b33964df65f", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618632932, "uuid": "f5cd24d4-10d4-479d-b7f8-30a063013673", "value": "61f51eb1f9955674ef95fda759e35418aeeecc65d0c29663b1d2874f9e9a50a9", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5fce488b-9f9a-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618677094, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677094, "uuid": "7df9a641-ace0-4cf6-a6b7-538b6c75b76b", "comment": "Malware payload", "value": "48f16c96a2586cdaa42dd2b5e4735c95", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677094, "uuid": "76384155-d35c-4a71-ac6b-4991e108d19f", "comment": "Malware payload", "value": "62037e60519e48ef11aa06af75212ef5ccc5a91965b538d5be034a24c3191dee", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677094, "uuid": "e626ba97-5821-4dd4-8c6c-a4a466481574", "comment": "Malware payload", "value": "35acca97dffa5b169e80b2f09a832d273ca3e437", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677094, "uuid": "60cb3198-d1dd-4014-8a5b-7ba5d485ee6e", "comment": "Malware payload", "value": "996c07b33761dc732d20263c300182d3fc0a77d32ec178b39512a7ef03fafff7d025cb5ed2b0f148ccc334e8a22690af", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677094, "uuid": "61dc440e-c383-4cd4-b7fc-75ce23e74261", "value": "8AF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677094, "uuid": "28597206-a315-477c-a72b-559921567573", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677094, "uuid": "478772af-4efa-4050-9d47-01b75256976d", "value": "3072:jmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:SLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618677094, "uuid": "863f35be-5f15-44db-ad44-d8a8fd50f15b", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618677094, "uuid": "a678b6fd-62e5-4350-bc82-08160337b2d0", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677094, "uuid": "ed72e050-82c8-445b-9a10-40d1cb4f2487", "value": "62037e60519e48ef11aa06af75212ef5ccc5a91965b538d5be034a24c3191dee", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88474ab5-9f25-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618626911, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626911, "uuid": "d6aa5c96-d32f-4405-91a4-e6ccddfba35f", "comment": "Malware payload (Dridex)", "value": "d33c266785ff469bb98974b696aa4937", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626911, "uuid": "e1644f1b-451e-480a-be4a-e7042304da12", "comment": "Malware payload (Dridex)", "value": "62812bf467be60e4e26c53293746afb0c2e4f29f6fcfc023dd1fd209cd7a9d5f", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626911, "uuid": "7359e8c4-f5fe-4caf-b854-f2c5c8c5ef0a", "comment": "Malware payload (Dridex)", "value": "1237802b1828f38f440391ac6cc91c9669baa560", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626911, "uuid": "abc4818c-7875-45df-908e-fd46b1306515", "comment": "Malware payload (Dridex)", "value": "083d8211a677c860e38baa2e0a86eec4ffb18d4b071b44c9336b72392aab4b488491459b22039e7000faf7097999163e", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626911, "uuid": "911b9b8a-d3b6-4b5a-9faf-35546d34b023", "value": "14F3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B496B1FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626911, "uuid": "f690172e-9758-48c1-8116-749630fe9abf", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626911, "uuid": "8056693e-4ef2-4d2c-9c2b-318d7483cb95", "value": "3072:NA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:N3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618626911, "uuid": "96c2de13-a94e-4e3e-8a7e-6639819f7bf3", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618626911, "uuid": "d40a100a-0929-4b28-98c6-cd1bdca4ff2a", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626911, "uuid": "6caa16d9-963d-40a8-8abf-353eb965d8fe", "value": "62812bf467be60e4e26c53293746afb0c2e4f29f6fcfc023dd1fd209cd7a9d5f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9861df59-9f92-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618673753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673753, "uuid": "de4f326d-9099-49d7-af82-6c83b0150998", "comment": "Malware payload", "value": "0caa560d57ff01738fa17e6f4cda00b8", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673753, "uuid": "90b52afe-f3f4-46a9-8965-220dcc03a753", "comment": "Malware payload", "value": "62d9a5ac5f33cfc7f87e11524c9414a4b1bfe8193473ca774b67db5dc726054c", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673753, "uuid": "67e49b17-6529-46f6-8569-f176f0819d99", "comment": "Malware payload", "value": "a4135b335c2ddb7d75a3320fe19354e865ed64d1", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673753, "uuid": "ef0ebb63-b080-4166-9446-d4a233b6c608", "comment": "Malware payload", "value": "6548425c899ac08e8d36738bf849a9c2964ca48bb6ea74f56844a5835face4aa6d8f9f180f242e0a84bda8ea0fb22aa9", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673753, "uuid": "e60eefff-dd84-4218-86e2-a138ee38a9bb", "value": "22F3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673753, "uuid": "fe80e5ac-52b3-4028-a453-972a0da4bcf7", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673753, "uuid": "d8e99e05-02b7-4856-8b71-569ae4b020ac", "value": "3072:oiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:zeAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618673753, "uuid": "2de8c560-c8d6-4e7a-87b0-4cc66652aa96", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618673753, "uuid": "c8dcc573-13bb-40b4-a4fa-d382d6810292", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673753, "uuid": "b791a316-0c20-4327-91ce-352e8f0b0966", "value": "62d9a5ac5f33cfc7f87e11524c9414a4b1bfe8193473ca774b67db5dc726054c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f07c8f22-9f1a-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618622361, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622361, "uuid": "7fdffda4-7668-45f0-b021-1be2c5145c1e", "comment": "Malware payload (Dridex)", "value": "e357d341f5d750a9ef1bb3c038805f1a", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622361, "uuid": "d7cfc807-bd8f-4be8-829f-223e700e55aa", "comment": "Malware payload (Dridex)", "value": "63ea19367214eae1c02356d7dcbdb230c929e44bed89818fa0f962ca2e5dce80", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622361, "uuid": "936ace5d-e2cb-4434-bb55-f23d188ed395", "comment": "Malware payload (Dridex)", "value": "439ad68a2129f6dbd54329fd9d8eb4e22edd53af", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622361, "uuid": "cfc974b1-b593-436d-a3f8-17918e44c8d7", "comment": "Malware payload (Dridex)", "value": "ff5f7720b9184a03e7da9269c58b2266e19d73ba9c77638ce892d45f1a390674d55f1b78d680202e2436218eb31df595", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622361, "uuid": "ee8e341d-c7a8-4ebe-9283-c1587ce65b8e", "value": "64F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622361, "uuid": "0c5d145d-7828-4d34-81a3-41fa7a1a8fbb", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622361, "uuid": "ef2640c1-cfee-4992-a0b4-2ae102721961", "value": "3072:kmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:tLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618622361, "uuid": "aeb5294c-78fb-4e22-87e6-231761a6b8a0", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618622361, "uuid": "1f5cad47-e01b-439d-b822-d0057e03ee7b", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622361, "uuid": "74b5775e-aff3-4d4a-950f-8c15dff39880", "value": "63ea19367214eae1c02356d7dcbdb230c929e44bed89818fa0f962ca2e5dce80", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c8db973-9fd7-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618703234, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618703234, "uuid": "5016de17-00fd-405b-bce5-4ccb763bd736", "comment": "Malware payload", "value": "f47d6025f1bd36f098c4ca792b1a1f8a", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618703234, "uuid": "33f61584-340e-4283-85e9-1befc6b36877", "comment": "Malware payload", "value": "643c55a266242b69260c2c334040496741fcd0614be65fc1c3e19924df778a87", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618703234, "uuid": "a879747f-77b6-4f8f-9225-282b26c847ec", "comment": "Malware payload", "value": "eee2a3bddeeda1c76597251ff6a4bc58644fe726", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618703234, "uuid": "bd04b981-1135-4a58-ace4-08e300d0b1fa", "comment": "Malware payload", "value": "e2d740853a88def57cbf8a0b345e3e775513692f5b9c21988feed173f7194b85ad9c716c62794aadf7d7a2e6ddc6fd24", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618703234, "uuid": "8f49cea9-8eab-49e8-a954-4eafc0f00067", "value": "CCF3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618703234, "uuid": "6b14b031-7e0b-412f-8e6c-531fa70ccb45", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618703234, "uuid": "edda65df-acb4-4e0f-a784-c8ba5af589e6", "value": "3072:DmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:yLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618703234, "uuid": "d3cd8643-ca8d-4247-9478-94197f5f72dd", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618703234, "uuid": "08a20fd8-e1ee-4e91-a6a0-30fd41817bdf", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618703234, "uuid": "4389d09d-5ebd-42a4-b7cb-589d4f94042a", "value": "643c55a266242b69260c2c334040496741fcd0614be65fc1c3e19924df778a87", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "faeb6092-9fc2-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618694534, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694534, "uuid": "da23ec9f-7ce4-42c6-b799-8cf4db1c4340", "comment": "Malware payload", "value": "34cd06e67def1397aee560b05780f379", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694534, "uuid": "df8d00c5-47d2-4536-bbd0-f690c57ecc5d", "comment": "Malware payload", "value": "645308b17644a97c7ffbaea98995a4fd18929873673d4d2b2088238e036b41eb", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694534, "uuid": "b75e69c3-2a0d-40fb-ba2e-fbbe7f9dee7b", "comment": "Malware payload", "value": "907d90240a586e6baaeb6888313a18919feac7f1", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694534, "uuid": "d229a2ff-fdbe-44fc-8c8f-2318d6152c0e", "comment": "Malware payload", "value": "bd5a34acf79de829e2f90b2732be83b48010a1ee0f2426a13ce2d5b4c71f6ba32522980762b26a73055354e509682d01", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694534, "uuid": "1e1d04d4-aff6-459d-9a85-964bc0994c1c", "value": "4AF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694534, "uuid": "d989940b-de7d-4032-b00c-7c5fb7ac362c", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694534, "uuid": "029a02de-de03-4359-9004-bd91fe35d4c0", "value": "3072:Mlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Mlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618694534, "uuid": "d7479e0a-9fa8-48b9-8d6c-408df36af195", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618694534, "uuid": "99f92b39-2c8f-4dc3-976d-6085cd884da0", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694534, "uuid": "de4069f8-f5f5-4241-870e-0a419945893d", "value": "645308b17644a97c7ffbaea98995a4fd18929873673d4d2b2088238e036b41eb", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "270fb342-9f92-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618673563, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673563, "uuid": "94c9e786-4dd2-474c-bb06-89bfcdc0d9aa", "comment": "Malware payload", "value": "4fc0c594fa448d2ffa4fb2a77b287a24", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673563, "uuid": "dada05a4-5600-432a-b5a2-98b074470001", "comment": "Malware payload", "value": "64a01c8736a210545fa3b9c096c6b49e8a3cc639118babc0b2e2158776702a2d", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673563, "uuid": "6203c4d8-8c0d-40b1-ba44-20a25d8631ca", "comment": "Malware payload", "value": "fd795aa873c5e661eee8a39eb108b168a9397b1a", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673563, "uuid": "db7dca33-a6ce-4a17-99d2-7b63ca078b73", "comment": "Malware payload", "value": "3cd91445fd85c9813a7c999b65def6b84a12f77819d96e610476899cee5466f4b56d44c4031750d49cab3b33252f5c65", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673563, "uuid": "e67d75e1-b611-4b84-9279-23218ab28d99", "value": "3CF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673563, "uuid": "1b33c509-bd80-40b7-a2a8-cd58ef6b3fbb", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673563, "uuid": "17dc7516-dac4-42d1-9083-0f09ca85f1f8", "value": "3072:lmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:kLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618673563, "uuid": "77ff01ea-1ef9-4bef-aa86-324dc9b4e5fd", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618673563, "uuid": "3d57a53a-8a92-42ca-b47c-1a09d650ab30", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673563, "uuid": "3e338c1f-c392-4643-8d04-d56cea839116", "value": "64a01c8736a210545fa3b9c096c6b49e8a3cc639118babc0b2e2158776702a2d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25e3ade6-9f99-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618676567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676567, "uuid": "22a2037b-2aaa-4df0-84f9-fbfffbced79f", "comment": "Malware payload", "value": "3ca67a95eda247a9b08da010b125691d", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676567, "uuid": "f9a203fe-95f3-4b3c-b714-b8ca8c4af8e7", "comment": "Malware payload", "value": "64e9813457f649f5879097bc930af403ea05f5b45edd981ccc50366e46e9092e", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676567, "uuid": "1b085715-0b53-4493-be5e-1cb89b32f422", "comment": "Malware payload", "value": "834aeabf67aca7ec113e46a383889dfd0809cd66", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676567, "uuid": "f3000533-59a4-40b3-9a7c-e984dcd52d8e", "comment": "Malware payload", "value": "abc3cc96a4d42310663f1c591405776671b6292186e6049ff7d77a70a32987dc1194b321befde665ff882b73fd3c7ab9", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676567, "uuid": "118f7384-4ce0-4bb9-8977-38941c7b52b8", "value": "9AF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676567, "uuid": "f92a2433-1d2c-4998-a386-93070a4550f7", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676567, "uuid": "b4eeb5f8-7bf3-4984-96b2-df1c120f6cd2", "value": "3072:KmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:bLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618676567, "uuid": "970fa6a7-0934-49d8-98d1-4be69f0f9d18", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618676567, "uuid": "36c03390-d4ce-4d17-9a0d-efb9ce31d8d9", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676567, "uuid": "7e8a55fd-5baa-4879-b153-72dd95023059", "value": "64e9813457f649f5879097bc930af403ea05f5b45edd981ccc50366e46e9092e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d03ed907-9f90-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618672988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672988, "uuid": "046f1e7a-c1d8-4a47-afff-4a1e03e4f549", "comment": "Malware payload", "value": "8df292bb9a3a7361b66b514a212233a9", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672988, "uuid": "aef7ee76-24fa-45af-b77c-03597a19e811", "comment": "Malware payload", "value": "654798375439f6f524bb67affb3352100ac8da03b32c1aa99fc0944e71f3586b", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672988, "uuid": "69ccd913-f298-401e-b959-f386891b1586", "comment": "Malware payload", "value": "ec5b5a3bd5a980c953b4f1f85c38562bbc90cd44", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672988, "uuid": "7c3a817a-be53-4c1f-ab1b-19de303c991b", "comment": "Malware payload", "value": "498c2af94297e14feee5f48383894b1d48f17a57a761c05456af24acc89375efc51a3604077b470ffdefbcabadb4dda8", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672988, "uuid": "9cda90a7-d18a-4489-a748-0401fd3765a0", "value": "64F3D088CBB3E4E6EFB3D37866F85E1B461174551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672988, "uuid": "b4bc5d76-3af8-44e0-85bc-4309a5f9734a", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672988, "uuid": "5e1fb474-e4a8-4479-b1e7-16fba46996ef", "value": "3072:4mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:hLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618672988, "uuid": "f86c6405-bbb5-4fe5-86ef-a69134cc5514", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618672988, "uuid": "a07b805c-f973-4e7b-9dcd-a26a1b4c1e4f", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672988, "uuid": "a46ee43d-1997-4c50-90c1-870e4637851a", "value": "654798375439f6f524bb67affb3352100ac8da03b32c1aa99fc0944e71f3586b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c3081ae-9f59-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618649090, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618649090, "uuid": "34e71228-a56e-452c-b30d-d77ebb965ef2", "comment": "Malware payload (Dridex)", "value": "6ba2edbbc16814be40dac28aca4cc30c", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618649090, "uuid": "72a51b4c-8e31-417e-81a8-5c076ac9bbcd", "comment": "Malware payload (Dridex)", "value": "6548e10439ff227668a180b73aec3ec76c8c2e6691518ad61e32977f10475bf6", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618649090, "uuid": "58b42bbd-8fa6-4b5f-a26a-f761f4ace242", "comment": "Malware payload (Dridex)", "value": "54d1ef77212cdb4714cafc7f7ac2e0d1bcab9696", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618649090, "uuid": "7f9aa300-a8da-41b6-ba63-70cd23dea73c", "comment": "Malware payload (Dridex)", "value": "1a8a4f39a624fcc69400118283e39596baccdf19281092fe6ec4d602f09ddb4eba58b83cc990787feb2629bc799746ef", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618649090, "uuid": "e0b2daf2-1307-4331-ad72-a3ab63d8c3cc", "value": "08F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618649090, "uuid": "aa8d01ca-6122-4acf-be37-76e118a9091b", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618649090, "uuid": "e392a181-1f9b-45fe-b74d-27a1661e3955", "value": "3072:cmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:FLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618649090, "uuid": "49687ac4-39b2-4139-ad9a-0b8efd2aefe2", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618649090, "uuid": "f785f25d-49a8-4203-9f45-c970592339f7", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618649090, "uuid": "683c1966-b81a-4db3-b3a7-dbfc91d8daaf", "value": "6548e10439ff227668a180b73aec3ec76c8c2e6691518ad61e32977f10475bf6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c66d846c-9f43-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618639900, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618639900, "uuid": "a45269a7-914f-4665-8ba5-68a019167713", "comment": "Malware payload (Dridex)", "value": "c657d0397047917b987a7c33cdb0150d", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618639900, "uuid": "fc497e58-0385-4f37-baa9-5a951f1f06bc", "comment": "Malware payload (Dridex)", "value": "65a51d66a76ab5a72f2b3e22b9aea4e03754591d6ad05e6dd69cd8a1f8f0538b", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618639900, "uuid": "3e81468a-3052-48bb-83c3-d7cacff4d2fa", "comment": "Malware payload (Dridex)", "value": "fabfc8cc34e7ca3b5499aa2c9081cdf2c98ddf72", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618639900, "uuid": "a757f476-5fbb-4aef-8ecc-3387f4614f3f", "comment": "Malware payload (Dridex)", "value": "ff8486710cce40d7e881bb1ad7b8c29ed6d9513f96dd7c6a7a35c1ef9f481ea1db29c676763c793db1804278c5f910df", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618639900, "uuid": "5ffeaf9b-2d55-42a4-a41c-d23a894bd90e", "value": "50F3E00AED9FE988E84C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618639900, "uuid": "b380f9e0-1b46-4b2a-a22f-0d721e7abc86", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618639900, "uuid": "8a280f88-58a8-4d61-8e50-0fa77e256d02", "value": "3072:qiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:peAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618639900, "uuid": "9d5f28c1-0243-46de-afe4-8fa9f4a52e06", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618639900, "uuid": "4c9ee59b-0e86-4778-b2c0-486b51386db5", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618639900, "uuid": "e79a3291-86fd-4d56-b4ed-353684109c76", "value": "65a51d66a76ab5a72f2b3e22b9aea4e03754591d6ad05e6dd69cd8a1f8f0538b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f2a91d0-9f9a-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618677093, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677093, "uuid": "7c88da5e-de17-4b76-baa1-7d4bb1956269", "comment": "Malware payload", "value": "89f6a6935da3d8bdba678e5e4476c74e", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677093, "uuid": "27e9b6f0-245c-4741-8b5d-24b1e157a743", "comment": "Malware payload", "value": "6667beebb547041dc07490c0e5ba2504ae159a483d525337108fcc129ee18496", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677093, "uuid": "96c832da-0a3d-46df-b867-df0fb8ce3c6d", "comment": "Malware payload", "value": "2adef06a9bc530221990faefc7947b6f15603029", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677093, "uuid": "c3824d3c-a025-4a6b-a849-989aa010dea8", "comment": "Malware payload", "value": "3720aa60503af9abad1f46ec1c71a962de1885b86b45522a027249e1b299ff5937797cad8602391b70317e8f8982deec", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677093, "uuid": "e37eb32b-4585-453b-9b60-6efdf6cac029", "value": "69F3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677093, "uuid": "9ac04e7a-5682-4229-a1cf-0b6cd5db59e8", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677093, "uuid": "e64def81-fb35-4f77-8b30-c0610865ca17", "value": "3072:viFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:keAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618677093, "uuid": "90cdd4df-c6b4-49e0-a424-93ae77ca24e3", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618677093, "uuid": "cef2d0c5-4394-4239-a459-ff6e0022c83e", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677093, "uuid": "82b82297-262f-40ae-8fe1-469f5309349e", "value": "6667beebb547041dc07490c0e5ba2504ae159a483d525337108fcc129ee18496", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2292e2ee-9fbb-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618691165, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691165, "uuid": "b3346d7d-1fdb-4393-94b1-745319d9ae08", "comment": "Malware payload", "value": "b17112ce78c89a88a49aa5564df539ce", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691165, "uuid": "7d1207e0-74df-4945-a34f-e03e79c9801c", "comment": "Malware payload", "value": "66a1129597dfc1cd5126a8828576142230cd9ae025a3e13718e3c8f1844c5dae", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691165, "uuid": "e15e7edb-b145-4829-bdee-78175cdda06e", "comment": "Malware payload", "value": "5b8541d000b8886a9468a15f7d92ec08c8783e8b", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691165, "uuid": "222098ba-13c3-4f8c-8404-aa2c153a4ad8", "comment": "Malware payload", "value": "7d19d3a5c9f4b23d9ac2fb53624959da4f5fe92e228b0a8ab39c4813a768d4083156935f9e3db7dfa1f179d75bdd77c0", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691165, "uuid": "17b70092-b697-4993-b66e-5a3eeebc487f", "value": "D0F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691165, "uuid": "d55f56ee-192c-4633-ab46-ddb5f15a9e5e", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691165, "uuid": "14bd2f72-4852-4e78-a7a1-0ba48c8f0264", "value": "3072:JmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:YLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618691165, "uuid": "c9b804af-2606-4dcc-b09b-b0b2cee1ef34", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618691165, "uuid": "9e2bed72-3ad3-410a-b056-88778a45f835", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691165, "uuid": "b5e832c3-5f9c-4938-bcff-5b14c86a4853", "value": "66a1129597dfc1cd5126a8828576142230cd9ae025a3e13718e3c8f1844c5dae", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73345194-9f1a-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618622151, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622151, "uuid": "a642c67e-d6fd-429d-ae9e-3417be1c04e5", "comment": "Malware payload (Dridex)", "value": "43249dfbc34758585c2a6189725fe7fc", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622151, "uuid": "44ca2060-66b8-46bf-8743-46f842dbe0bf", "comment": "Malware payload (Dridex)", "value": "66a82ee9f976a7a34ac97364aa08d010a6c0db4df42bf9a2a52b6c636bcff953", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622151, "uuid": "4f6562e0-55db-4e09-b3e6-07be73b9afca", "comment": "Malware payload (Dridex)", "value": "86b8b1efe1c7f8548435e52f943046f09054683f", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622151, "uuid": "a311f326-f79c-439d-be5d-9954041f6517", "comment": "Malware payload (Dridex)", "value": "97cb42da89843e4827be431e0b8ae8e7e1f19c29b70b25eb8f308088225a60631e309038002dc613a4648f7b58de946a", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622151, "uuid": "6b0ae847-11e5-4e3f-8ba6-da6a9dd6f6e2", "value": "A1F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622151, "uuid": "b0401083-b032-460e-aa5f-b0934e457d5a", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622151, "uuid": "278eb3f3-9f3b-46c6-91e5-cb285afb111d", "value": "3072:xmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ALc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618622151, "uuid": "233801d7-8260-47ad-9418-e944dcf90ded", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618622151, "uuid": "a0847ae4-f505-433f-b4b9-89ba8effa970", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622151, "uuid": "78e335bf-b48f-49ce-8d56-8a455fed6af4", "value": "66a82ee9f976a7a34ac97364aa08d010a6c0db4df42bf9a2a52b6c636bcff953", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2998e18a-9f34-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618633194, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633194, "uuid": "57bdcb37-0579-408d-8415-94e067c0f252", "comment": "Malware payload (Dridex)", "value": "ba9306c2954b72aee9fc9d74a80af3c0", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633194, "uuid": "8c4660e4-eaba-40ef-9d2b-82015e7d66ec", "comment": "Malware payload (Dridex)", "value": "66d6b47c38ad2c0e45cb049c51ad590cb9aa1fdef2cef962da665b278710980a", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633194, "uuid": "15de6726-3e6f-4599-80bf-4b9ae5eedbe8", "comment": "Malware payload (Dridex)", "value": "ffd1dafdc0634b137c64b7710b5a33a3ddacc939", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633194, "uuid": "e325220b-2f49-4018-84b1-36ffaadc31ca", "comment": "Malware payload (Dridex)", "value": "e35b07237150d8277569253c8b4ddcbdb88382b029f81743fb95b7d3a9ba7cd28d0dfb3c39b9f03a62b136bd89f6458e", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633194, "uuid": "c47cc45d-277f-452d-af67-8678db15449a", "value": "22F3D088CBB3E4E6EFB3D37866F85E1B461174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633194, "uuid": "5e43b3d3-fee0-4bdf-bc7d-2c6eedd46af1", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633194, "uuid": "81567d08-f650-458d-9567-42bd99fe233f", "value": "3072:nmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:mLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618633194, "uuid": "0110b610-16d8-42e4-8304-21fd18d262f2", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618633194, "uuid": "f1ea7888-f501-4f67-a2bc-4bedbcaec594", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633194, "uuid": "9daded3d-a6cf-4a18-bfbd-0f2df56b6a6e", "value": "66d6b47c38ad2c0e45cb049c51ad590cb9aa1fdef2cef962da665b278710980a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65c727bd-9f36-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618634154, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634154, "uuid": "1287e44c-a9ac-4d11-a331-bcdda25b47d4", "comment": "Malware payload (Dridex)", "value": "e166de5494c702bf0ea36bd35259bc45", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634154, "uuid": "e0b5d4ca-474c-4b74-9cca-7d1ca74efabe", "comment": "Malware payload (Dridex)", "value": "66f84ddc53d91de0e0a5700e0771aa4183425e926b671edc6c0031850b4765ac", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634154, "uuid": "0ab343ec-66ba-490f-a6e9-ddd8f26e7d27", "comment": "Malware payload (Dridex)", "value": "793219f911274e9803577b339ca59b4a74e0ea8d", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634154, "uuid": "8afa48a1-23ed-4314-98cc-5b35c5928a5b", "comment": "Malware payload (Dridex)", "value": "85e70fc6a8b78487cd4a6b770a29f4957c0d0b8ef5f88251897a76b6e817c84e1e2d1a745fdd1b842cf47449770eb949", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634154, "uuid": "a24a5ec4-c3ad-4969-9d5a-621d70bc36ae", "value": "E1F3C088CBB3E4E6EFB3937966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634154, "uuid": "d99de906-e7df-40ff-8fcd-218656653e74", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634154, "uuid": "8fe41675-8bba-4852-bd85-9db2ab296ed6", "value": "3072:MmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:VLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618634154, "uuid": "ea8fff01-2489-4d8b-9360-658c596a78f1", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618634154, "uuid": "614c9f08-f14e-4856-8e9f-04f7522d4874", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634154, "uuid": "98876453-f85a-4c4b-8f6d-2c3835b7b0a5", "value": "66f84ddc53d91de0e0a5700e0771aa4183425e926b671edc6c0031850b4765ac", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "afbc8da2-9f78-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618662625, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662625, "uuid": "7766ed9c-4b45-4721-8dfb-40b13f85928f", "comment": "Malware payload", "value": "ee40add988a306ad6cf3a20966e7cfb9", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662625, "uuid": "6ae62672-0c22-4982-b619-35d6bf076b0c", "comment": "Malware payload", "value": "67033d9b32e76a91dbcf54b0889dfc7abb0ea6de8725c47251efb70dc1dcd931", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662625, "uuid": "f4f3e482-d209-44a0-a028-38d4d7c8c820", "comment": "Malware payload", "value": "d7195a87dd06a6c5284765220e7db0404252c609", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662625, "uuid": "c3115c50-9b79-4d31-af92-fcc742743ae8", "comment": "Malware payload", "value": "24132a4b483b4b67bc923ec6360cdb422369161f7ad7371f0f6fe9ad09216ed9c9c9a8c8a17b9760360104da82eb31a3", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662625, "uuid": "1f506d99-90bd-446e-83b3-c651b69b46df", "value": "38F3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662625, "uuid": "e795098e-9d06-4779-a844-418a43aee4c4", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662625, "uuid": "902e803b-788f-411c-bb6a-8e22be7f4019", "value": "3072:LiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:oeAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618662625, "uuid": "6ffd5458-eb8a-4fc1-9e27-07fa824185c4", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618662625, "uuid": "8af6ed80-0a49-4a5f-a6ec-8384222de335", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662625, "uuid": "1008165c-e856-4d01-8eb1-6c1895c6216a", "value": "67033d9b32e76a91dbcf54b0889dfc7abb0ea6de8725c47251efb70dc1dcd931", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79f105fe-9f55-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618647503, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647503, "uuid": "8c6b0545-68b7-4fec-8dc5-42873781af78", "comment": "Malware payload (Dridex)", "value": "9c5514ff443a99962bea7bc0742eceb6", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647503, "uuid": "b152e5a6-9d7e-457d-bd89-f66ace582f09", "comment": "Malware payload (Dridex)", "value": "6750b678a9b9308761128aeef9ac71b082e6a622794858edeea24a45956f2cfb", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647503, "uuid": "ed5b6f2f-e5b2-4941-ae03-0e731a8c0494", "comment": "Malware payload (Dridex)", "value": "8a9fec1ddd6274d24af68e4a54d51e222a217de3", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647503, "uuid": "3c638862-1235-407e-a093-78af3444d565", "comment": "Malware payload (Dridex)", "value": "b9d7490de45bf2c35b83bf8f5d8ef2958968624b415827faeb0b484ddf4926e21b2e409dc519e0febf1708886b2d2ddf", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647503, "uuid": "d15609d8-eb47-44b0-8561-07bfc28d711d", "value": "18F3D088CBB3E4E6EFB3D37866F85E1B561174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647503, "uuid": "4bc64be1-ac4b-453a-b73c-b3f3557c3146", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647503, "uuid": "6001395e-86d2-439d-892a-646b028b94bf", "value": "3072:nmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:mLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618647503, "uuid": "e1f525e0-8fd6-430a-9cd6-91679aa80f96", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618647503, "uuid": "bcac6534-45cd-49ce-8922-b3f55d0a808f", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647503, "uuid": "f36505d7-b2e2-453a-b85e-645c2c6317c9", "value": "6750b678a9b9308761128aeef9ac71b082e6a622794858edeea24a45956f2cfb", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc319bb7-9f2a-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618629172, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629172, "uuid": "3ccc96bf-333c-4fb9-a6ee-3663114d6e21", "comment": "Malware payload (Dridex)", "value": "328f48cf16c3ed314634c77b9fc0818c", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629172, "uuid": "028c9bc1-12cb-4b7c-8421-09a4435d4f4f", "comment": "Malware payload (Dridex)", "value": "67f2ecd5ecb2404f8b77e945dfa324350ecf9df9a4aa48cf037f025e9255799a", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629172, "uuid": "cb47b4dd-8abb-4fae-ab41-0cac57095008", "comment": "Malware payload (Dridex)", "value": "55897c3d82df9f8f38c381accc5d91bdf5eb4bb4", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629172, "uuid": "cd38140e-d3d3-4f62-bf43-99fb0c1c623a", "comment": "Malware payload (Dridex)", "value": "d28fd562f0a5ea231db2ce5bddac8470bb1e55e34a089a6189666c4ec7967bdb72eb866fe8a16ab0363881d6bd4cf2a5", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629172, "uuid": "09bfced3-030f-46e5-9aff-79bf27852b51", "value": "C5F3C088CBB3E4E6EFB3937966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629172, "uuid": "5a13ef16-d926-4053-9141-0af34b964979", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629172, "uuid": "71558fdf-4945-4fc7-848e-27ce9bc6fdf8", "value": "3072:emNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:vLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618629172, "uuid": "dbaf6ac5-fd07-4cac-8ef1-c8221820ea45", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618629172, "uuid": "ce73fe89-0a7e-464a-a2c6-1e7b164bdffd", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629172, "uuid": "951977c9-a84e-436d-9b39-c5c2715e91ac", "value": "67f2ecd5ecb2404f8b77e945dfa324350ecf9df9a4aa48cf037f025e9255799a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b36ed3e5-9f7a-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618663491, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618663491, "uuid": "f471f865-ba79-4251-b997-49107b2d34dd", "comment": "Malware payload", "value": "54638d37291c69ad8b336c972fdef457", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618663491, "uuid": "9791647f-97cd-442e-9683-ca8304167cac", "comment": "Malware payload", "value": "68159dea5b97281b8964db3d656bb6d9578b6d0efcf3927517babc26cd0e2528", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618663491, "uuid": "658fd2a8-a95a-47ab-8848-48a903c589a5", "comment": "Malware payload", "value": "b4ade74abdd2992e5164f70c89e09329fb445e9f", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618663491, "uuid": "c8fc779f-7d65-420d-bc78-054528b0e7c7", "comment": "Malware payload", "value": "9ae6dc49b4d8154e196f7ab134130d3e1a157cf513dc2de4c782192643dd6362514dba8d21c168bc200426bfc4d4718e", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618663491, "uuid": "56e90795-a971-44a9-adc9-f27bbc51f659", "value": "EAF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618663491, "uuid": "31978064-5bdb-4da6-9f2c-5b63fb782cbd", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618663491, "uuid": "1c7783e5-db50-475e-9319-73ac83f8eb3f", "value": "3072:5mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:oLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618663491, "uuid": "1a1865e9-d44a-4787-9c54-0edc0109f684", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618663491, "uuid": "5e46ec58-651f-4a1e-9f46-302d070fe7be", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618663491, "uuid": "975cc508-11df-4f25-9e47-5c67fc4f6c18", "value": "68159dea5b97281b8964db3d656bb6d9578b6d0efcf3927517babc26cd0e2528", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c259e25d-9f26-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618627438, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618627438, "uuid": "59e18460-dfc6-4db0-8443-af55abd0481d", "comment": "Malware payload (Dridex)", "value": "552e15923656f4be9285d9c8ca29ef82", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618627438, "uuid": "5908e13f-2d7c-4f4d-970b-11bfd19f055b", "comment": "Malware payload (Dridex)", "value": "681e4d225d1672be00287f67ab5db585c3c4d0006615e2e862c45f0b1e0325d3", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618627438, "uuid": "716443ff-3975-4a1a-8cab-5dc2e8a3d8d1", "comment": "Malware payload (Dridex)", "value": "370f908150fe3d62431d6fd6c20cb12862ff02b6", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618627438, "uuid": "9ce1e8f7-f98e-4076-aa89-1906bfda58c1", "comment": "Malware payload (Dridex)", "value": "3406bd075d52d08e96f329b35a260eb3b3dd5b285b958210fea0774a2d660a6473467ed069c9febb6fb19d20b7180f6f", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618627438, "uuid": "30c84768-60a2-4b4b-94bf-7bd09c0404ee", "value": "1CF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618627438, "uuid": "8292a479-0dd9-4296-b2a8-33316e4bbd46", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618627438, "uuid": "848eacce-b779-4c95-a3b2-93a0dd6aa267", "value": "3072:kmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:tLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618627438, "uuid": "45d2dd6f-95f9-4ab4-b6a7-202a6342930c", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618627438, "uuid": "679804b8-771e-4c80-8c90-203f388e8b0d", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618627438, "uuid": "70fead68-faac-4261-92a3-87f6f7a224b5", "value": "681e4d225d1672be00287f67ab5db585c3c4d0006615e2e862c45f0b1e0325d3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7526091e-9fa6-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618682284, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618682284, "uuid": "3ef3eb2e-60c8-4cbf-a772-954012ac1f90", "comment": "Malware payload", "value": "7e01964a26f0d613bb06784b31e55e3d", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618682284, "uuid": "66d729f0-bd74-4bae-be86-7296980cbbcf", "comment": "Malware payload", "value": "68ccb103ece3a105e07161ba0c2f81664161fa8bae1e375ccd375938dc9ea1cf", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618682284, "uuid": "89687041-f8f6-4031-9c19-be3dce57e52b", "comment": "Malware payload", "value": "51f8fd0eaa1a8c6579e5be23dabb763d24207980", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618682284, "uuid": "9e4e70f4-cf15-41c7-a51c-5b79385bb370", "comment": "Malware payload", "value": "a73d20d8bcd20ecde1a829fcf74f692cd9228a61849210b3c84bfa251c99e89bd7152341bd6cac8b4d640938b1193f74", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618682284, "uuid": "ee7e9306-9c92-4d43-9fe8-86c3d56c1023", "value": "F3F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618682284, "uuid": "9fd34f95-e213-49fd-a811-02f1534cc67a", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618682284, "uuid": "bc720ac2-556d-4f67-b11f-bec343abf66d", "value": "3072:rmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:6Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618682284, "uuid": "32ca3006-0a7a-4053-8494-9a38a4a6b5d1", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618682284, "uuid": "42c4da1b-7aaa-417b-9731-49005c82d830", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618682284, "uuid": "600ac50b-0077-415e-8166-e0651600ffb1", "value": "68ccb103ece3a105e07161ba0c2f81664161fa8bae1e375ccd375938dc9ea1cf", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34d2bab8-9f56-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618647816, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647816, "uuid": "b818b129-6b8d-4cf4-91de-b88683dffda1", "comment": "Malware payload (Dridex)", "value": "6bd1468f6f5af880135213c06604180a", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647816, "uuid": "31905662-f2b8-4cac-ab14-793852079c9f", "comment": "Malware payload (Dridex)", "value": "694483a7cae16e19466b335a6c11d90658f7422bdc4ee1d94cedf323cb80de21", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647816, "uuid": "6b874f32-9d48-498e-b264-467a2c212402", "comment": "Malware payload (Dridex)", "value": "8700ce7fdbd134bed84aa31c522e3cdcbb9d758d", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647816, "uuid": "76f17099-a29b-4fd1-a160-f0da75d90d96", "comment": "Malware payload (Dridex)", "value": "5e52200ecfd4cb4a5c781581350e8df5b34cfa07d68f3aaa59fc803a0b2c25674ad26ca4298e7052cc771653caa285f2", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647816, "uuid": "1f66c684-c5e8-4fe8-ac7d-806f31aa9554", "value": "ACF3D088CBB3E4E6EFB3D37866F85E1B561174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647816, "uuid": "0c22b156-c663-4710-80a6-e8265feaf0d1", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647816, "uuid": "08d57f78-07a3-433b-a1fd-43f83c8f5cc9", "value": "3072:smNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:1Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618647816, "uuid": "395729fc-b0fa-4a20-a138-6a88125b6535", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618647816, "uuid": "1325febb-3682-46ff-bc65-1b4c016e4510", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647816, "uuid": "da421967-49bb-495a-806c-cd5ca8729329", "value": "694483a7cae16e19466b335a6c11d90658f7422bdc4ee1d94cedf323cb80de21", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5447212c-9f11-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618618234, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618234, "uuid": "b61ebae1-1d01-48f2-9d42-ddaad2c3fbe0", "comment": "Malware payload (Dridex)", "value": "538669a4632b06b284acb0980f0f45ec", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618234, "uuid": "aac5ec62-e6e3-455d-b0d1-65b08700cb22", "comment": "Malware payload (Dridex)", "value": "695dbd072c77592d239a3c3a6d635f81ddd48a2d7e7c23c386c5e583c43ac199", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618234, "uuid": "c79c995d-3fd7-4596-91c6-5c0fc281b45d", "comment": "Malware payload (Dridex)", "value": "e736a5a10db8c7bdf07f95ba7b97297488702389", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618234, "uuid": "6dc7407a-a522-4953-8dc1-9143b34e3ac5", "comment": "Malware payload (Dridex)", "value": "9ecec059d0f62d969c7a5aad1affcc01ff0154aab2c57a8b1cfcc5817c4efd18ac7b184517df5f27dfc7990579e1edab", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618234, "uuid": "a32eeae8-5501-437a-a714-1a585c2857fd", "value": "20F3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C5846E9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618234, "uuid": "85dddfd0-05d3-49e9-a708-2743801bc1f9", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618234, "uuid": "fd701402-d414-4945-a247-93c7fe7faaac", "value": "3072:JiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:6eAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618618234, "uuid": "a5ab6d12-395f-4e73-9f4a-d7ca492e46d3", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618618234, "uuid": "acd26db9-c536-4089-9402-ec2ca4d9eaba", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618234, "uuid": "c714a5ee-6b7c-4a9f-b093-c711a3f1c993", "value": "695dbd072c77592d239a3c3a6d635f81ddd48a2d7e7c23c386c5e583c43ac199", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ae70fc0-9f15-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618619990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619990, "uuid": "7c8d3b31-2e48-4eb2-b98e-8a58b2446e8e", "comment": "Malware payload (Dridex)", "value": "dc5d0a5e31961cd71d1265ea38b707cf", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619990, "uuid": "296aa1e5-6787-4b77-85a5-7172fa5de8da", "comment": "Malware payload (Dridex)", "value": "69c9eebc0caf287fa39fcdaeed3d4a49e8c47682fe0e11b7dff37005efd059ab", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619990, "uuid": "01920c2a-3440-4844-a0dc-34bef221cffb", "comment": "Malware payload (Dridex)", "value": "bfd404542d3e260cf6521c40b490f31cfe60b1f6", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619990, "uuid": "8e3d868f-e31f-4563-8c01-617d90f053b2", "comment": "Malware payload (Dridex)", "value": "6ffc9df6f87bb19a0d14739d4ddd75cc80bd44c7696439c9dcb81628a83ff487326ecde8abd0109f3a4f01442f6a947f", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619990, "uuid": "af42f50e-18bc-4ae1-9241-90b3c15d9c07", "value": "FEF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619990, "uuid": "964ab7ac-7679-462a-9035-0e35d17d44ac", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619990, "uuid": "ba692939-47f9-4fa9-a3f2-bb5ee3de9aa4", "value": "3072:FmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ELc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618619990, "uuid": "09dc0ba3-15b1-4eee-b154-a2a4461f1d31", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618619990, "uuid": "663df1ed-dcd4-463f-b39f-03a554e334ce", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619990, "uuid": "2d1797ae-208f-4786-9664-6f9c18a3e46e", "value": "69c9eebc0caf287fa39fcdaeed3d4a49e8c47682fe0e11b7dff37005efd059ab", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a7ee526-9f4f-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618644953, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644953, "uuid": "5d87ad27-6e79-464a-93c8-746d5ac3ccd5", "comment": "Malware payload (Dridex)", "value": "c2dc1a29f817ca0d39ce227641870507", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644953, "uuid": "6c9d854b-f8b9-47ca-9be2-ed336448137b", "comment": "Malware payload (Dridex)", "value": "6a2851664f19f0b549b33298332d92a6f1fd7a2d79d2be49f4bfe9fe155e1db1", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644953, "uuid": "a1fa61f3-60fd-4405-91dd-87a8fb16b903", "comment": "Malware payload (Dridex)", "value": "318b7077d571c2a46072d820b3d49da8b7f7b84e", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644953, "uuid": "12d24bba-ae1d-49a1-b629-04e06f392872", "comment": "Malware payload (Dridex)", "value": "6b57e66970a46478635416d2e3991bd113119d243f5a806fcaca7a678574266832d9fb1906c53ef27b80298d6cd48802", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644953, "uuid": "c4e1e74d-add5-4e66-8710-6038a5678ef8", "value": "77F3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B496B1FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644953, "uuid": "31d80480-ffae-43ae-bd7d-c55938c68656", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644953, "uuid": "33da0b15-5cd3-4e82-af39-f4aa9532a1bb", "value": "3072:KA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:K3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618644953, "uuid": "620828db-1f62-47a3-8fe1-86be5300454c", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618644953, "uuid": "2b4fc277-d8d0-4995-915c-a3e582ab264a", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644953, "uuid": "24133071-3305-48bb-ba77-898263a550f0", "value": "6a2851664f19f0b549b33298332d92a6f1fd7a2d79d2be49f4bfe9fe155e1db1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dfa2a78f-9f1b-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618622762, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622762, "uuid": "67b7a5d7-d1da-4938-8220-5404998b7197", "comment": "Malware payload (Dridex)", "value": "58914397e6827c8514ffd7f5bd7bbbc4", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622762, "uuid": "1f91dde5-0d78-45ef-ab4a-a9226219a02f", "comment": "Malware payload (Dridex)", "value": "6a5acd4f4cc310811a50b8bd12268c31cf5c8d443281b031c833fbc7c1757f94", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622762, "uuid": "ca9adc2d-9625-4b80-8641-aacaa77ce43f", "comment": "Malware payload (Dridex)", "value": "0f72cc319d750da1b93a8528d1a23fbd21b3bc70", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622762, "uuid": "015e9518-f4ae-4cb3-a4d2-58a41a4ffb3c", "comment": "Malware payload (Dridex)", "value": "9092adb76e15425666283794aa0490f0e99483b0e5860190f3dc9051b8b2b85c01bc821affa098e0680d818443b957e4", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622762, "uuid": "a1a5f3da-f648-41ae-8f09-dbbe008d4d26", "value": "A9F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622762, "uuid": "1dc0c9f0-a2de-410d-ade7-4ce194b009a0", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622762, "uuid": "4a2e8bf0-6ade-4387-af4d-f904bea1546e", "value": "3072:KmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:bLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618622762, "uuid": "6ee65345-876e-4651-a1a5-3b8e1dbdbf4a", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618622762, "uuid": "0d6cb42b-5922-43a3-b363-a7c5a702a2d0", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622762, "uuid": "0f4bad54-ca94-4f0f-b7e8-37eebf649b2e", "value": "6a5acd4f4cc310811a50b8bd12268c31cf5c8d443281b031c833fbc7c1757f94", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18ba6b38-9f3b-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618636173, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636173, "uuid": "510f52cf-48ec-4028-8b07-6be29b1ce849", "comment": "Malware payload (Dridex)", "value": "77a36c31947044569f4a1940f163b379", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636173, "uuid": "1016faa7-e1fe-4e9a-a179-ca24b456626c", "comment": "Malware payload (Dridex)", "value": "6ae5ee289b01d46b7d788e08dc7882ee000e1067eec0a00e2d4bf17fc400cf27", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636173, "uuid": "25f8a8f3-e74d-4263-aed0-722ecf49fa81", "comment": "Malware payload (Dridex)", "value": "d2cf836da16e2ec25315b38a0915f54aedc0f397", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636173, "uuid": "31f90557-c55f-41c7-be36-1513847f0724", "comment": "Malware payload (Dridex)", "value": "13bef194d6c5d046def1a1fc2f5b2cc59abc970e5288240fdae089a326dc2cf4f035817898e22d50063fc2108918490a", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636173, "uuid": "ea580cd5-bcfc-47fd-b799-4b2f0477c55e", "value": "06F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636173, "uuid": "1983facd-4cc5-48f6-a856-7df1e280df80", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636173, "uuid": "6e34c371-dbd7-4438-9da9-a2c5d0afcb0c", "value": "3072:omNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:xLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618636173, "uuid": "e0e343bb-f022-45f1-b28a-7e84fd831bca", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618636173, "uuid": "9011aad7-559e-4245-9459-f97091af517f", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636173, "uuid": "ba02b4b9-d4c4-46e7-9a82-8c561901bd03", "value": "6ae5ee289b01d46b7d788e08dc7882ee000e1067eec0a00e2d4bf17fc400cf27", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d99a7b54-9f67-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618655394, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618655394, "uuid": "43e30a2d-c38a-4a12-bc3f-330039dc7cce", "comment": "Malware payload (Dridex)", "value": "7645b459519c0d5f5c518146044f7db4", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618655394, "uuid": "63ee35e0-a0b0-4825-a0e0-2b3118dad2c5", "comment": "Malware payload (Dridex)", "value": "6b0787266cfe5cdede4d623b5acceef801fbf8ab220a10b53161bbfd5464cb16", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618655394, "uuid": "fb60da76-492e-4a59-a07e-a557cf709af9", "comment": "Malware payload (Dridex)", "value": "cf97aa657bd4bc51dae81c1e438257fbe2eca8b2", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618655394, "uuid": "b9996914-599f-4e6a-b1a2-2af563903451", "comment": "Malware payload (Dridex)", "value": "d02fe5610aea23bdacef0be71b5e76690fa788d288ebd78a3b348e9e81d1218968eb05b08b31f7382b71e9bb7d010f61", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618655394, "uuid": "33146411-4b37-4d25-9a52-23fdabadc841", "value": "4CF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618655394, "uuid": "eb4cfc23-28b7-42a6-b5ed-aa35be26e3b3", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618655394, "uuid": "4e8aec02-5a9f-442f-b32e-116b4a43eb83", "value": "3072:bmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:KLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618655394, "uuid": "b6fa76d9-860e-4793-ae7a-82ca789512da", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618655394, "uuid": "40ed22a9-86e0-4ea1-be47-92d6cd9702bd", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618655394, "uuid": "3d7c4d1f-38bd-4398-a6dc-80dcbc6b8408", "value": "6b0787266cfe5cdede4d623b5acceef801fbf8ab220a10b53161bbfd5464cb16", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da784896-9faf-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618686319, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618686319, "uuid": "81e17645-0b82-4a60-ae20-52672d184533", "comment": "Malware payload", "value": "7865990edfdfc5ded5c118ec9cd362a2", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618686319, "uuid": "a3c61869-da75-4094-89fb-39f1ff34cddd", "comment": "Malware payload", "value": "6b565055890bcff35e7f66319bec7f868719d141fd09aa8abf4931ca1e6309c6", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618686319, "uuid": "f5092f37-1b39-486c-a75f-66c3f1e5bd93", "comment": "Malware payload", "value": "4d9da826eb383f951726eba1c64c940417cff9c8", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618686319, "uuid": "557531bd-e9ab-48bd-b400-e7a8f88b0d31", "comment": "Malware payload", "value": "7e46fb4613b3ea4e624ebf9a27f5fc6987f94af78e7940bef1698c21d5b21ed8e6b3c3af37111c47b17550a673b3fe0a", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618686319, "uuid": "a957a11d-94b4-4c16-9dec-005d3bcd7a6b", "value": "24F3D088CBB3E4E6EFB3D37866F85E1B561174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618686319, "uuid": "352252e0-08f5-4f37-809c-dd004c6e0e12", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618686319, "uuid": "37759c1f-4d65-4a33-8908-582e42f01f41", "value": "3072:HmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:GLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618686319, "uuid": "7f024ccb-e3a0-4934-bd62-716c7c7bb685", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618686319, "uuid": "7ebd8128-6299-4977-868d-53fd4a2d6e4d", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618686319, "uuid": "692ca6e5-a1a3-40bd-a6b6-de1e9da91a05", "value": "6b565055890bcff35e7f66319bec7f868719d141fd09aa8abf4931ca1e6309c6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2771f912-9faf-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618686019, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618686019, "uuid": "8fcfe727-e3e4-47d2-8b44-f659f2eb74bf", "comment": "Malware payload", "value": "bbce6fe4404dc7ed415bf5cf0658d1c3", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618686019, "uuid": "300f0212-78c3-4f65-a1ec-8783c687f07c", "comment": "Malware payload", "value": "6b75e87b1b715ed8287c7bc14b6a2912adc339dbc4ec99f506a391d49572132a", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618686019, "uuid": "3205034e-c59c-40bd-afaf-cc213b3ff5ae", "comment": "Malware payload", "value": "fe5f35c71eec020f5ab111e3fc0fa04f6dbaa45a", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618686019, "uuid": "beb60d60-c0f8-47e0-8b58-91b706acb1c5", "comment": "Malware payload", "value": "390d84956c26b3df280b46b8161e3bb934417add327185ecbbaeb4616fbbc86ba6d4a98f13c658505f1db604c13f3a8f", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618686019, "uuid": "46a5d689-1d2a-4820-9620-2e948f482716", "value": "D5F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618686019, "uuid": "f87c60e7-3bbe-42d3-97b8-0b38317e3f78", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618686019, "uuid": "1da7f9cd-3d4c-408c-9d5e-2394caae6fd2", "value": "3072:UmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:9Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618686019, "uuid": "cf0d29d3-c536-419f-91cb-0d0d4ec639ca", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618686019, "uuid": "d9c1c92f-9663-4113-9b20-1584aa31f7ee", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618686019, "uuid": "89bf1017-57ea-4ab5-ae8f-90a1952c5b4b", "value": "6b75e87b1b715ed8287c7bc14b6a2912adc339dbc4ec99f506a391d49572132a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10cc3aac-9f75-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618661070, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618661070, "uuid": "c0de7dc9-0645-45a4-b103-d1c66cc84ffd", "comment": "Malware payload (Dridex)", "value": "d65d77b5b5390d1257cd460dcf961d61", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618661070, "uuid": "597cc673-bf13-4f16-9c79-b3dd183de32f", "comment": "Malware payload (Dridex)", "value": "6bbe783fbac94c979bd87f7f4e5a11db397565160942d66b5db3da49d04eceb9", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618661070, "uuid": "74c79056-2925-45a0-a9f3-3a8d69a6ac56", "comment": "Malware payload (Dridex)", "value": "c18fd2b31cf76bbd6e46c729b013829932588723", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618661070, "uuid": "813da36d-849c-45a0-948b-2bdff034dde9", "comment": "Malware payload (Dridex)", "value": "c34f9b18a296ae3263a435a7f55f5bcce56deb567e3e10fed0034d8eaf92c56f5335c9e524bc2e0ac301de46179f619f", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618661070, "uuid": "4e0bc978-a48f-4f41-9683-aa4595a8ccb4", "value": "D5F3D088CBB3E4E6EFB3D37866F85E1B461174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618661070, "uuid": "fe292bac-6a66-4a1d-b0f3-169f148870f2", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618661070, "uuid": "1965a76e-6bbd-4bc9-a75c-e71dc36334f6", "value": "3072:smNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:1Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618661070, "uuid": "176d734c-d43b-4bb6-ae88-bade389396c9", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618661070, "uuid": "2f7020b6-81b9-409a-93d1-c661610915d4", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618661070, "uuid": "8963673a-1799-4870-a285-a75721500dd2", "value": "6bbe783fbac94c979bd87f7f4e5a11db397565160942d66b5db3da49d04eceb9", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2158922-9f6e-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618658415, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618658415, "uuid": "997aab7e-5a72-4b8b-bf75-d67d0b4b497a", "comment": "Malware payload (Dridex)", "value": "973b3f01f1c21f9a55b677e33b2ce172", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618658415, "uuid": "bb12a84b-709d-48d4-ad6e-a575da134a31", "comment": "Malware payload (Dridex)", "value": "6c1c0f0b9c0e8e9f608443d4e5ffaa2a21b2ee51a15c71d96c1dc4176f8ceb92", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618658415, "uuid": "ae2cd16f-8014-4b92-8228-d2b0337bb5d9", "comment": "Malware payload (Dridex)", "value": "ec3bec9ef2b4a0fe385ece306781c7e422133d82", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618658415, "uuid": "44d0915b-44b7-40d0-b459-8cae87543bde", "comment": "Malware payload (Dridex)", "value": "72b41d21732f9f68c04831ed0566744deba38a138253f379afc49615970ec8a1f60fe24fa0c073a6fec028124547439e", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618658415, "uuid": "7157a690-6ad5-48c3-a853-2624300d8e3a", "value": "17F3D088CBB3E4E6EFB3D37866F85E1B561174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618658415, "uuid": "09a1d9e9-4ba2-4e99-a6ae-009258b830ca", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618658415, "uuid": "642ab1b5-8d64-4301-911b-4c6af51ed8e2", "value": "3072:xmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ALc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618658415, "uuid": "48472e9d-2fd2-4382-b227-2fe32279c7fd", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618658415, "uuid": "33a6d790-19e0-4979-b00a-b44ad301e69f", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618658415, "uuid": "3fba9a64-2566-442e-a6da-7536f3cb951b", "value": "6c1c0f0b9c0e8e9f608443d4e5ffaa2a21b2ee51a15c71d96c1dc4176f8ceb92", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce01da3f-9f87-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618669119, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669119, "uuid": "6b8cb78c-945f-4fa9-b666-4866ec888351", "comment": "Malware payload", "value": "7afbf73f571d56d16fcf47cf84240841", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669119, "uuid": "f4e5611c-cfd6-406b-bbe9-761ddd2285f2", "comment": "Malware payload", "value": "6c6a00ed01e9b944ac2fe4241ad1906e2c963429eaf5f2d8eea62d3aadd28572", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669119, "uuid": "838f033a-419e-4308-a4d9-665eea462bca", "comment": "Malware payload", "value": "8c8e21eb39b2f0bab44f111525729450702e0fac", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669119, "uuid": "4dc80e7f-ebde-4338-9d68-f5bbbe9920e9", "comment": "Malware payload", "value": "360289a0ba7e13ffed686d2250aac34dde1744e30323294847f0b50347310b5f5d8d91b87ba97471031f588a66a3572e", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669119, "uuid": "f344d6aa-6c02-4185-b1dd-ca65c41ec062", "value": "7DF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669119, "uuid": "40beeee9-4e56-4f39-8b45-f6f4b168ebb3", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669119, "uuid": "c8da8f4e-b43a-452b-a50a-cb399f8da0f4", "value": "3072:CmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:TLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618669119, "uuid": "c49a03d1-80f8-46a7-8313-bded1d5b5d89", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618669119, "uuid": "0d5d8ce4-a121-4fa7-8177-561fec9a67fb", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669119, "uuid": "1bf446c0-84a3-47ac-977c-3251bc4655bb", "value": "6c6a00ed01e9b944ac2fe4241ad1906e2c963429eaf5f2d8eea62d3aadd28572", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02c55a2b-9fca-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618697554, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618697554, "uuid": "fce74b90-f677-4061-8280-62f51a463330", "comment": "Malware payload", "value": "5fe2f5af8274940f6f4c0ece85c75744", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618697554, "uuid": "c267f7c7-4012-4e01-956e-b647a7f59466", "comment": "Malware payload", "value": "6c6d9bd443e288ff270613f0f34bd5976788af32d0d4affe6e6f07432c02e300", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618697554, "uuid": "ad6cf5bb-00eb-4cee-b031-a33c83fd7884", "comment": "Malware payload", "value": "71da4dd6812a69b6974911539a29aa93f6ba9683", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618697554, "uuid": "b1d7aebd-b457-478c-901a-e970fc0b1456", "comment": "Malware payload", "value": "155aeb2f44d00a6ac1468c518919d86f223ba7acb416d86b6e9544d0bbd0dee7bdaa28de8c05dc740806e54d29f516a7", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618697554, "uuid": "dfea8c31-184f-4659-bbd6-59d63708cfde", "value": "67F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618697554, "uuid": "3f8fd22b-49c3-4cb8-a597-b8238ef3132b", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618697554, "uuid": "d3349d16-80d8-40f0-a23b-d6b474d97e6c", "value": "3072:FmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ELc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618697554, "uuid": "7fb5759b-7983-4e13-9ca8-841eb11b4f9b", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618697554, "uuid": "b057856d-373e-442b-9c9a-9797c5c8ce1c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618697554, "uuid": "397a68a4-8ebe-4052-8318-d5ec08b48455", "value": "6c6d9bd443e288ff270613f0f34bd5976788af32d0d4affe6e6f07432c02e300", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "12d5be2e-9f8e-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618671811, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618671811, "uuid": "8e3dccb0-a1e3-47a1-b0de-17676cb2fc04", "comment": "Malware payload", "value": "ba354a7258250af9957924f2bc168984", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618671811, "uuid": "0100d54c-8886-4987-b49b-4eec377c473d", "comment": "Malware payload", "value": "6cd71ffb874cf2cbb9305912e5636f2f1adc17495d4f0c81dc96c7c9d991e67f", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618671811, "uuid": "ed77b62c-0d38-47c8-87ef-de0dfb8c9921", "comment": "Malware payload", "value": "8b34a047843b4845e5c79da961c6d4f230e931d7", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618671811, "uuid": "045b24b0-f60d-4b81-876e-ee88ae6bf3e2", "comment": "Malware payload", "value": "a39edd4ed7a0699693b12a1dd7f221bdd1a4e5a84664a4c7a2b85706283da1c4c001983c60f00356d66b2ab7bb3cca4f", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618671811, "uuid": "51bc90d9-33cb-4800-9e2d-696e1d127559", "value": "6DF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618671811, "uuid": "d88d8258-0713-4f7e-a8bd-0ebed674703c", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618671811, "uuid": "120a7b45-266d-47b5-a673-d8a7c61ae305", "value": "3072:llpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:llo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618671811, "uuid": "263521e6-ac79-4d1a-ad30-d1656bd66c50", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618671811, "uuid": "b19298a7-2ce1-4668-a75b-cc8bcffe0ff0", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618671811, "uuid": "eef4819f-b48f-4f32-b2ae-d459a3759bdf", "value": "6cd71ffb874cf2cbb9305912e5636f2f1adc17495d4f0c81dc96c7c9d991e67f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0273b196-9fbc-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618691540, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691540, "uuid": "f0b2894d-5b07-4533-8a3c-3ce170ba7eaa", "comment": "Malware payload", "value": "7e7a9653046de3ec8aea524f22bda04d", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691540, "uuid": "98d877c1-9b41-4b68-8134-8e60e675c4c2", "comment": "Malware payload", "value": "6d1512d6e49f4c76cd934af2d1ced64ebf74278dcabf22c71c386a76b8b9598f", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691540, "uuid": "c77f1e33-b6cf-4aec-bc19-8de973d4c902", "comment": "Malware payload", "value": "d2cc84445db4e76f0ed19f675257271528880eac", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691540, "uuid": "807fd21d-c608-4571-8b52-5265e423e412", "comment": "Malware payload", "value": "d1d6440db5fc2c2e5b1f1fdc58d659fcaa391c9ce0922174aa4c16c3ae208951ec8e8aaacd2e3aba1f8b22276b00a1e7", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691540, "uuid": "9aa6b846-9bca-486b-b1b5-3858772a78fc", "value": "17F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691540, "uuid": "cce8fc8f-66a1-477e-9bf1-0793484b85f3", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691540, "uuid": "18a7c556-7539-465f-a9de-cab6ade37935", "value": "3072:EmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:NLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618691540, "uuid": "eb6cfba1-c8d2-479f-87ec-1fa58155a295", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618691540, "uuid": "4fe47181-b5ab-4c38-9476-150fd5d568df", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691540, "uuid": "a4843df8-27f1-4f19-86be-22be01204e71", "value": "6d1512d6e49f4c76cd934af2d1ced64ebf74278dcabf22c71c386a76b8b9598f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4216be6-9f6e-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618658391, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618658391, "uuid": "1c5348f0-134a-4706-b4be-393a1ef5e7b5", "comment": "Malware payload (Dridex)", "value": "659dbc1975f08b6a4c4d4ed93a1e73d7", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618658391, "uuid": "185d1811-f836-4363-b079-892d583265ff", "comment": "Malware payload (Dridex)", "value": "6daed45686d4904853d69e9d004b13e26e4572b6c1a523971d1d2bb904359047", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618658391, "uuid": "d5255a92-088d-4705-9789-ac7fd2379b0f", "comment": "Malware payload (Dridex)", "value": "a9fac9cb573e22ee88b8457f971e61b680623d95", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618658391, "uuid": "089253b8-c985-4721-b6fb-c04fb19b7be0", "comment": "Malware payload (Dridex)", "value": "54008d6b3383a68feacaa6f67326c8d0779db5cd3c08ddaedb6d82bf3b1fb3e86cfe8cc9180dd27594fe259be385f8a5", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618658391, "uuid": "8ae3d91e-1f8b-481d-8393-83938832683c", "value": "07F3D088CBB3E4E6EFB3D37866F85E1B561174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618658391, "uuid": "631c3e13-9c95-45cb-baf8-6f50acabc96b", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618658391, "uuid": "14f2509f-c544-42e4-814c-6c432634de3d", "value": "3072:kmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:tLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618658391, "uuid": "c3c34655-0cb5-4834-a20e-e71b91289865", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618658391, "uuid": "47e22265-b0d4-4e4a-9a21-ea263ee675d4", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618658391, "uuid": "6918f4ee-00a2-43b8-b281-b33353876860", "value": "6daed45686d4904853d69e9d004b13e26e4572b6c1a523971d1d2bb904359047", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa82955c-9f4a-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618642860, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618642860, "uuid": "de5bf5c0-8fa8-4567-9d11-e7228e6a56f8", "comment": "Malware payload (Dridex)", "value": "96b3bf5937a52789cebd0ecc22712e9b", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618642860, "uuid": "7b9ff9cb-02ab-483e-84fa-606b014edfa6", "comment": "Malware payload (Dridex)", "value": "6e41fa78e7c1f22353b844bd485e507af2575c47422341b3b75fb859d2ce6080", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618642860, "uuid": "8a928aef-7f93-4a4d-8baa-3c2f97e4a2d5", "comment": "Malware payload (Dridex)", "value": "e8569b94e0071e2cc562974d993387c92e0954d1", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618642860, "uuid": "f1388d9c-dbd9-4232-b8cb-0ea781393e4b", "comment": "Malware payload (Dridex)", "value": "089d268a29cfc4f2519dbcb33231d5d95fb4828f6f1a9e393674ddda4dd6b315d49a789dfbf172d3e3ba28261ad5152b", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618642860, "uuid": "4752e096-62b4-4792-9ad7-d520d9f6346d", "value": "7FF3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618642860, "uuid": "bfdc8518-3938-4d3f-b224-90a1205e044e", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618642860, "uuid": "5e0552de-dc97-4619-bd16-ed8ccd806ea5", "value": "3072:VmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:0Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618642860, "uuid": "ab75eaa7-f22f-4240-99a8-a334bd20eb94", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618642860, "uuid": "50d94f23-357c-44f8-af0e-578e9849e07b", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618642860, "uuid": "4f251b2d-2900-4a2a-9846-8dc414122fd7", "value": "6e41fa78e7c1f22353b844bd485e507af2575c47422341b3b75fb859d2ce6080", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe2508e1-9f2b-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618629686, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629686, "uuid": "6295b05f-f202-4550-bfea-d4f55649ae34", "comment": "Malware payload (Dridex)", "value": "1fba65744f0061a0f18d8eaae784f286", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629686, "uuid": "5eb7a27f-bd41-4d78-b787-e81ed6950962", "comment": "Malware payload (Dridex)", "value": "6eb0d3ab636ebc84881f74c3d46f424d0aa7be86d2db548a58e46c28ccc9701d", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629686, "uuid": "75c86acb-79d5-468f-8f57-0c69c20e6628", "comment": "Malware payload (Dridex)", "value": "ea16aad34f9ea04398dcf5474abc8341a4446769", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629686, "uuid": "f8fc5b5c-c3fc-4b63-9fb6-190f969715a2", "comment": "Malware payload (Dridex)", "value": "afb9a5ac4ca751f309bdd85cd34d5a8ff868fe5455c417b7cd883045589f3acd20e8b21427399632bd12a9b304670ff4", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629686, "uuid": "8847fc1f-c74f-4185-ad2f-1f7c19afc9b1", "value": "08F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629686, "uuid": "5b488201-1bcb-4549-b303-71ee52676354", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629686, "uuid": "1b7880ce-aada-481b-b6ec-9c7af1f0ee21", "value": "3072:Hlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Hlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618629686, "uuid": "926362c0-5dfd-4598-a142-347a6889e6b3", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618629686, "uuid": "52575419-f201-463e-8282-c10d9b058192", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629686, "uuid": "3f6a579d-6858-40d3-89a1-8950772e4979", "value": "6eb0d3ab636ebc84881f74c3d46f424d0aa7be86d2db548a58e46c28ccc9701d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4873584-9fbc-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618691920, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691920, "uuid": "8411dfe4-de01-4280-adc3-b15bd816fadc", "comment": "Malware payload", "value": "769fcd36510a768883ccf0d39e19bfee", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691920, "uuid": "c85b92bb-0840-4ed5-8378-a3d7c31e9b86", "comment": "Malware payload", "value": "6ebdc8237bf3e328ecfb3b58a85ec02ba5ba6eaa0ac83e335763e1e261d724c1", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691920, "uuid": "bc3f2362-1adf-4a64-823f-25d8c56b6513", "comment": "Malware payload", "value": "c17575fefc922034decc60d0c58a7f3cccd0d2fb", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691920, "uuid": "f1aee9a1-0404-4e8d-ac82-2d3b51b0b72b", "comment": "Malware payload", "value": "17107c387db7123383a644fff1ce14e682efd9c7c8d229db1da4e5e3ff0309ff722ae2bc0133a2d9bd97ea1b5055d260", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691920, "uuid": "e7ba7676-b30d-424e-83ac-0fceab5fd543", "value": "61F3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B496B1FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691920, "uuid": "9fbdabaf-4221-4348-a3a7-ab740ccd7cad", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691920, "uuid": "904778a2-424b-4880-8c66-8e1ca1367e43", "value": "3072:zA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:z3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618691920, "uuid": "bf8ce05b-0cf7-44e9-b7f9-52e423e50ad1", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618691920, "uuid": "faa95f2a-38b6-4bab-8d02-99ac4e876834", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691920, "uuid": "d93ef12b-ffc3-4320-9071-2383024374f1", "value": "6ebdc8237bf3e328ecfb3b58a85ec02ba5ba6eaa0ac83e335763e1e261d724c1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95f5ee09-9f47-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618641537, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641537, "uuid": "cde4a96b-83d0-49b9-99ce-9e3206711bd7", "comment": "Malware payload (Dridex)", "value": "b41ebf40c28fa0328bce785b978bbce6", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641537, "uuid": "c3c5ab19-0e14-4aac-86f8-d98c86b53b2c", "comment": "Malware payload (Dridex)", "value": "6ec40132f8ac842287758629fbfe0bf9c0416c50c7e31d5382911859d52e5342", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641537, "uuid": "f80bd98e-8f88-47f9-b077-0852dd766bdc", "comment": "Malware payload (Dridex)", "value": "292c92f574c6fbc2230d7b427a2fcfaebba9b3fc", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641537, "uuid": "868f42e9-b737-491b-82f7-c911f676d9f5", "comment": "Malware payload (Dridex)", "value": "5115d545e4d8a06a516eec0be69c7c832cd10c517b2dbd5ffdcd098fd8039d53bb2751bead2183d4754667df2c635056", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641537, "uuid": "c3780201-7db2-4eb7-a313-898f9c6bef6d", "value": "F3F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641537, "uuid": "01f84a13-3601-4fe0-b664-7df9436d1953", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641537, "uuid": "95c9e7be-c934-4daa-ae42-ba5cb469445c", "value": "3072:mlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:mlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618641537, "uuid": "00aa98e3-f57a-4973-b63b-ce95e610eb33", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618641537, "uuid": "94755e6e-16a1-42f8-bdc2-8d6b32830b12", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641537, "uuid": "72fd15f4-53a3-4962-91ab-a971953893d7", "value": "6ec40132f8ac842287758629fbfe0bf9c0416c50c7e31d5382911859d52e5342", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3991d5f6-9f81-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618666293, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618666293, "uuid": "43b35222-33ba-44f8-8767-5e1b608a2e9a", "comment": "Malware payload", "value": "131c88bfd2b945ff33881d3cc63a5474", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618666293, "uuid": "61f665b3-884a-46c3-9677-d39e07a49372", "comment": "Malware payload", "value": "6ed80fc62eea05723b9590c597fd04b4d5fb5ce39d0df947754de95c7b9be180", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618666293, "uuid": "873ef232-1a34-4704-9ad8-b20d6eed62bb", "comment": "Malware payload", "value": "305bbcb09ccf087b9b111874b7498c69dbd14c39", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618666293, "uuid": "b1f72add-ac3d-4cfc-983a-645b5bc0aa6e", "comment": "Malware payload", "value": "b94af999b2e919fda2b62329371cdcf765765f2003854ee950473095693e3681cd23a1c37ccd51066c4a97c7e7606f8f", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618666293, "uuid": "1e9476a2-75ee-4f72-bbae-3f0edbc27429", "value": "E0F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618666293, "uuid": "99604f12-cb31-43f3-aa26-88980b405f4f", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618666293, "uuid": "421f0c67-737a-4912-ae94-9cbeb98d8e67", "value": "3072:SmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:DLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618666293, "uuid": "ba32192b-a3ea-490c-9b89-469fd6dcfa40", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618666293, "uuid": "ea004d2b-4869-4ee6-8d80-79dda6d81a13", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618666293, "uuid": "b4f7926c-0638-477a-94bb-b5b5a6158729", "value": "6ed80fc62eea05723b9590c597fd04b4d5fb5ce39d0df947754de95c7b9be180", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9a21ce5-9f36-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618634268, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634268, "uuid": "a09e00d8-dab9-4253-8d12-5fd567f2c3d5", "comment": "Malware payload (Dridex)", "value": "bc6fb76e157029b7c9e68a16ffd63b20", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634268, "uuid": "f5b5c152-559e-44c0-80b9-68768b46ec9d", "comment": "Malware payload (Dridex)", "value": "6f204dd34e934d05db1fce12da2fd8d7c581f215a0388476ef218020272f177f", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634268, "uuid": "69e58b8b-0340-4c6b-ab36-6a3b220c64fe", "comment": "Malware payload (Dridex)", "value": "5aa8a70a54932fa4d342f80dac3f1205f40e9fd6", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634268, "uuid": "50a385b5-78a6-494b-8a87-7ff45529d302", "comment": "Malware payload (Dridex)", "value": "278c9aa67818470374a9869e031399f8f7853c71b5089f13d262db2c690ccd13de4c1fd900a3b4740add40b9db5396c3", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634268, "uuid": "c0a4fa99-6575-47c2-98be-0cea4f50cf60", "value": "CEF3D088CBB3E4E6EFB3D37866F85E1B461174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634268, "uuid": "130d6217-26d0-47b7-ae47-c3f4e65b8c86", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634268, "uuid": "e5b762bb-b056-4b42-aa24-7c503133d2f2", "value": "3072:5mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:oLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618634268, "uuid": "c3dc338a-34bb-444f-9bcd-dc2de961813f", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618634268, "uuid": "947d5e02-90c4-4a79-a344-ac7f575a57c9", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634268, "uuid": "b3ba4583-c50b-4adb-afe5-b8df1a9431c7", "value": "6f204dd34e934d05db1fce12da2fd8d7c581f215a0388476ef218020272f177f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2d37d41-9f7f-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618665691, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665691, "uuid": "7ea42bf6-4f17-4d92-9336-98463fd9bc9d", "comment": "Malware payload", "value": "b8de6a2c254de8d3f08f38ead396d303", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665691, "uuid": "6c31a6db-7756-4bd7-be8f-98d17dcc13e8", "comment": "Malware payload", "value": "6f3481eb6708a59edc06e2bdd6c2cd97c3989bd753c05cb5ab438932cf360c3c", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665691, "uuid": "ee8997ea-91fe-4295-8afe-8c518252934d", "comment": "Malware payload", "value": "e5b3adc7cb4c11081f37ea7cf6822e145cea4cbf", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665691, "uuid": "2eaadd1d-5d77-4554-b762-590ad92d616e", "comment": "Malware payload", "value": "86d5c8f51ef5341545992f216e516753312fd82e52a4030a1d1d9dceaf6d07730bed054713be68ae21eb45c7887caf0b", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665691, "uuid": "355df418-163d-4a4e-9318-60a7044060c1", "value": "20F3D088CBB3E4E6EFB3D37866F85E1B561174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665691, "uuid": "fe260387-340c-4a1b-a150-9bbeef3c59aa", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665691, "uuid": "f54baf43-a63f-4d44-84b1-1d0ef304b425", "value": "3072:pmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:4Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618665691, "uuid": "e7396536-dffa-4474-99b6-80769b73b917", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618665691, "uuid": "1727e00b-a263-4fc4-87b4-508b4ab662f8", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665691, "uuid": "2d1d544e-00d1-4eab-b318-46287e4ae267", "value": "6f3481eb6708a59edc06e2bdd6c2cd97c3989bd753c05cb5ab438932cf360c3c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66cb91ad-9fa3-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618680971, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680971, "uuid": "cf3cb026-05d5-43e2-97aa-8ad1cbc11f70", "comment": "Malware payload", "value": "f2e9bfbca3eb42ab7c6c259854ed75f1", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680971, "uuid": "52b48eb9-fd66-4c6f-a423-4beb97279321", "comment": "Malware payload", "value": "6f393cecbfc90f6e93e386ee4c84b80540a8948ec5c7208900ecf91ebdcb3c03", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680971, "uuid": "3dfa19b1-3467-4b3e-b645-93410092038b", "comment": "Malware payload", "value": "089cf6721d37fcfa4d135cdb272b820b23ebb0cc", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680971, "uuid": "5432f956-8243-4ffd-8827-d1f2586b155f", "comment": "Malware payload", "value": "e50ad05e2fd58fc91ee79704d9b6d563d70ceab5433f8d252df042fb7bdca653224409c89e5950eb26fe34c2417d2643", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680971, "uuid": "e099d410-adab-46f8-b4d8-2a92b89e248a", "value": "E1F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680971, "uuid": "88629631-6b47-475f-917d-450712673e42", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680971, "uuid": "cdf40d6c-b54c-43b1-9071-c91ccc262acd", "value": "3072:zmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:CLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618680971, "uuid": "6d35cbf2-1891-4dd3-a2e2-c374e6d9a7bf", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618680971, "uuid": "f8579fc6-4672-4948-8753-590dded2e167", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680971, "uuid": "4f287a71-41b8-4865-b242-d7b07d1e5ca3", "value": "6f393cecbfc90f6e93e386ee4c84b80540a8948ec5c7208900ecf91ebdcb3c03", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d094c8ed-9fd0-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618700476, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618700476, "uuid": "eeb516c9-bcb8-48d0-9755-ae8d95eef5d5", "comment": "Malware payload", "value": "d156e022785b115ef12368261841aa68", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618700476, "uuid": "6d771bf0-4251-46de-b2e1-1812d2b09766", "comment": "Malware payload", "value": "6fa97e3ecb32f46100c0d6785865e4f8b5925813199178d8121784a88344cb01", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618700476, "uuid": "76acbcc0-c1e3-4343-b35b-0ba3bd6d4b0e", "comment": "Malware payload", "value": "91fa2af9e8f85272fcf95b3bef6f382e31df3602", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618700476, "uuid": "047c499f-eefa-4f70-8bac-0f4778323f79", "comment": "Malware payload", "value": "92eee36391a70d31d57032b3bc0ce1c696973e01230292807d943b5af0882e2247c9aea75f779f01c6effa679b6b2435", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618700476, "uuid": "74b849e9-0c22-4ec7-831e-2765fcd93a64", "value": "3BF3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618700476, "uuid": "0a7d769a-4780-40f9-a9dc-1d8325ea5b2a", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618700476, "uuid": "5972a648-623e-4135-8a65-a0b85b71d4c4", "value": "3072:imNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:zLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618700476, "uuid": "96f1d60e-89c6-4b88-ae18-07dc1557ae45", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618700476, "uuid": "df52e67a-ba52-4c0a-9289-a49936a3def6", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618700476, "uuid": "3dbf7233-fb5e-4a19-91f2-e94dbdac9625", "value": "6fa97e3ecb32f46100c0d6785865e4f8b5925813199178d8121784a88344cb01", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a86c6f80-9fb3-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618687953, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687953, "uuid": "eee17015-8c64-4e6d-8206-74f77a748c2a", "comment": "Malware payload", "value": "76ff565522bf61bd40d49a4c086f980d", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687953, "uuid": "31be37fc-5296-486b-a1a1-8799d29443e1", "comment": "Malware payload", "value": "6fe57e022f0f90f8924799d0b0176337107f19c84f67821d80e1ec3294e9c195", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687953, "uuid": "1c292a61-cf0c-4c2c-ae9d-87c2e1b5e069", "comment": "Malware payload", "value": "85b8d610dbd3380d820cde11be37f5f05c6b21b7", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687953, "uuid": "8242ced4-7312-4910-b762-d07ff5b0c324", "comment": "Malware payload", "value": "ca6d5ff13ded566f00fef74fa0036004988dd2392a5aa41b9f44bdaa7b67e6f69c65a2068967ad618a1b3955d60a70df", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687953, "uuid": "7831371e-57ec-430b-abbd-c794ee324015", "value": "80F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687953, "uuid": "80f25f84-969f-440b-a5e2-a47e22f761c4", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687953, "uuid": "64ac97e5-b139-42a8-a6ca-3e6355e262e7", "value": "3072:pmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:4Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618687953, "uuid": "52e716b9-014b-464d-8f16-895e95209f1e", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618687953, "uuid": "65ec3114-84dc-46a5-9da4-ef46fac75119", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687953, "uuid": "f11bbb1e-60b2-4d29-8848-c3952763b611", "value": "6fe57e022f0f90f8924799d0b0176337107f19c84f67821d80e1ec3294e9c195", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f29dc2b-9f54-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618647136, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647136, "uuid": "582891c5-ba85-4f9d-889b-a488e98195ac", "comment": "Malware payload (Dridex)", "value": "487d0ff610b13f36fe0fefcba1320298", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647136, "uuid": "ac33f9c3-91e5-4dc8-bf3f-c7e867ac4eb2", "comment": "Malware payload (Dridex)", "value": "6ffde091622a681be61d43ce3b257fffa37d2017b106f2cd20adeb25c4f76543", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647136, "uuid": "88bc6e87-856c-454b-82ae-1bfd9d4129f9", "comment": "Malware payload (Dridex)", "value": "0b61e7a042be58719cd58017b7e1c3c6223b0c7b", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647136, "uuid": "80df5c60-e86d-44c4-9271-a2c2b28f97a5", "comment": "Malware payload (Dridex)", "value": "5a1dcb06a558f11b20cd47b99ff4d9749032b0e0cd347da4e898cbe0adcbc038797aefef515d927a1e648c19618d999d", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647136, "uuid": "7335fdda-d711-4a62-a35d-6b0638b7a17f", "value": "D0F3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647136, "uuid": "ee56fb72-19fd-44be-8ce1-611e73dd2fe8", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647136, "uuid": "336074d2-f874-45b4-a64d-85a73930118e", "value": "3072:JiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:6eAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618647136, "uuid": "ffe3286f-8a65-4b48-bebe-23c0977b8dda", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618647136, "uuid": "ca1e329d-02ec-4e76-ad6c-a8f039b9291a", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647136, "uuid": "8f6f3c10-88e2-433e-b5c9-36f8ee4b1376", "value": "6ffde091622a681be61d43ce3b257fffa37d2017b106f2cd20adeb25c4f76543", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6af07bd5-9f61-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618652631, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652631, "uuid": "69263555-4066-434d-959c-db434fac33ca", "comment": "Malware payload (Dridex)", "value": "f49583328b486234be2de3d7318f7615", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652631, "uuid": "b8015f78-3261-4345-a3bb-0d1dd5d13997", "comment": "Malware payload (Dridex)", "value": "703611df567697f3b8ab6863ab7158d080da32873fb2049233dddcb6e77cdfaf", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652631, "uuid": "382c8015-160b-405c-a721-c2d75542f12a", "comment": "Malware payload (Dridex)", "value": "2064ae34d8730ff44f2b3ad12a2df63be3ecfa98", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652631, "uuid": "96af1157-210d-40f2-9a3a-3defeac9e8ea", "comment": "Malware payload (Dridex)", "value": "04f1d7986dbadbffd02985cc2ae72c7db7aa3e7a8c0f8d94d8ccba2ea073c772bc6e4f6d773c14d9c1849d3db5c0cd62", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652631, "uuid": "baecf7b7-7a52-4971-8e6b-a1145f0d7e90", "value": "5AF3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B496B1FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652631, "uuid": "5a9ec476-e070-4681-b5b8-5621d8dbcb8e", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652631, "uuid": "05a47e4c-5283-41a3-a599-19c4f8f7966a", "value": "3072:GA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:G3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618652631, "uuid": "cf0fe45a-05d1-4e70-b28a-d68f6b6fc0fa", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618652631, "uuid": "5210a986-827b-4963-829e-cb71bcf15976", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652631, "uuid": "5908fdaf-2904-4c74-9fcc-2c268eb26d0b", "value": "703611df567697f3b8ab6863ab7158d080da32873fb2049233dddcb6e77cdfaf", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ef735c8-9fd4-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618702084, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702084, "uuid": "041b1ec0-ee9b-4910-896a-eec6fde810e8", "comment": "Malware payload", "value": "bdf4cf7fdb40ba510f8db3a32c1a4afe", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702084, "uuid": "ae989f33-fa59-40e6-ad54-3a156f15ff23", "comment": "Malware payload", "value": "7057f9ea12ac1e601bd970511c04987888dec26066be57e123aa28b5233b2381", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702084, "uuid": "3c8f8192-996a-4a36-925f-03e03ae39fd7", "comment": "Malware payload", "value": "44c485bb28fb19b8180fd0549691838a92dd253f", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702084, "uuid": "17e7249a-7ac8-4628-a9d2-889c1aad05bd", "comment": "Malware payload", "value": "2de5c7de4998b7dfed49a94310990ad43e9215e3ab72086feae612df4bdeffae5c680943eb67326cfc6c7edc835ddeed", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702084, "uuid": "72b8e03f-de90-4982-88af-af9b60331ea8", "value": "BAF3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702084, "uuid": "475f3c3a-46ff-4b9a-9541-9c6d00e46deb", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702084, "uuid": "757e8deb-7da9-413a-a3a4-b92dde6f1bc8", "value": "3072:qiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:peAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618702084, "uuid": "ba04d39e-bbc4-4bc6-bff0-4c7b4aa54597", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618702084, "uuid": "620e88d9-4e3a-43ff-b95b-6520189e3f9c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702084, "uuid": "06c69e54-c238-49b2-92ac-5d4f0fd431d6", "value": "7057f9ea12ac1e601bd970511c04987888dec26066be57e123aa28b5233b2381", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "805450ba-9f9c-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618678008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618678008, "uuid": "b1e7188a-4632-44db-b423-8bb3959fa507", "comment": "Malware payload", "value": "2459018c403ec79e164ac92062db5031", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618678008, "uuid": "c09ea2db-cb39-4d8c-9df2-517a6cce8b8c", "comment": "Malware payload", "value": "70d1027d6b65228898cfe82201fdcad39b3e0f4834ccfa23391a1450971450e2", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618678008, "uuid": "ba03f202-3fde-4856-b840-b0662d7ec3c7", "comment": "Malware payload", "value": "e1a37c6a3117e35f08862b7fc030bca11b7e8a84", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618678008, "uuid": "e9533964-ffd5-4364-8094-381b14f56cdb", "comment": "Malware payload", "value": "f55c9772725da7835e9a60efe19df9c44bb9451f583cd1fff2ba5acfd143b5adcf2480cc200c39ec60a98a6236314845", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618678008, "uuid": "6abf675f-f369-4b5c-b9fd-225979d7d854", "value": "CBF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618678008, "uuid": "da77f659-d9ef-4ceb-a79d-852928a23c2d", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618678008, "uuid": "a72c973c-9466-4cf2-bbbc-3998dc6e1933", "value": "3072:cmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:FLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618678008, "uuid": "f170d28f-cdda-43d2-ad18-b6d534faf4ea", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618678008, "uuid": "bcdd4f7d-814a-43a7-8014-a6cc3240cec1", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618678008, "uuid": "8c85aadc-88d0-4223-9cc4-8f828f243aa5", "value": "70d1027d6b65228898cfe82201fdcad39b3e0f4834ccfa23391a1450971450e2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02c66a2f-9f6f-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618658470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618658470, "uuid": "e1d55187-d48d-4197-863b-00a79de24714", "comment": "Malware payload (Dridex)", "value": "f0b18091aabfb42a10c9346214b9c431", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618658470, "uuid": "a600924c-6a31-41de-8139-5297ab31eb4a", "comment": "Malware payload (Dridex)", "value": "715eaeab46213697225b36857314eee42913585ea4b05a5a2823c7cd903ac9f6", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618658470, "uuid": "68f1e59d-e2c0-43e0-b96c-cd75f167852d", "comment": "Malware payload (Dridex)", "value": "c73cd5b287b07a9b00a2f528099465a7c8009e93", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618658470, "uuid": "c300c223-5770-405f-9023-f4e4f1d914a3", "comment": "Malware payload (Dridex)", "value": "245fe88c86764925e21c4e4e673cbb6788d433f853478805bff0d6642ba8a5c28fd73c0dac7395dc7d7dca2c5fff80e6", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618658470, "uuid": "50156831-04a0-464e-b919-7ae7c67f31a3", "value": "30F3D088CBB3E4E6EFB3D37866F85E1B561174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618658470, "uuid": "4af26bba-bf8e-4532-aace-71b37885c031", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618658470, "uuid": "53dbbd2b-488f-43fd-a309-156dbb3d111a", "value": "3072:emNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:vLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618658470, "uuid": "aeead36d-113e-4128-a4e6-441244085198", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618658470, "uuid": "080ecc84-aff2-44f5-b2d8-f2644fddea5a", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618658470, "uuid": "19b65c5a-b816-4428-9e98-d2310dbcc16c", "value": "715eaeab46213697225b36857314eee42913585ea4b05a5a2823c7cd903ac9f6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe20c994-9f56-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618648154, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648154, "uuid": "9ae6a3c9-16db-43a8-9b2a-96b8af3bfca1", "comment": "Malware payload (Dridex)", "value": "22ee68df1098264e8424aac8bb477322", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648154, "uuid": "c6f85b5b-c939-4ea0-95cd-a2803f246445", "comment": "Malware payload (Dridex)", "value": "716be9cc485ad9f7b4769d72ddb15d64dc86f0840c5c14a78ae02fe72d9871c7", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648154, "uuid": "2c12e983-cfe2-48cb-8c69-88d3b74e59f0", "comment": "Malware payload (Dridex)", "value": "ff0abd9578cefbd66ab63459a82bf511c83f7194", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648154, "uuid": "6ee41438-e41b-48e1-88b3-8b44975ea24a", "comment": "Malware payload (Dridex)", "value": "a64a349de29408602cbbe5c46681aa48326083ed0b8ec86ded9db43e9f0e187012d1d34bb28f66495d6b61907a20433a", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648154, "uuid": "936932bc-b7e0-473c-a947-81c3ed839814", "value": "8FF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648154, "uuid": "b3e97df6-5de9-40cb-998d-51be831eb657", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648154, "uuid": "baa39328-17b6-4486-835d-2e960c69983a", "value": "3072:vmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:uLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618648154, "uuid": "ebd7c4a4-6b6d-4ffc-9e89-81e78eb72ce1", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618648154, "uuid": "77721b00-f08c-4da8-a1e6-e70653fede5c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648154, "uuid": "bfa64273-6829-4ab8-af61-4296aa71872e", "value": "716be9cc485ad9f7b4769d72ddb15d64dc86f0840c5c14a78ae02fe72d9871c7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b67c03aa-9f4f-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618645027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618645027, "uuid": "ff0398a9-83d7-4a50-9e9a-7ffe28e7b280", "comment": "Malware payload (Dridex)", "value": "fa3fccafd31ad35587791a4c8223628e", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618645027, "uuid": "c6532b7a-a1ce-4ed1-9acb-cfdbb6b5f16d", "comment": "Malware payload (Dridex)", "value": "7237fed3ef037e541534821dbd274f1b32b4eff913eda5894d3865435372a22c", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618645027, "uuid": "765d1765-2de2-4061-b2e3-12ad94c02e14", "comment": "Malware payload (Dridex)", "value": "903a64fee41b41a24dbdc8f037c8d2498ed8703f", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618645027, "uuid": "27dd0daa-9aa8-4965-bd77-e3f7ababdcf3", "comment": "Malware payload (Dridex)", "value": "d25a892637a501157c3f9ebe621c2b2b0a492ccf1e6a4f18701c231e22e13211d425e287f676f8b98bd80793fc9d1c17", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618645027, "uuid": "a0a2fce0-1ffe-4ea5-8ab8-05dea62ecef8", "value": "4DF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618645027, "uuid": "1f12b762-0cf4-4bf7-9ecb-b785aad9ca7e", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618645027, "uuid": "60918f90-caea-47d6-9850-a66da53650cd", "value": "3072:Klpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Klo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618645027, "uuid": "5c6de43d-1453-4c23-a014-fc9018275605", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618645027, "uuid": "18f0f21a-04bd-4743-bd38-f8e1b1c96c23", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618645027, "uuid": "34b79bba-d2c5-4897-97d9-fcfb6a79fd3c", "value": "7237fed3ef037e541534821dbd274f1b32b4eff913eda5894d3865435372a22c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "624cb319-9f21-11eb-abe1-42010a9c0039", "comment": "Malware payload (AZORult)", "timestamp": 1618625129, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618625129, "uuid": "93c379d1-f64b-4136-93e7-a2d97e2e3d48", "comment": "Malware payload (AZORult)", "value": "f68c49a6959e2e612e2429833f3e5c49", "object_relation": "md5", "Tag": [ { "name": "AZORult", "colour": "#403640", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618625129, "uuid": "ed8d00fb-8c14-466b-9f62-395adea58ce1", "comment": "Malware payload (AZORult)", "value": "723d9cc9705952d934ead57091edc2d07cde8a0384381e5f10e89cf994699e31", "object_relation": "sha256", "Tag": [ { "name": "AZORult", "colour": "#403640", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618625129, "uuid": "ada0a567-5b71-49cb-902a-cd02ff67e28b", "comment": "Malware payload (AZORult)", "value": "acbeb4a89781b35affdc685090f044c6ae562318", "object_relation": "sha1", "Tag": [ { "name": "AZORult", "colour": "#403640", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618625129, "uuid": "40b3f027-e392-41d1-8bb0-3ec40252ade1", "comment": "Malware payload (AZORult)", "value": "f8bbf17b498100c7c0dd1700303db6303d9c54c67ec2205e04b90bffd4dea0e14beea2c4b06d89d63f89a9e334f3d992", "object_relation": "sha3-384", "Tag": [ { "name": "AZORult", "colour": "#403640", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618625129, "uuid": "aafd4968-8d77-487d-90f3-a0cb70f86ba3", "value": "4DF3E111757180B6D496663A8836C3E2A72EF83207B5E6077BA8C77A8F333D1493E745", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618625129, "uuid": "b113bf66-7397-4645-a594-bceda157c69c", "value": "5e50aa5a9d7e0c4dd7a2086a856d410b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618625129, "uuid": "a70584ff-8d2a-48dd-afd6-3fdffdd658a5", "value": "3072:UGXpx5kZYUbEg9FppkqQU2epsRGLkQ6+qhPvBk0SASrDpC:UeiZNY6uUpsYLkV+qhBnSr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618625129, "uuid": "f15b9f03-d475-4831-b079-fefae81e537b", "value": 172032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618625129, "uuid": "8fe0685d-9c1f-45aa-890a-a2f7d8c6676d", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618625129, "uuid": "47b0006d-89e8-48c5-82a1-18dbf196652d", "value": "723D9CC9705952D934EAD57091EDC2D07CDE8A0384381.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1056d483-9f5d-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618650761, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618650761, "uuid": "300d3479-1145-426d-8d36-d96ec62bbf4a", "comment": "Malware payload (Dridex)", "value": "5b361317f7bb74872868361ba8b2708e", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618650761, "uuid": "b724ad7c-af5d-4974-8f3d-f5efa59cce6b", "comment": "Malware payload (Dridex)", "value": "72a89e4712261f0ca13090d4e0b1b5193f82695589ef6dcfaa9fcc8a7eeb4704", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618650761, "uuid": "cac6dca7-50d1-432a-9d8a-6db3315c6e42", "comment": "Malware payload (Dridex)", "value": "b26c1c963f2a10efc41bb4de53415e8358394309", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618650761, "uuid": "04c19b1a-4482-42f6-967d-21ad813144f4", "comment": "Malware payload (Dridex)", "value": "d4c510f0ffe58a0474ed95a6741cd5ca8318638b060116c746d8e6cfd6843c2e825afdbeeba36f1d3be3e9a9b5b96a09", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618650761, "uuid": "8e39a396-88c9-42b8-a13a-64afc8b3b41e", "value": "D3F3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618650761, "uuid": "32a37ae7-ca7f-4f31-9180-0be833c828ec", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618650761, "uuid": "ffec2f81-5816-4e47-b83e-08b076d139cb", "value": "3072:6iFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:5eAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618650761, "uuid": "9eae26b3-11c7-428a-bd91-f1c452f84777", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618650761, "uuid": "d9243688-64a7-4eea-a5e6-3a8a8921491f", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618650761, "uuid": "471b6976-af42-4855-b7ca-a009147610f3", "value": "72a89e4712261f0ca13090d4e0b1b5193f82695589ef6dcfaa9fcc8a7eeb4704", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "244d8914-9f28-11eb-abe1-42010a9c0039", "comment": "Malware payload (DanaBot)", "timestamp": 1618628032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618628032, "uuid": "9cc003c0-0ad6-404d-8291-3d001e938ca0", "comment": "Malware payload (DanaBot)", "value": "aa444cd99154f376edbbc9c3effa1f66", "object_relation": "md5", "Tag": [ { "name": "DanaBot", "colour": "#B9DC92", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618628032, "uuid": "5febf5a9-63bf-47e6-98f1-95cb8d141737", "comment": "Malware payload (DanaBot)", "value": "734f6783c377c10fd6816563b4eaf0a0c1f5fd30d0ceb271d5df53eabf553a49", "object_relation": "sha256", "Tag": [ { "name": "DanaBot", "colour": "#B9DC92", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618628032, "uuid": "12e5c7c7-a409-40f0-8dab-ef41984eb4f4", "comment": "Malware payload (DanaBot)", "value": "3168456601e3aa7436ae521bb43d9af77171435d", "object_relation": "sha1", "Tag": [ { "name": "DanaBot", "colour": "#B9DC92", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618628032, "uuid": "b05bb16e-fb87-4e65-95c3-aadf86f7c671", "comment": "Malware payload (DanaBot)", "value": "9bec772794c31cef772fcf8adfe7d7fc7a31cbad835d8564b2a211d466a118e66cdcfdc50bcdb67e2b13dfd36a8423ed", "object_relation": "sha3-384", "Tag": [ { "name": "DanaBot", "colour": "#B9DC92", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618628032, "uuid": "e64a4b01-f919-4800-bfaa-2a5d48256b9c", "value": "6B56334461B0D171D48E5B74C238C6B2C9BA35BB2D06DFC6AFB6E8788F211E66521733", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618628032, "uuid": "2532c3d2-fc15-4c81-b8d2-e249b8b79e11", "value": "192738ec1a66db321b02680b2ef64e0c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618628032, "uuid": "78c719de-7e08-4fb3-b2be-71e2acb9aec0", "value": "98304:yvOw5OljV8rEJoeWjcdNL7/RYKvPJMZnEpe4u+hN5SXqNjf72ZEiXyqXMWsu5:yvr5lYpTRYKMEpeieXMTSSiCms", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618628032, "uuid": "8e778a7a-5442-4197-a654-872f209fefc1", "value": 6204928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618628032, "uuid": "c661c64a-93f5-471f-8ee1-bd50cbafb564", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618628032, "uuid": "5b45d7ec-5a4b-4dc5-96fb-cbf23e9abb35", "value": "SecuriteInfo.com.W32.AIDetect.malware1.12654.15342", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ac9b072-9fc5-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618695581, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695581, "uuid": "a92ab590-7279-44f0-b111-37cf22cf6c16", "comment": "Malware payload", "value": "1d9c93d5f9d48778a6f65ee8f606fc84", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695581, "uuid": "2a86337e-b5ad-42a8-a2ab-efb1217e32f3", "comment": "Malware payload", "value": "73bbe3b346f5260f1ea4acdcba328900df8a81d535b972db61586f14445b6679", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695581, "uuid": "92f95476-f4e2-4e55-b64b-fa5ffc851f6f", "comment": "Malware payload", "value": "0ad67c5dc49e701dddb2984d1994f9adeb25555b", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695581, "uuid": "341fc3b5-e4f9-4553-bb68-945495a8b6a7", "comment": "Malware payload", "value": "0c828323ff05de7cd51ab3eb34b3ca546e37cea5e8265665dc916a1b4db4e18eedc3027964ad4ce9435473ca50265813", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695581, "uuid": "89eb5148-d913-4bf0-a58a-d71ba6ddf2a3", "value": "BBF3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695581, "uuid": "1d60ed99-c2b0-44cd-b49f-b18d2bb85752", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695581, "uuid": "889d6cb6-4fb7-4f42-827f-fa34d4926c19", "value": "3072:4mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:hLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618695581, "uuid": "b4b755ff-3b40-4ab3-baeb-09b33c7da6b9", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618695581, "uuid": "39bb619c-efa1-4768-930f-4dfc09e049e1", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695581, "uuid": "b61531d8-c261-4d49-9593-4d13036fb093", "value": "73bbe3b346f5260f1ea4acdcba328900df8a81d535b972db61586f14445b6679", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53a7165a-9f29-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618628541, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618628541, "uuid": "b48f1609-c1d3-440b-984b-0e2d01912ea2", "comment": "Malware payload (Dridex)", "value": "0e066f0f932870e895d38bcb6cd79819", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618628541, "uuid": "33a691dc-f148-46be-a58c-7649ffb8424c", "comment": "Malware payload (Dridex)", "value": "74e25795c94bb55f7c3b11c4e29d2aecd8e2372a35858331377d4a178a2b3830", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618628541, "uuid": "f80c16ba-6dcd-4b66-97b6-beec9ff9746d", "comment": "Malware payload (Dridex)", "value": "0f58de5c4a4a62bea3e4ded1dd7c903deaadf926", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618628541, "uuid": "e976db9d-1153-4609-8d97-6b2777985c57", "comment": "Malware payload (Dridex)", "value": "5e77639133eadf89362db022528a131ca333fc7951604d10e4c7b69138f1457bff0eb2060ce3e205cc16740406de7a3b", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618628541, "uuid": "21542a85-65c6-4ed5-8dd6-c350ce7e2e4b", "value": "7EF3D088CBB3E4E6EFB3D37866F85E1B561174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618628541, "uuid": "c15a8ed6-3fa1-46c1-8051-dd5df4638fe3", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618628541, "uuid": "1d841084-17b9-4997-99e6-f830d4b5e65c", "value": "3072:pmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:4Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618628541, "uuid": "cbd2dc52-be23-4bac-98d6-761868f7ecf2", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618628541, "uuid": "c2b3b44c-e1e7-4754-a284-85150a3407da", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618628541, "uuid": "49adc1a6-e5c7-4cdf-ae68-16e69bdd7eec", "value": "74e25795c94bb55f7c3b11c4e29d2aecd8e2372a35858331377d4a178a2b3830", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e167fcd4-9f7f-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618665715, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665715, "uuid": "684d7041-6494-497a-a999-ef690a261e97", "comment": "Malware payload", "value": "8cc06d11b58983e8ebe4bcd673ecc07a", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665715, "uuid": "bdcbb441-c744-4236-a6b4-3f63a0b63eab", "comment": "Malware payload", "value": "74face21146b34973b28699278e40ea65533367b558b7df7f42dda76d1641f6f", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665715, "uuid": "659982ac-7ef7-4758-bada-b600c1377974", "comment": "Malware payload", "value": "a4ee5334f9f4a34b8d9cb1f27d4a1f8a060b9450", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665715, "uuid": "55a9aa25-d724-4f52-914e-c254392d8082", "comment": "Malware payload", "value": "53611f2a03b32e343591a6734b9ca05fc65faad75cc0d6beda66da002af67982c02d08816d382ba38a008179bc89afa2", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665715, "uuid": "e8f62325-1933-495e-b5b6-280e8b7038d5", "value": "91F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665715, "uuid": "a14094ba-53f1-4c1f-873d-191e9cf675f1", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665715, "uuid": "b15b7c7c-d334-4e61-96a9-c6159d066d7b", "value": "3072:jmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:SLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618665715, "uuid": "ee358bcd-08a5-4bef-955d-b51e87f2b7eb", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618665715, "uuid": "687d091b-cd30-4c8f-afa2-a535f85512a3", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665715, "uuid": "eda4f757-38a6-450d-893d-59f0e69da865", "value": "74face21146b34973b28699278e40ea65533367b558b7df7f42dda76d1641f6f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a40a07d8-9f11-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618618368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618368, "uuid": "c4071f48-aca9-44a3-a38c-73698296ad83", "comment": "Malware payload (Dridex)", "value": "49779030d0f65fe5faaaa03a805fbc0a", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618368, "uuid": "c8c03537-9eb4-4ad1-aebc-23fbf26fcc9b", "comment": "Malware payload (Dridex)", "value": "75bec8518353d848a64698e272d1d87ef1fea77858e54a8ba1ca91286c7c1440", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618368, "uuid": "7b813f58-1a8a-44d9-aad0-745ca422157d", "comment": "Malware payload (Dridex)", "value": "fb155a35bf41e1f4de3c148ef08edae6dfb7b3b5", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618368, "uuid": "19968fd3-eb67-4c61-9180-a1686aa0baef", "comment": "Malware payload (Dridex)", "value": "a3125d5c5cf5df96576a634ec94565b2097f7deb7754662cb240d50950733f43ab85eeb0263f21b2d7db88e6f6e01eea", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618368, "uuid": "823e15c6-b346-460c-9df9-f2a70966b1ac", "value": "AFF3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618368, "uuid": "066b41e7-c376-4a75-8276-740f198514a2", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618368, "uuid": "868626cb-8cda-4ad7-9a5d-2f8aa273e640", "value": "3072:umNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:fLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618618368, "uuid": "d2046eb6-66e9-4f69-8418-a2ab41c5092b", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618618368, "uuid": "4a75c99b-d3e8-49ec-88f7-2f464019e960", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618368, "uuid": "6ce6ef5a-fa5d-4bd2-b1e8-27d9f51fbbfa", "value": "75bec8518353d848a64698e272d1d87ef1fea77858e54a8ba1ca91286c7c1440", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "470449a7-9f27-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618627660, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618627660, "uuid": "2f0ccaae-ed56-403d-bf4e-05addf9fbf8f", "comment": "Malware payload (Dridex)", "value": "f7c1ce2a8a34cb770a0b790aa16adcb9", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618627660, "uuid": "a78b18ae-9464-4d91-b06d-d13556801d90", "comment": "Malware payload (Dridex)", "value": "762f1cd9a5465b0df8aa116e44f2546fd799c18e8920c5d3422af9a25c5f27e9", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618627660, "uuid": "11e483f3-89e0-45d0-a3e4-417cb8e33a10", "comment": "Malware payload (Dridex)", "value": "0fea2f583a70b5cc3bb7156dee176d21cd313f03", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618627660, "uuid": "efb0bc96-1e8e-42b3-a806-4ee66a506204", "comment": "Malware payload (Dridex)", "value": "0a7991b9fa527399c7631a03296847314bec909147f5555cb84c6411cd39a3f96492e710789087edce35ff6d6f59d568", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618627660, "uuid": "12162883-b546-48e8-ad03-86d9182d6bf3", "value": "97F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618627660, "uuid": "22e2541b-1f59-436e-9907-8e72f3f20969", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618627660, "uuid": "47a57a90-3255-4fa6-9be5-043d19384f98", "value": "3072:qmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:7Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618627660, "uuid": "fa922ae6-8977-4e2b-ad7f-578b1d30fb45", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618627660, "uuid": "b8ce10b0-2114-4d86-9cdd-becff7cca5cd", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618627660, "uuid": "131f7046-5eb3-4856-997a-bc20d0ca46fe", "value": "762f1cd9a5465b0df8aa116e44f2546fd799c18e8920c5d3422af9a25c5f27e9", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b683ee0a-9f89-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618669938, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669938, "uuid": "9290a078-0d96-4dc4-af49-d50058ea35e3", "comment": "Malware payload", "value": "79f7498c622cf7fb2e45ad6015e4531c", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669938, "uuid": "3f83dca9-3e7e-44c8-9072-42fa05fdfbce", "comment": "Malware payload", "value": "76549513a3a0cc23f01041c6bc3880f8747ac14aaf80cac49f732516dafe7c41", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669938, "uuid": "93f61fbf-a0f1-4076-a7bc-78f6c31f4174", "comment": "Malware payload", "value": "69e5086e1a8439dba19a77d632699b68c5246105", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669938, "uuid": "a5bc9efd-475b-462d-a8e2-2c206a0b8e3c", "comment": "Malware payload", "value": "223c9555a44baddb601d1bd08282bff988bf5348dbf4a9387e3627613417baac3b9775d5f50815af462a5ef1eadb2519", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669938, "uuid": "9ef0909e-7a7a-4725-93d3-091da6be1377", "value": "0CF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669938, "uuid": "6497247f-b0ad-420c-adaa-66751d137d04", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669938, "uuid": "52483a33-2509-4c4e-a7df-61cd9669b383", "value": "3072:imNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:zLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618669938, "uuid": "36211f05-b168-4dd0-bd44-a49aef99a8a0", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618669938, "uuid": "c0aaa560-5157-4618-8c4d-5fa7c6f26cd2", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669938, "uuid": "0ed756fd-b896-4dfa-8d1f-f70ef0999e6b", "value": "76549513a3a0cc23f01041c6bc3880f8747ac14aaf80cac49f732516dafe7c41", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "026bc1c7-9f42-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618639142, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618639142, "uuid": "c18cf36b-7693-41ee-8929-f9a5eb2d20a9", "comment": "Malware payload (Dridex)", "value": "fb15015dc11692f971719292033b5ffb", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618639142, "uuid": "c041f29a-f415-4035-b8a1-5f9112426fcc", "comment": "Malware payload (Dridex)", "value": "76642925514583821193c4c0936a957d678ef5b27031c926ebb7c9dbd4f41c32", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618639142, "uuid": "dda68e2f-5c4c-48d9-9328-ccad80e30dc5", "comment": "Malware payload (Dridex)", "value": "a71d49f5844c045c6d0d3641c5a11828b90a0bad", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618639142, "uuid": "76a76d75-c21c-47b9-9fb5-1d4e5f262ccb", "comment": "Malware payload (Dridex)", "value": "5e34cbbc482b2ccb289a852ec9dceadc3fcfe5f806eb10d7507dc9e2ee416b291ef764f670b6dc63a29ace51e605a9ab", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618639142, "uuid": "e49169d7-5b5a-47b6-b512-25507d4d0d86", "value": "7CF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618639142, "uuid": "db0c3d43-0017-4033-a77a-1030ec604578", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618639142, "uuid": "a76742bd-e2ea-47bf-87ae-97154fed388e", "value": "3072:mmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:3Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618639142, "uuid": "e5ebc80d-3d48-479d-bc64-15dc68c34131", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618639142, "uuid": "e324c74c-07f2-465a-b571-7f090fd07a9c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618639142, "uuid": "6644aa25-1283-4e08-a9e8-f25834a1330b", "value": "76642925514583821193c4c0936a957d678ef5b27031c926ebb7c9dbd4f41c32", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac7a4da3-9fcc-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618698698, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698698, "uuid": "51bb4515-146c-4247-b40a-c6e2d69d75db", "comment": "Malware payload", "value": "c9eec477f4e1644069edfc37e87db826", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698698, "uuid": "eeb35e20-1ac8-418d-a60d-6e5aa09ed818", "comment": "Malware payload", "value": "767111e82cdcfff3e0a838d4741482ee6cc8aabb9f4e96fe9bc04f1b9cf29f4b", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698698, "uuid": "7faf3994-ba0f-4af9-8de4-096254d1fbbc", "comment": "Malware payload", "value": "1229e0bd0702eab774aafff5ea02407f6abdae14", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698698, "uuid": "b8dd5889-3a22-4309-9cf2-559675431a81", "comment": "Malware payload", "value": "175a78f92570449ed263adb4f0aa54e8b4c9c365e5e3a99dec0e78a7f66d6e33e9b56cc6b77b0a76a15d7f267af2a691", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698698, "uuid": "2f016340-c9e2-4821-bfcc-102652d63603", "value": "3CF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698698, "uuid": "2c6b1563-f2c0-4c3f-8ec5-d9e7dfe938ef", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698698, "uuid": "20a7e1fd-e4e7-4b7b-a6b5-e9da7930f645", "value": "3072:tlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:tlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618698698, "uuid": "c3d65b1f-8897-4614-8b0a-8cadf2a6f5b1", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618698698, "uuid": "9ecbcf0e-60d9-41e0-b3b7-56cfcf3c1dc8", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698698, "uuid": "cf72675c-9087-4b09-b657-298268ad68e8", "value": "767111e82cdcfff3e0a838d4741482ee6cc8aabb9f4e96fe9bc04f1b9cf29f4b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6776ee09-9f70-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618659068, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618659068, "uuid": "7258ede4-df05-46a8-ae93-2814ba9c276b", "comment": "Malware payload (Dridex)", "value": "bf989b04654f90d526d468deca7b39b5", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618659068, "uuid": "5da9daa7-edaa-4665-b674-abde17c6db35", "comment": "Malware payload (Dridex)", "value": "7772b4969aee133ec963b611f3f43f0e0d7c123c57e5ff60b71e84f8bd11569e", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618659068, "uuid": "f299cc90-35c2-4909-bb69-45a71e051fe6", "comment": "Malware payload (Dridex)", "value": "c8150a884bbde1a2d499e7a1571a532745796a4c", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618659068, "uuid": "1eb8b19e-189f-4ad8-8050-ce78de2630a9", "comment": "Malware payload (Dridex)", "value": "75ad954da0bb29e7084ad22c2a33a891674ef6d57a02e53641d59eaae2f2a333ca4a503bb3ca28771d028660f090185e", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618659068, "uuid": "8c901c8a-9074-4b82-a0da-f70c68d2c978", "value": "20F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618659068, "uuid": "cd19a350-7825-4c99-8fe3-23be6d6a52c5", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618659068, "uuid": "0b439da9-bc43-4c9f-b669-ecbab6842ad5", "value": "3072:1mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ULc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618659068, "uuid": "6d14dbac-3a5f-425a-8ed1-41a4ede0ffa0", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618659068, "uuid": "31aef9e2-af26-4f80-a0f7-d68e7aa39011", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618659068, "uuid": "c1ab6624-5435-49d4-b631-1ef7e2242d1d", "value": "7772b4969aee133ec963b611f3f43f0e0d7c123c57e5ff60b71e84f8bd11569e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "386254c8-9fbe-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618692490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618692490, "uuid": "321c9766-4320-4cc7-86d2-bc15bea4c810", "comment": "Malware payload", "value": "dff554496a7ed8188545d3dc3cf1ee69", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618692490, "uuid": "62d05660-ca81-4958-8353-252e49cc030f", "comment": "Malware payload", "value": "7806622f74be0efcd09286eeb9c9a4cf0b723bd3ff1d101e9e17033a38654e75", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618692490, "uuid": "b3069816-29b0-4326-8c3d-a7d915b34668", "comment": "Malware payload", "value": "c4b14b267575fd0fe22a5357654516a4d33096ff", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618692490, "uuid": "f23211b9-8d1b-486b-9be0-abff1921ecf7", "comment": "Malware payload", "value": "c9bc93cb7c988ab3b00e8a958ab60f9d9eb34c0623619ab95a0b087060156dd3d3307c5515c8d318b41332c227876693", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618692490, "uuid": "867d959a-df28-4073-9297-a871963d0a16", "value": "C1F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618692490, "uuid": "f3b70ef4-c00b-4672-8e0b-8e2b2887c89b", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618692490, "uuid": "7363f542-4250-4b79-87a8-cda2b8c29257", "value": "3072:BmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:wLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618692490, "uuid": "18c5fa48-21b6-4309-99f7-3f1dc3a0f032", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618692490, "uuid": "bedd06d9-168d-441c-a9b8-e04754995f90", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618692490, "uuid": "0c7061e4-dd7e-42ae-b723-e18cc4a9b1cd", "value": "7806622f74be0efcd09286eeb9c9a4cf0b723bd3ff1d101e9e17033a38654e75", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45af5062-9fb8-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618689935, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618689935, "uuid": "ba1b7bca-d80c-4ea1-ba2e-a8fc1c66c008", "comment": "Malware payload", "value": "9069f032aa57d8f4d719566fd9d12014", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618689935, "uuid": "f0fa5d9e-adfc-4a60-b791-55b1bdca8368", "comment": "Malware payload", "value": "789fcb770067bf51ee88c1809220b7cf880fab27ba7a1c8e980d99dbea79f9c6", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618689935, "uuid": "aa968869-3952-41e7-9380-2b777f12e48c", "comment": "Malware payload", "value": "a12f883e8c8568d40db3490399ba3aeb3f2275bc", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618689935, "uuid": "75d8a8aa-3d7b-4f4a-8cac-c5b7ebeac8c5", "comment": "Malware payload", "value": "f3fd1f96d0671730bfeea82df414cb8d1e04780a1ad1987700f11ea32dba99bfd6b12f5f03ae7721f0742649314761e9", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618689935, "uuid": "6ee24915-7d34-4c0c-8de9-2da55e54ab40", "value": "7DF3D088CBB3E4E6EFB3D37866F85E1B561174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618689935, "uuid": "45cc0486-eeb8-4289-b791-4c23270c5bd3", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618689935, "uuid": "e34e721f-5f6f-413d-8fd8-7fb4b658a1a1", "value": "3072:amNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:LLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618689935, "uuid": "9f7502d2-2ccb-491e-92c1-2a3fd6bf57a2", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618689935, "uuid": "e949ea74-5d00-4d76-af88-2d7636fcb37a", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618689935, "uuid": "7b968bc7-6943-44af-80ab-23b9c65de390", "value": "789fcb770067bf51ee88c1809220b7cf880fab27ba7a1c8e980d99dbea79f9c6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd760447-9f2a-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618629174, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629174, "uuid": "b2a7473c-1fba-4a91-a70f-8e3860ae1551", "comment": "Malware payload (Dridex)", "value": "3628bb820c78345fbb2443f767ee73ce", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629174, "uuid": "c30f48e5-2285-437a-9cb7-9c7c9985f683", "comment": "Malware payload (Dridex)", "value": "78db0f035972edc236a1dacd37c4de7f94d8fccaef35bf018d1c8e6263b83183", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629174, "uuid": "6424330e-59a1-4792-acbc-cc7ec3f8ee4e", "comment": "Malware payload (Dridex)", "value": "11117766f95b54ed9f26f09d6d9116aada16ef16", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629174, "uuid": "00723c38-e57b-4a00-9526-c2b5dcc1bb69", "comment": "Malware payload (Dridex)", "value": "1fcfe354d283ce9e68a85c337e32555cb35d2e2047fcffebd5009620f2ba3f4d32e872186a8c03effbf8297be5395a2f", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629174, "uuid": "f33cfcff-3051-41c1-af2a-ed8ecc24155f", "value": "A8F3D088CBB3E4E6EFB3D37866F85E1B461174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629174, "uuid": "00437dd0-20bb-4ec4-b5bf-da6dcd07cf21", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629174, "uuid": "ce80a7db-5a4f-4a9d-a905-78a558dcd08e", "value": "3072:RmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:gLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618629174, "uuid": "ea5940e4-ea02-469f-b23f-d64d560e7a30", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618629174, "uuid": "9114118d-3dc2-4438-94d0-91da623ee05f", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629174, "uuid": "a62117f4-cc7c-4a5f-a1a6-1d35e7b68d51", "value": "78db0f035972edc236a1dacd37c4de7f94d8fccaef35bf018d1c8e6263b83183", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8601aeec-9f6a-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618656542, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656542, "uuid": "0f24db95-fc61-4978-b190-1c2c7dbe721e", "comment": "Malware payload (Dridex)", "value": "81655f7aeba2aa186b8e581ff0b52c14", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656542, "uuid": "6e2273ee-4d1c-420b-bfac-36201c13487b", "comment": "Malware payload (Dridex)", "value": "7926d6d1f4ee5cf6af0d6d9b168a114c70fef9ebc5a8c77e3d6a6960cb656108", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656542, "uuid": "c87dc8f7-fe62-44f0-ab69-27a528d10395", "comment": "Malware payload (Dridex)", "value": "4a64cb01d89e5c1e7afbdab1ba53c8a3c440eadf", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656542, "uuid": "4a2de99b-91a0-48ae-a474-f48b93bf4aa8", "comment": "Malware payload (Dridex)", "value": "8c90a60d44f69e6dc07cf65556da0af0bf9bc8bea4cacc74c76c9181157f5d3f940d082a8218f1a514b98010179e5fcc", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656542, "uuid": "d627c9f0-4b9f-43b6-adc3-af35b9489433", "value": "30F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656542, "uuid": "2dae77d3-8ac1-49ff-8ca8-589d79515076", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656542, "uuid": "1abd9e5e-1522-464e-9cf4-8daf11f5eb34", "value": "3072:Tlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Tlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618656542, "uuid": "267f8525-92ec-41e0-837f-9cd217becc55", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618656542, "uuid": "1580ce69-86bc-4b3e-afc1-573201ea287c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656542, "uuid": "c5ccfb35-f1aa-4560-8b4e-89ccb4e31034", "value": "7926d6d1f4ee5cf6af0d6d9b168a114c70fef9ebc5a8c77e3d6a6960cb656108", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "023ba5dd-9f91-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618673072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673072, "uuid": "dd23754c-c282-457d-9cbd-f2fc7809566a", "comment": "Malware payload", "value": "72923de858c3fa52924e5f7024f4143e", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673072, "uuid": "0ea6ebdc-70ea-464e-a13e-a7219f527dc9", "comment": "Malware payload", "value": "795dce1a92bcd579129a7c3711ee078dd95629ea09fc32c968ee074c9f643f72", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673072, "uuid": "85cfbc38-4e69-46ed-abf2-2dd74381ba40", "comment": "Malware payload", "value": "dce7e228d7a0f52317098f310248c714b27eeb44", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673072, "uuid": "bd302e84-75c9-4027-b022-37378a1071a7", "comment": "Malware payload", "value": "e213f1e349d9413463d8735c9b5bbc39ea8447215d56939a778540b769d48e59c70637b9f2b4ac89777803579a15aff7", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673072, "uuid": "bfe67df4-182c-4271-8902-cd56fc81f97f", "value": "98F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673072, "uuid": "b2c1b28e-f1f4-4fc4-8745-b2e41cba6b92", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673072, "uuid": "4953aab1-8c45-4689-838f-56746f1521c3", "value": "3072:EmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:NLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618673072, "uuid": "653da9e4-d8ee-4dfc-b44d-0078b221be42", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618673072, "uuid": "ff13586a-08ed-4d25-91f4-809908da64a3", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673072, "uuid": "a2a0a781-77df-4c14-9f41-1f97127c25f0", "value": "795dce1a92bcd579129a7c3711ee078dd95629ea09fc32c968ee074c9f643f72", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "449399d2-9f24-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618626368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626368, "uuid": "f58a7ee3-bfd2-4fb9-b0a5-c1e5f7941baa", "comment": "Malware payload (Dridex)", "value": "ca6f5694eccf4e96dd4b04d86314e099", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626368, "uuid": "01bfee79-46ef-4f7c-9202-19ab85a6d7c6", "comment": "Malware payload (Dridex)", "value": "7a31b87c935774aa3713b337edbb8d4273277803f1256ee7b8ff74be2c777312", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626368, "uuid": "0a543fc6-f633-4621-9c8c-cd363431ef58", "comment": "Malware payload (Dridex)", "value": "2ef599813db11e442fc03e813191dcad0171a5b7", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626368, "uuid": "6934388d-f56a-4562-a136-4d44ce26f674", "comment": "Malware payload (Dridex)", "value": "491664ed32889629095ee5146e7a0b5ebd81f1e19401fe9aecd3187f1ad92ee5ff3a7f81af7551e5405c37c174fa192a", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626368, "uuid": "7c395551-9bb0-447e-88d8-4179bbc95974", "value": "C5F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626368, "uuid": "26bd80d8-d162-417c-b458-82e915535f7d", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626368, "uuid": "3d36b614-9b04-449a-b827-5b2c9a5cfa6d", "value": "3072:dmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:cLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618626368, "uuid": "4f419198-6806-4a93-b531-4f369b199e54", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618626368, "uuid": "e8614626-1906-4a31-a6e9-01eefea11184", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626368, "uuid": "864da36c-f37f-4f4d-acd7-ef8ad71702ed", "value": "7a31b87c935774aa3713b337edbb8d4273277803f1256ee7b8ff74be2c777312", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa3716a8-9f25-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618627102, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618627102, "uuid": "f10d97f4-e994-44c0-ba51-ab2e8a013711", "comment": "Malware payload (Dridex)", "value": "93bbe831ac2b726645df27158eeaef54", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618627102, "uuid": "4a246e32-59ec-4e23-971e-f54b2bb24b05", "comment": "Malware payload (Dridex)", "value": "7b1dbc0505d619781c440f537bf78251a56ee79b82f9275a93a5ac6b57cca817", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618627102, "uuid": "11c47145-6be1-41e7-89e8-5ef95fc43eb4", "comment": "Malware payload (Dridex)", "value": "6d5b6f9667130203b697e831d938228f1938b53f", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618627102, "uuid": "91c7274f-7db9-4f3e-a4f9-73bdee5a8bc5", "comment": "Malware payload (Dridex)", "value": "8e88c44ac6e8bc8a302417356a576c1bd8725035d0f3dc9b5cd9497d97b985e0b41badd4f98458daaaa4811dfa14b579", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618627102, "uuid": "2129c141-30ff-4647-b886-06decc0889c0", "value": "7AF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618627102, "uuid": "2097a007-5d89-4da3-9315-7ff4a812e61c", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618627102, "uuid": "fd4c5593-dd8c-42ba-a008-a8c669a06ec8", "value": "3072:BmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:wLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618627102, "uuid": "d9fcecdf-d2ef-46ce-999b-46edc7a5e2e2", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618627102, "uuid": "bd65965d-29bc-4354-bf09-f4c62ee4caf3", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618627102, "uuid": "2ce85063-c2e2-49ee-a904-397269ecc0dc", "value": "7b1dbc0505d619781c440f537bf78251a56ee79b82f9275a93a5ac6b57cca817", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db93ea23-9fa2-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618680738, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680738, "uuid": "30288b2e-0456-4ad0-a20c-506e7f95e67f", "comment": "Malware payload", "value": "1d5e4dca9e482195937feddf55fb905e", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680738, "uuid": "a6c334c6-685c-46b7-bc00-1ac4bbab1de4", "comment": "Malware payload", "value": "7b8df77783b7e6c30c68f1e2bf8dd868f8d1bdf5732394c124aaf38f41ba40bf", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680738, "uuid": "8db84493-7b94-4b5b-8314-997cd937ab11", "comment": "Malware payload", "value": "30a4eb5c601b50dd4b28aa5208853e732aa4459a", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680738, "uuid": "1f559684-a993-4b18-8d1d-a1b5407440b4", "comment": "Malware payload", "value": "e0d9816d6086b58a17a659ee11264583977e2893ec4c3d00a8ad7efe5111d0f402c20bf4a3d9873203d0bf35d8f8de0f", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680738, "uuid": "fc2dd6bf-7720-4573-a7ae-aa886f2c6ceb", "value": "6BF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680738, "uuid": "2d376c58-b151-4e1d-afad-067802b70840", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680738, "uuid": "f6cbfd69-9e4b-4d60-9577-9fdd32f1e160", "value": "3072:wmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ZLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618680738, "uuid": "dff967d6-a437-4de6-9b45-6dfcb0880091", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618680738, "uuid": "bed261f7-d5c2-4cf6-9e64-e42e9fdb3df6", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680738, "uuid": "91cd785d-3354-4bdf-9d60-92c1e56fec2e", "value": "7b8df77783b7e6c30c68f1e2bf8dd868f8d1bdf5732394c124aaf38f41ba40bf", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9c80aaa-9f6d-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618657998, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657998, "uuid": "4b0507a7-bb2e-4276-be32-09f9eb6d0a3c", "comment": "Malware payload (Dridex)", "value": "a819d2dddd3564af1232e27e91c990e2", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657998, "uuid": "d09e1a44-f5aa-4001-ad18-7361137dc93c", "comment": "Malware payload (Dridex)", "value": "7bc62b01d6df48df18fd21fe38491c02ed7e85695ef3fad105efbb6aa0ee96f0", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657998, "uuid": "9b3a936d-3398-47ab-9dd3-3eb7279b516d", "comment": "Malware payload (Dridex)", "value": "8af0489a3882bf5f3c34ed0260c6201b63e6e5a6", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657998, "uuid": "f07dcc70-a38e-4192-82c0-c66a2315ac8f", "comment": "Malware payload (Dridex)", "value": "8dd100f6d31ebd0025dc09d424d110a950582cea5ec0fad3ce44688af941e2691bf3c67c4ffdcfa2e2b57a63967fbecd", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657998, "uuid": "5031e965-b5c5-40f2-b2a6-2687c0cbcacb", "value": "AFF3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C5846E9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657998, "uuid": "f03d3948-c05f-4f47-9429-56300231e6bb", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657998, "uuid": "02cf522b-9c7b-4bba-818d-37161fac03f1", "value": "3072:KiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:JeAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618657998, "uuid": "2acdf75b-0be9-4fa0-9182-12bbf66d232f", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618657998, "uuid": "6bd6089b-de74-4133-baf5-01a0c2625812", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657998, "uuid": "57fdc595-4e6e-4bee-9f2c-cd0af4633a1b", "value": "7bc62b01d6df48df18fd21fe38491c02ed7e85695ef3fad105efbb6aa0ee96f0", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c622e726-9f3d-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618637323, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637323, "uuid": "ec883319-b35e-4f2b-a1ab-b65e47934c68", "comment": "Malware payload (Dridex)", "value": "50fd69bd0c074aece3958fede23bd988", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637323, "uuid": "4838c8ff-8b82-4dba-bf82-9dd491825176", "comment": "Malware payload (Dridex)", "value": "7c0630839a24a43cb58f7f7baf5cc08f4ca581c67958105bbed57be980cdffeb", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637323, "uuid": "d2cf81f5-2e36-4b9b-90e8-3f6fc0a9e544", "comment": "Malware payload (Dridex)", "value": "841ee57e49eb2fa5279a5d8d90fcc78541b93881", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637323, "uuid": "613bd420-1a95-464f-9076-7be5eb02ca7b", "comment": "Malware payload (Dridex)", "value": "e65257eb90da80e58596d5fe94f11f98bd02d46421fdac1b65811b3d515947dcd7ddda7a907c34060fac87798c64cd94", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637323, "uuid": "9dbe029c-9a4e-4560-b272-911788da434b", "value": "95F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637323, "uuid": "42bd233d-4091-4bff-aa06-a1ccdcb8905a", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637323, "uuid": "e4dfe0e2-3f33-44a0-a892-e44e7d38fecf", "value": "3072:BmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:wLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618637323, "uuid": "905c718f-3edf-48d3-ac11-39f2d8bde520", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618637323, "uuid": "8d6efb59-7150-4679-ab25-a02732dd5607", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637323, "uuid": "15c9c804-02ed-4544-808b-b6cd774b7179", "value": "7c0630839a24a43cb58f7f7baf5cc08f4ca581c67958105bbed57be980cdffeb", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a92f61b-9f5b-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618649947, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618649947, "uuid": "432f8775-2001-41a9-bd7f-fc026ae2e787", "comment": "Malware payload (Dridex)", "value": "103e637bd7f6212a3875eceff3f1d83a", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618649947, "uuid": "e91642e4-2212-4d60-89a7-6175c68112d6", "comment": "Malware payload (Dridex)", "value": "7c1ef63dad31ac322174993eb9bb8717e939d2e87f3af572a813d91df036f8b5", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618649947, "uuid": "b9394591-380a-4701-ba94-be91d76d7397", "comment": "Malware payload (Dridex)", "value": "e75823d8fdc52c0cad7e33c443b5ae6a4435074b", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618649947, "uuid": "7872d453-8511-4f87-b9f6-6a87fb5ed296", "comment": "Malware payload (Dridex)", "value": "fd1436a1b376de42fba96bb92a495bf258f25edf61d52492d9dd7aa7a3aecb80f16f202a821d71957cf21850feef36e9", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618649947, "uuid": "dedf063a-5d4a-415d-a219-914700c5545c", "value": "35F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618649947, "uuid": "b2044df3-fdac-41e7-b4a1-ea2287ebab7f", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618649947, "uuid": "5c5f289c-a63b-42b7-936f-61cf5a935d91", "value": "3072:emNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:vLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618649947, "uuid": "8c68741b-c020-4fe9-9515-53e045cb8dc4", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618649947, "uuid": "c8bee758-9703-4a04-913f-e7ac1399d457", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618649947, "uuid": "6d4de338-213b-4e73-99ee-6f1ff1cb0078", "value": "7c1ef63dad31ac322174993eb9bb8717e939d2e87f3af572a813d91df036f8b5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc2a8f75-9f6b-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618657090, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657090, "uuid": "684fcfc1-6c5a-4729-b74d-7b528485dbac", "comment": "Malware payload (Dridex)", "value": "6c14e42076d7942c96b8e51c52d1d6b5", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657090, "uuid": "6223f5e2-c0ff-4caa-9f2b-4ff6e04cb4b6", "comment": "Malware payload (Dridex)", "value": "7cd843830f82788bc485888a9f9b88d3b7509a85a32efa2ee757685cae96a3a4", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657090, "uuid": "5bdce21f-2bfb-4d5b-8613-cd16b0968518", "comment": "Malware payload (Dridex)", "value": "d39434c5ad01423715f7b06337300843c76a672c", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657090, "uuid": "2cd5a08b-e440-494e-b4cc-2ec95bf566a2", "comment": "Malware payload (Dridex)", "value": "4db34334734524dfb0c0d44dfdc1b252f336bd22b37fcd5822609a9ce9e4d3e008d9c75d40ce585347675782881e61d2", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657090, "uuid": "3590007f-596c-4bc8-a3d7-4f760cc9017e", "value": "20F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657090, "uuid": "03eed410-871d-4d0c-a5f0-9cb719548f0d", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657090, "uuid": "0f2b6529-c434-45a0-aa66-648c4504b515", "value": "3072:RmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:gLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618657090, "uuid": "7c9c540b-bcf6-448f-92a0-65fe2afccf03", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618657090, "uuid": "a2f4cda2-5b39-41c7-bafb-57ffa12e0208", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657090, "uuid": "34a76dcb-36d5-4116-adf5-01222cfb9c05", "value": "7cd843830f82788bc485888a9f9b88d3b7509a85a32efa2ee757685cae96a3a4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e156730-9f9e-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618678675, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618678675, "uuid": "2853edc4-f77b-4498-993d-fb1c4b956707", "comment": "Malware payload", "value": "887792b4050f5245115668fc43577f76", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618678675, "uuid": "33454e0a-85a0-4dd8-acc5-daf566fbeecc", "comment": "Malware payload", "value": "7ce4364687d9c20546c4fbf6c997eb7f92cdecc3c61b39682a35d3274474794d", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618678675, "uuid": "0070c057-8509-4e35-968c-875f50317a04", "comment": "Malware payload", "value": "88f5147efc9e296481eec2a97abaedf49ee46550", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618678675, "uuid": "7304c4aa-c8c7-4628-b339-7085788e91ba", "comment": "Malware payload", "value": "3aaf6034e9f011df1731afe5e6a13fb8df60e33b569654efd29a6ea71b29fce7944cf55e156967380c04e8a40b79f759", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618678675, "uuid": "6c0017a5-ff46-4fa4-a659-e8e3af0bb16d", "value": "EBF3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618678675, "uuid": "62ba530f-1dfb-4dcd-a55f-54ce89a3c0a2", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618678675, "uuid": "f036b66c-fc48-419a-a5ad-5f9b0d7351eb", "value": "3072:KmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:bLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618678675, "uuid": "e67332e4-812f-4fbe-bf47-8743c7c730f5", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618678675, "uuid": "cd640d56-d88e-44eb-8943-ae61988202df", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618678675, "uuid": "3bd047b0-d0f1-443c-bf19-4c2a0ca170c2", "value": "7ce4364687d9c20546c4fbf6c997eb7f92cdecc3c61b39682a35d3274474794d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f405da8a-9f4a-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618642983, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618642983, "uuid": "a8c59f68-3d8d-4ee1-9d7b-9a21f47abb94", "comment": "Malware payload (Dridex)", "value": "9d7588e476927494289e8e1c69f38c2b", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618642983, "uuid": "dfcd2356-3217-4c75-bdb7-d68ce0ae1a0a", "comment": "Malware payload (Dridex)", "value": "7cf7a75946b19dec1959a41b65bcc7d36de6c72e3f3fdba5173c5f2fc75f4eae", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618642983, "uuid": "b5445fa0-10b9-4229-8d62-4efd4e1fd1b3", "comment": "Malware payload (Dridex)", "value": "9cd5a8e942b71775106875a1494b9b9382a94b22", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618642983, "uuid": "cb843ee5-c873-47c3-b434-b457d68d99d3", "comment": "Malware payload (Dridex)", "value": "a3b2323bb8af1d624a24cc73278491f0b4f24da87adafc43a8eb75a4fc0e72b12673151c48c3b8320eac789377ba183e", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618642983, "uuid": "03cdd3c6-6a52-4a5b-8466-003582cae4ad", "value": "6EF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618642983, "uuid": "6522265c-2af9-4cc8-8750-177b5e0c39a0", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618642983, "uuid": "9c44b18a-8a59-40ee-8db3-face6e15ffff", "value": "3072:kmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:tLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618642983, "uuid": "85352a26-fc80-41fe-8592-bc9db5c1fdb9", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618642983, "uuid": "bf7dd351-7349-497c-b1d8-cf0ad654f3eb", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618642983, "uuid": "432c6bd2-2cc7-451f-9944-5d3df9a62348", "value": "7cf7a75946b19dec1959a41b65bcc7d36de6c72e3f3fdba5173c5f2fc75f4eae", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9142adda-9f37-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618634657, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634657, "uuid": "71f673f3-0883-4cd8-b23b-332fcddb4967", "comment": "Malware payload (Dridex)", "value": "ddcb4893459841926c29ff077b87dc78", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634657, "uuid": "d80990e5-dc53-443e-b5aa-0ba66f82b69a", "comment": "Malware payload (Dridex)", "value": "7e1a2190cc89ad2b7ec1ccd2a47092bc6836eb33e2b360101e84c1c9f5f8f7da", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634657, "uuid": "4845776d-1415-44a3-9cfa-62e9f32f68e2", "comment": "Malware payload (Dridex)", "value": "e3b05c2f6ed7d8546da44da771d8cf5f5b4043d6", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634657, "uuid": "cf66a0ff-9d89-43c3-8fd6-b1ea0fc4f94a", "comment": "Malware payload (Dridex)", "value": "ab33cba59b0dbb43db422a45996077bc9ec3ee1b268dc5c8b72f9c45944b1147ac65743484ef5fafa8c22b9beb43807c", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634657, "uuid": "adcbf78d-1fa9-4edc-8686-d1b3b2957d92", "value": "DFF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634657, "uuid": "9e1ea0c5-b7be-4f77-b23a-e12c5d1dc09b", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634657, "uuid": "dc0521c4-20bb-47de-a424-52aa56156f1b", "value": "3072:mlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:mlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618634657, "uuid": "b01f2317-9e23-4994-bd16-c72d20208541", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618634657, "uuid": "cc373eaa-9eb3-48bb-b033-9167dccf84e6", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634657, "uuid": "6c73b8de-d23e-4ecb-9404-2d0d86f6882b", "value": "7e1a2190cc89ad2b7ec1ccd2a47092bc6836eb33e2b360101e84c1c9f5f8f7da", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39d8bb42-9f78-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618662428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662428, "uuid": "584fa6c3-f75c-40ea-b23e-7c6d0b4f82dd", "comment": "Malware payload", "value": "ccc0e0f94e5b348014ec2748786c8040", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662428, "uuid": "7a3ba2fc-2f55-4c2f-8685-f9e14abd1913", "comment": "Malware payload", "value": "7e1b7d937e08c1ba4809aa53ac8e4c5e345f093aaea0bc713950b96f84c396c4", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662428, "uuid": "23cff2d3-5f2c-434d-9703-bc40f365ef09", "comment": "Malware payload", "value": "ed398c3a9a92f0d54bc61184ba8b3f48b43b3513", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662428, "uuid": "0c8567ca-39d2-40e8-abb7-be7c1017f157", "comment": "Malware payload", "value": "45f1c7b9e61571d6687138de6055aaa2cfe1daee6efb33fe1d4f9f4a6007184ccc57147562f77c662e1f402ae754797c", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662428, "uuid": "df79754d-c051-441d-bb4d-f0a23f6d7757", "value": "B4F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662428, "uuid": "fe4087d2-2951-4ace-9885-a65c1e5eace3", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662428, "uuid": "70f76d62-6a8e-4aeb-a588-d4a4b58b8744", "value": "3072:jmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:SLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618662428, "uuid": "f4436d51-127d-45f5-9a95-08ec1be1d903", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618662428, "uuid": "18b75465-0e01-4f37-9340-a61aa1e02cd8", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662428, "uuid": "99d1dd62-ff65-4cab-bea5-deb7ee140456", "value": "7e1b7d937e08c1ba4809aa53ac8e4c5e345f093aaea0bc713950b96f84c396c4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1318361d-9f2d-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618630150, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630150, "uuid": "3a8bd64e-711f-4341-be91-65f15a96f6bf", "comment": "Malware payload (Dridex)", "value": "76461b5de54aabb6cdaff62fdbf733ea", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630150, "uuid": "761af6ce-8d0d-4827-8ccf-3732000a5359", "comment": "Malware payload (Dridex)", "value": "7ea2027333c38d6adbfccc31845e00ed5baff5c5c9983d7085d54066e36fc903", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630150, "uuid": "9e2f1365-04d5-48c8-be3e-5f7e7609bece", "comment": "Malware payload (Dridex)", "value": "51c503e95b524648789d3fb1537320386da3be93", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630150, "uuid": "480576f6-0e20-4f39-83b6-03b5ece24aba", "comment": "Malware payload (Dridex)", "value": "e13f35d52317f8fd6b0fe90316195a680f1ff03a2487a385af41e6ee6c7bb9fa58225da4317b305a4c12990d29e582fb", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630150, "uuid": "0be7c959-bcfd-4fbc-b98d-25e4998b2d3b", "value": "CEF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630150, "uuid": "0f0e7e8c-4ba9-4875-8c80-916ca69c33cc", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630150, "uuid": "45f9d826-040c-4a4a-81a6-7b9a538fce3b", "value": "3072:GmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:XLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618630150, "uuid": "007c00ba-cd5a-40fc-b92d-2760c7522248", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618630150, "uuid": "e765b6dc-78f2-46d4-9cc0-47b86221c851", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630150, "uuid": "8bec0baf-ad73-4f51-a96a-8df18b5d4f39", "value": "7ea2027333c38d6adbfccc31845e00ed5baff5c5c9983d7085d54066e36fc903", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0009c4af-9f67-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618655029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618655029, "uuid": "11e5c05d-0ecd-4d27-a3b6-a5840fda215c", "comment": "Malware payload (Dridex)", "value": "9b5827d0000349fb2318828adb9f8378", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618655029, "uuid": "d458d3ac-338d-47e0-97cb-58819c85a747", "comment": "Malware payload (Dridex)", "value": "7ecb17bddfb494fded23e556c98296083245ceb802de1d1055235dd0729504f5", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618655029, "uuid": "74a01315-1bcf-4af3-be26-6b0462e9ab84", "comment": "Malware payload (Dridex)", "value": "9e03c0f96042f0be29844724d58137c8de6d3c89", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618655029, "uuid": "237bc96d-ee3f-4060-9cc6-78cfe4827584", "comment": "Malware payload (Dridex)", "value": "8392544263e46be89c9defd78b866615a84ca61acb7c89a003bc7d38e1eb8ff398d963aa467160260080703bbf8e186d", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618655029, "uuid": "9d797880-c542-4dba-be0f-e6c7f3b8b95a", "value": "99F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618655029, "uuid": "16e387c4-14b0-48f7-acff-29b0306df574", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618655029, "uuid": "a5903ce9-234b-4c7c-a235-5ecf895844c0", "value": "3072:KmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:bLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618655029, "uuid": "ee6d9bc2-fecf-4a60-8493-cc6152dfae9f", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618655029, "uuid": "a53f92dc-aa87-4ab3-ad8d-3c020a51ec33", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618655029, "uuid": "618af543-cfc9-427c-ab99-3b9d852be744", "value": "7ecb17bddfb494fded23e556c98296083245ceb802de1d1055235dd0729504f5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "30b99804-9f61-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618652534, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652534, "uuid": "fece25a7-c550-4ff4-bae6-1e0ddacd8ab5", "comment": "Malware payload (Dridex)", "value": "2b70b434601bdcbb35c88074cd21a68b", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652534, "uuid": "9288ad6c-fd20-49d4-96c7-79b6be5d4e22", "comment": "Malware payload (Dridex)", "value": "7ece930e33b1fb483e554042b9635c4b5c81bf84c8b2a9acf8b88213ca15e9ef", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652534, "uuid": "9842577d-66c3-4105-ab26-f676455b1ff7", "comment": "Malware payload (Dridex)", "value": "af28f4eb391f161abe8050e63036cddcd52c7849", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652534, "uuid": "df60e9f2-9bec-4f8a-b160-aa7e51ccf35f", "comment": "Malware payload (Dridex)", "value": "b187516dedd54947d94f7fb5398f6597953b84c7736acbddc367309b7f218acb9faa23e71a2472a29ef69e75245f0f25", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652534, "uuid": "22b61d83-618c-4284-b4b0-00f937178a93", "value": "30F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652534, "uuid": "a63baf9e-c13f-4939-84f3-57ebde4c2776", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652534, "uuid": "e9108e61-ec7f-4952-8cd5-1634d1e8a707", "value": "3072:/lpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:/lo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618652534, "uuid": "3da1a59d-53f1-492b-a598-b0a84dac1ad8", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618652534, "uuid": "73da5f4c-5693-4808-b61b-576b0e29322c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652534, "uuid": "a1e98c7d-da3d-434e-b657-e4a311bd5e14", "value": "7ece930e33b1fb483e554042b9635c4b5c81bf84c8b2a9acf8b88213ca15e9ef", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7590806f-9f19-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618621726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618621726, "uuid": "fdaed8ef-e046-4493-ad13-9744d1e91574", "comment": "Malware payload (Dridex)", "value": "25ead6705eeaefd638e52a6dc31cb030", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618621726, "uuid": "017d6c03-84c4-4a3d-a8e7-32230359c0c3", "comment": "Malware payload (Dridex)", "value": "7f064735b215a5cee040f6ff5d275b2981a002ac626e80128219ae213af1587e", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618621726, "uuid": "0ec18b23-6380-4aa6-9125-5905f4311879", "comment": "Malware payload (Dridex)", "value": "8f71914e72c6163e0911cf3e9955dfe1f8211600", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618621726, "uuid": "5d23e57e-79c0-4708-ae71-cd4474e21980", "comment": "Malware payload (Dridex)", "value": "d52db8ca916125d882ae815950f8c70a9ae615a103728328b7503a3732bb30d92a074e86b099a9d7ff9d4da200f4dac4", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618621726, "uuid": "0ad3b472-902b-499b-b914-3180294a04a2", "value": "CFF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618621726, "uuid": "3b0d38b1-622d-43dd-afec-b69c7df234d6", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618621726, "uuid": "68d68351-6ee9-4f99-8b04-6223da2d4d1b", "value": "3072:Glpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Glo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618621726, "uuid": "66815862-e674-485d-9b24-335cce64c3d5", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618621726, "uuid": "1dc01de2-e1a7-42e4-b6fc-b938e5284fe0", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618621726, "uuid": "9cbaf354-515d-470d-8a78-18f5d2b2d243", "value": "7f064735b215a5cee040f6ff5d275b2981a002ac626e80128219ae213af1587e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf4be669-9f25-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618627030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618627030, "uuid": "c43f5ee5-e34b-4062-9dcb-df2c3dcfd77c", "comment": "Malware payload (Dridex)", "value": "3099636340dc2c5eba5ad9fc91c60f57", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618627030, "uuid": "73d0add9-10ff-4f43-a3e8-7c27e44ebb17", "comment": "Malware payload (Dridex)", "value": "7f9da1a28f6bb988045704ee2caa4e753e1f68aea9a5b7c711fdbbe92d9c9e9e", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618627030, "uuid": "81aefb96-d419-4360-95f8-618f6bcbbcca", "comment": "Malware payload (Dridex)", "value": "bfa9869c4f4847a5e938e777ca6faba36a0cd355", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618627030, "uuid": "ee1a923b-8e62-41f6-91b1-6d4684c002e8", "comment": "Malware payload (Dridex)", "value": "258257def2b33f4074cb3bb249c8caafc45d7d459a10e36cc265eed7b74df316b4f065d3e3df9f27e13d5aba7c4b1901", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618627030, "uuid": "066615d7-78f6-4560-843f-0cda39665d85", "value": "F4F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618627030, "uuid": "52593f53-af72-4c1e-a59f-3012dcfc68d3", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618627030, "uuid": "b6338c63-ea43-40a2-8c21-9f4c03e8a51f", "value": "3072:Rlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Rlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618627030, "uuid": "018690ae-2f98-4abb-b7be-71123e134813", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618627030, "uuid": "18052500-b5c3-4b2f-a6a6-418b417a9da3", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618627030, "uuid": "aa8b2c3f-5640-4a55-87cd-3611e2423412", "value": "7f9da1a28f6bb988045704ee2caa4e753e1f68aea9a5b7c711fdbbe92d9c9e9e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7def65ba-9fb1-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618687023, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687023, "uuid": "748142a7-c7f3-4fe7-9b2a-211b7450b2a0", "comment": "Malware payload", "value": "f25c6d3272bd2a93ad41d8bc9dbab2e7", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687023, "uuid": "c021cde3-b6ae-420d-8a75-2abfe7883377", "comment": "Malware payload", "value": "7fa467176633ad96ce9471ad3e1a81445570abac78debdb38efd6abf720e6eb3", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687023, "uuid": "41dd0801-f412-49fa-9049-f890705e9251", "comment": "Malware payload", "value": "5e3145cf34408fc7df7f67045475e8f72ebbabdf", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687023, "uuid": "7abfd45d-bb91-4330-8564-1a5dbeb32c48", "comment": "Malware payload", "value": "fcdf10ed41902a09c350a1d1993a8d23c2a67166d241f3694a85f838ef9d36bff9fc27f8dfb63096e96de72055eba414", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687023, "uuid": "defeaf72-c7d8-4a0a-a420-a938ff878656", "value": "94F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687023, "uuid": "5821fef3-0d13-4b11-a060-0a4f48e00653", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687023, "uuid": "84ca5567-ed85-42b8-9502-0f710dc3abb0", "value": "3072:9lpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:9lo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618687023, "uuid": "926a9fc6-503a-4dd2-8eb1-6eff205280bc", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618687023, "uuid": "edd6e2b2-7cc1-4f0b-9c75-5a6b5fd67553", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687023, "uuid": "eb834a17-08d4-4f26-8c36-24e753577d29", "value": "7fa467176633ad96ce9471ad3e1a81445570abac78debdb38efd6abf720e6eb3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f2d62d98-9f91-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618673475, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673475, "uuid": "e15d848b-7115-43d4-bb0e-1fdadde5fddb", "comment": "Malware payload", "value": "830f55e38ceb9d46943a12f1837859fe", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673475, "uuid": "1f3b5bf6-563a-43db-8eb9-afa3438c12ed", "comment": "Malware payload", "value": "8030a3ba332499c19203032c44090f87c9f1ae7047834229df9fa0d02f0f1dcb", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673475, "uuid": "5afa56af-b7f4-4ce7-8a7e-de757614456d", "comment": "Malware payload", "value": "ab4a19fdba6027c03887d30f2e9da056677f9057", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673475, "uuid": "c6247919-44e2-44ee-959b-296d0eff9b4c", "comment": "Malware payload", "value": "bdcfade7cfc5377f018d97775be08837657bed32f32f0714d8d605c92008fdb14718726d364ce81c5be21029c56d49a1", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673475, "uuid": "93b28e86-e282-436c-aef4-f29a5447fd18", "value": "59F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673475, "uuid": "fca26ae6-4e1e-4a61-b052-c9a453b6cec9", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673475, "uuid": "55b9bb4e-37a4-45d4-9f75-a5f801c2b6a8", "value": "3072:vmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:uLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618673475, "uuid": "818532b8-d5fb-4657-9b8b-4ca01022fbc1", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618673475, "uuid": "dfcc9625-242b-449e-87ad-216317d98fbf", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673475, "uuid": "a113dcc2-1f5b-4af6-9f4b-246ba06387b4", "value": "8030a3ba332499c19203032c44090f87c9f1ae7047834229df9fa0d02f0f1dcb", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04010e13-9f99-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618676511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676511, "uuid": "bdf89430-146b-4218-9d7a-5bc289bbd955", "comment": "Malware payload", "value": "31b65689125517f84c2306e144cd5a78", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676511, "uuid": "20771417-1dee-40b3-b507-6747ea7924e8", "comment": "Malware payload", "value": "803e904ed0714d5cd7801ec041dc09456e9efdd8abd3965f729f7e90fdf23bb5", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676511, "uuid": "fe17fb13-897d-4e09-9b38-8bd5d8924c90", "comment": "Malware payload", "value": "ea1005cad3d863c6bb78373e04bcf6142b3c2adf", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676511, "uuid": "2610032b-ce54-4fd1-b94a-1da8658ee559", "comment": "Malware payload", "value": "e227b4812205d4ab7bf04f58abcb50b58286eb410449051964f59476fecebdb6fd9096a2d8e408e3790007b9873eb441", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676511, "uuid": "44095360-e20f-4a57-b152-e0b39a0a31d5", "value": "EEF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676511, "uuid": "f5cc6e00-5ade-4c11-a684-d875beb6404b", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676511, "uuid": "eb5bdf53-67df-47b1-9ccc-afc038acd8ff", "value": "3072:JmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:YLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618676511, "uuid": "8246a325-f628-468a-a21e-a42f1ba27a09", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618676511, "uuid": "4ee31ae9-5391-4d0d-8b10-49cf35f4596f", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676511, "uuid": "2b616b09-731b-45b3-823c-04adf84c1566", "value": "803e904ed0714d5cd7801ec041dc09456e9efdd8abd3965f729f7e90fdf23bb5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0f4dc66-9f1d-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618623597, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618623597, "uuid": "2bcb1f31-91d3-4850-95bb-0ddee8428b35", "comment": "Malware payload (Dridex)", "value": "dd28f83ca0bf1e31bb0822121ac01c55", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618623597, "uuid": "bbfaa39b-ad27-48d9-a2aa-3587e62b3c67", "comment": "Malware payload (Dridex)", "value": "811e0bb48b031e0cd2eef9941073f7b06b5fc366ad43045d8375ca6d1f942d21", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618623597, "uuid": "b9175cc9-0d52-48f0-9686-01e9b2ef1d88", "comment": "Malware payload (Dridex)", "value": "ad93d22f7c1f6d678bd5901c387c54a454c368bc", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618623597, "uuid": "7768f4b6-53e0-4bb0-a16a-9042fbf620e7", "comment": "Malware payload (Dridex)", "value": "62ba435e8e1eaa1c5006621d93481df6feefca430354a24d7f4254c7915f7826bf8d047c4e82486755dda39158062e89", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618623597, "uuid": "3f6641ba-f5de-418d-a579-0d2ebbb6a638", "value": "A1F3D088CBB3E4E6EFB3D37966F85E1B461174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618623597, "uuid": "9fcee10f-9d74-4ab4-805d-9096e3dd6b0a", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618623597, "uuid": "69d2872f-e476-483d-9fb9-b505e1bef520", "value": "3072:RmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:gLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618623597, "uuid": "75dab613-9a39-4379-88f7-a3239d45089c", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618623597, "uuid": "b7a1a6fb-69e6-43a7-a5e7-dbe56084e6d2", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618623597, "uuid": "2af6fce8-f589-4d86-b4be-05b8bd452e93", "value": "811e0bb48b031e0cd2eef9941073f7b06b5fc366ad43045d8375ca6d1f942d21", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b69eab70-9fd8-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618703869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618703869, "uuid": "f765fb07-7ec2-44b5-90ef-f52e39f2eed5", "comment": "Malware payload", "value": "11db919512eea1fe9a974ea62ee90b22", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618703869, "uuid": "f03e8d18-31d8-420e-973a-4258db6aefec", "comment": "Malware payload", "value": "815039ca96ae48b175d4bde2818d650c88b56c1c090d11301fbe62ae88c4c8ef", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618703869, "uuid": "4508dcdc-0c8a-4d45-bd34-7b0f91648b25", "comment": "Malware payload", "value": "0863743fcbd1d79b6aa97ae73ca6b59dad8f9b11", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618703869, "uuid": "b0f72581-44be-4999-b13b-684f62d7c418", "comment": "Malware payload", "value": "0ef204b1b8536846ef7fd9bada839061e69296a22fbaf5fd81d4ecddf47d6df050ca9251a8627ea14fc3f0b1df754b7d", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618703869, "uuid": "ff23f53b-929d-44db-ba2b-47fc6f99f92c", "value": "2AF3D088CBB3E4E6EFB3D37866F85E1B561174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618703869, "uuid": "cf385ab6-8699-4c3c-86c8-27c525df6f9d", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618703869, "uuid": "97ec437a-340e-44c3-954d-e0dd56a75010", "value": "3072:XmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:2Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618703869, "uuid": "c50664db-47cc-4342-bd7e-b8c6ed5aad6b", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618703869, "uuid": "d7fe7069-dd37-4c04-a06b-04967123b34c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618703869, "uuid": "07c1d423-20af-42fd-8474-468f324c3a2b", "value": "815039ca96ae48b175d4bde2818d650c88b56c1c090d11301fbe62ae88c4c8ef", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f354ac3-9f6d-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618657658, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657658, "uuid": "a7b25c57-3ddc-4ceb-b6ee-fe1e7a03ab0a", "comment": "Malware payload (Dridex)", "value": "ac91eb2ebd623c43b949689797ab43bf", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657658, "uuid": "3fe77148-1516-4106-9812-c5f3f381ff1c", "comment": "Malware payload (Dridex)", "value": "81d913b95dbe93ed911089803d089231b3d3558ecc1f323b2b5d0bb384f436fa", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657658, "uuid": "cd2d8062-bc89-4b58-aa50-c579af49907d", "comment": "Malware payload (Dridex)", "value": "8f8792cc1ad38b8885c1a34737b8f7b53018a15c", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657658, "uuid": "3b5b5ac4-195b-431b-acfe-b076f81e8f97", "comment": "Malware payload (Dridex)", "value": "f22dc3f1836f33898e98e47a0d4973121d11bfe4c1954da5800443391b8b962ad95432d1ad734ec8c49fd80816ad6d6e", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657658, "uuid": "f863526e-f0a6-44bd-916b-8bce20742a99", "value": "3EF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657658, "uuid": "fc66e7de-1fd3-4447-868b-89a5bb390d3a", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657658, "uuid": "62cb5998-08ed-43b9-ba01-b7d40bbb526d", "value": "3072:EmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:NLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618657658, "uuid": "e445882c-fa65-4b9e-930a-539a82fe4078", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618657658, "uuid": "3d567172-cbaf-46e7-99bc-448f67db89fc", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657658, "uuid": "7c3a6f45-c77e-468a-9f9a-f63c99d23ede", "value": "81d913b95dbe93ed911089803d089231b3d3558ecc1f323b2b5d0bb384f436fa", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2395fe3f-9f2c-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618629748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629748, "uuid": "455c4e18-2721-43c7-be5e-ede8fd888a3e", "comment": "Malware payload (Dridex)", "value": "09cbbedcf2e25d051e6738e9eace7c3d", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629748, "uuid": "7ac7fb18-da59-404e-b40e-3ca5672ec78e", "comment": "Malware payload (Dridex)", "value": "81f4d6e7bcf7c19c9f92683f63c26bbf9c599afdde6c2cababaf8d1dbdb2fb53", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629748, "uuid": "81b3a9d5-4095-4538-8bc6-59ab1d959bad", "comment": "Malware payload (Dridex)", "value": "1fb2266c9a57a5ff90b289f8e0fdbc3461b11458", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629748, "uuid": "5584c545-a6b6-445c-84a3-38cf96b1172c", "comment": "Malware payload (Dridex)", "value": "a088341b930e0b5b588b0063ed41660a4cd88372ffae1cde521381cf5e24554ad2f67379378b0d4b634d4f9367db2b74", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629748, "uuid": "a9514678-839d-4602-9ac1-3baeb593adaf", "value": "5EF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629748, "uuid": "ff84618e-bd91-4de9-a5b7-07b4044d8d54", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629748, "uuid": "6cf7b6e2-62fb-4722-9c49-3b4aa1732c2a", "value": "3072:2lpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:2lo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618629748, "uuid": "61d19388-988d-4561-ab7c-3bc1a3de81ea", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618629748, "uuid": "d5c09277-0f66-46a8-bd5b-29c22992fabf", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629748, "uuid": "9b8145e3-ddb3-4b77-85d9-ed0bd2d2a625", "value": "81f4d6e7bcf7c19c9f92683f63c26bbf9c599afdde6c2cababaf8d1dbdb2fb53", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33eaa6fc-9f93-11eb-abe1-42010a9c0039", "comment": "Malware payload (BlackNET)", "timestamp": 1618674014, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674014, "uuid": "88208631-a091-4bbc-8f21-b77451103134", "comment": "Malware payload (BlackNET)", "value": "a19d54e369d80b257753a6979215eca6", "object_relation": "md5", "Tag": [ { "name": "BlackNet", "colour": "#964CF3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674014, "uuid": "b2a8594d-8f43-4568-9022-d5aefcadbc3b", "comment": "Malware payload (BlackNET)", "value": "82259f0bdaf02774ef0ee028b6c7cb5b90a9173100b972766451c0e8517260dd", "object_relation": "sha256", "Tag": [ { "name": "BlackNet", "colour": "#964CF3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674014, "uuid": "e1563323-aaf8-43ea-82be-294990485fd2", "comment": "Malware payload (BlackNET)", "value": "3d00d1b8634c24f1c5e25b322ffb5d32fae69632", "object_relation": "sha1", "Tag": [ { "name": "BlackNet", "colour": "#964CF3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674014, "uuid": "58fb4b66-d255-4653-8ee1-905a6ea99a74", "comment": "Malware payload (BlackNET)", "value": "8936220b8fbc819b9395ac771f569d39249fe6739959fd0af4cfd60ce9c3700ab783cf272149315fec8a744331cec50e", "object_relation": "sha3-384", "Tag": [ { "name": "BlackNet", "colour": "#964CF3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674014, "uuid": "be38aa2b-e2bd-46d8-a22e-7ee7822f36c2", "value": "B3A533CD9FED03B6D8495AB77BAB536501F09732E64AF10A0C5F2018D8C97AD3212DA7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674014, "uuid": "a6898e07-b5d5-4adc-bccc-743733fbcd7e", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674014, "uuid": "02183802-4020-4977-bcd5-7ba5ce774614", "value": "49152:tDlR4VoF+pMqSDdzSBbV8Q/yzo2N6hWEfSB8q5lhevuH/j4erfOylIuqUc3:BliOdz9wyzx8hWLBH5z9H/My9Dc3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618674014, "uuid": "479e4c8e-67a4-48f8-ba20-7ec4832f443a", "value": 2263552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618674014, "uuid": "c9580481-d039-47c9-95a9-988dca651bbf", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674014, "uuid": "b47368b9-604a-4e6b-bd91-50034e3f0992", "value": "a19d54e369d80b257753a6979215eca6.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45a1a1a1-9f88-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618669319, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669319, "uuid": "9f032a8e-1210-467a-8420-fa3b8b8c0c80", "comment": "Malware payload", "value": "5b601eba4dd22194f446d12bda55a72d", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669319, "uuid": "c8d076fd-f39f-402c-9e5f-385b708d5020", "comment": "Malware payload", "value": "826e55e2ea486e7971fe81fcc2047296affbb36e24735d95de0b8c47eae8ae71", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669319, "uuid": "a2660cb4-1ed8-4233-a5f4-f51f89721153", "comment": "Malware payload", "value": "19a6cd9d5d62373e10b7a0b97dcd5778abe7451c", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669319, "uuid": "650d5033-c69d-4d66-b1dd-a63fd63ed438", "comment": "Malware payload", "value": "a004fe8b1d4b49866115a6f0f879bb722a1f2724517dc462a6810c5c501dc6b7a98cf211768da57abe144d73bd8eee5b", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669319, "uuid": "44179be9-20fa-4f2e-bc1a-e8b8d3bd59ef", "value": "1CF3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669319, "uuid": "5cd75890-b5b2-41d6-b46f-ce64a0ce5a2b", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669319, "uuid": "789b5806-4df0-49f2-bf0d-cdc9e48d1df8", "value": "3072:ZmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ILc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618669319, "uuid": "f94071ae-b5b9-4a53-851c-970ed83757e1", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618669319, "uuid": "f70f8526-3205-40fe-992c-ab185c072f1c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669319, "uuid": "fbf1fe35-202c-4b44-a66d-ab66e57508fa", "value": "826e55e2ea486e7971fe81fcc2047296affbb36e24735d95de0b8c47eae8ae71", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa49b397-9f15-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618620096, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618620096, "uuid": "af20e821-2ac3-4c6a-8e5f-7a0a4f1d4ffe", "comment": "Malware payload (Dridex)", "value": "00b18d12961804be89f7150255dfc63d", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618620096, "uuid": "a01acafd-dfb4-40ed-ad38-35a6d6ac5851", "comment": "Malware payload (Dridex)", "value": "8284db72194934341b991c4f6183954f1546d1e007f825c22680842cb8fef455", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618620096, "uuid": "7c7f474d-f7ab-44ae-9132-64a4c80ce099", "comment": "Malware payload (Dridex)", "value": "04257c179efd0bc3d52c7fe9fc97231622ebf922", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618620096, "uuid": "d09a1261-609a-4cb3-a87b-205090c8b018", "comment": "Malware payload (Dridex)", "value": "740011a8429d5a2fbbefcf20d1d259e2f569cf09402717b59ea50244d8bf658f36284aebf00e48266ef23763c64f047e", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618620096, "uuid": "3f806d78-9675-42cc-911b-cbe545472ea8", "value": "5EF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618620096, "uuid": "d5b2b20e-59a6-44e3-9841-800dc424d380", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618620096, "uuid": "ce7bb062-6dd4-4e7a-adcb-b1a08efc0183", "value": "3072:gmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:pLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618620096, "uuid": "24137d17-50b9-485b-9640-bebc3a38bc64", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618620096, "uuid": "7ae4d884-37f8-4274-87fa-aa94998de65a", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618620096, "uuid": "d4d77543-e290-47c9-bd6d-f854a32cda5d", "value": "8284db72194934341b991c4f6183954f1546d1e007f825c22680842cb8fef455", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46bb987b-9fab-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618684353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618684353, "uuid": "1db1675a-4a71-43c5-b3e2-d5ab3019f329", "comment": "Malware payload", "value": "7a1fe005a67791e89e43130a72d8424c", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618684353, "uuid": "e2cd6c54-19b0-4de3-bc4e-ade195f6c9e9", "comment": "Malware payload", "value": "82d265a13337323e34bbdddbe880b7d06933859648f1d65908d7e5ec53dd7313", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618684353, "uuid": "925db65c-ae08-4673-a943-5c9954b9a3b1", "comment": "Malware payload", "value": "cfdeceaaec0a7b0ac531b7264b7db7178a6de083", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618684353, "uuid": "9539f935-6ce2-4a58-b1ac-6b685196be69", "comment": "Malware payload", "value": "0b6ca88ff67b8b729fc913d22e7fb766fd0dac6469e3460bdd4cf7edec9c105a3c4a0b13e9dbccbda0a237d2956ec999", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618684353, "uuid": "72a79c83-f051-449d-bc7e-f36d39d27f43", "value": "EFF3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618684353, "uuid": "33ed3edd-99c5-493b-b073-ad605748b3df", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618684353, "uuid": "99dc470b-7431-411d-b31a-494dd92ad4ae", "value": "3072:qmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:7Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618684353, "uuid": "2a4bea85-069a-4d7b-9115-7fdcbee280aa", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618684353, "uuid": "6a9f8ae1-4e39-4d4e-b805-9351cd138eb4", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618684353, "uuid": "7ee33155-4863-4dba-b701-ff0f99fdaf5d", "value": "82d265a13337323e34bbdddbe880b7d06933859648f1d65908d7e5ec53dd7313", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b613aa15-9fcd-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618699143, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618699143, "uuid": "a6cc034a-97c4-4cfc-99ce-be1c90dd99d0", "comment": "Malware payload", "value": "fcd60bade3486187c011496766df9f09", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618699143, "uuid": "91d164fa-6dda-4d1d-83c5-a5dc073e521e", "comment": "Malware payload", "value": "830630f9f1c7ed82450b45259b6fa30dff5645c2372275aefd63c8f321b12da0", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618699143, "uuid": "4428216b-bc0b-4dab-918f-5e5bc529fdeb", "comment": "Malware payload", "value": "3fd351815bf927b3e8df70d387018c4127b0edb8", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618699143, "uuid": "6128c6ff-6108-4ccc-99b4-8de610e55a38", "comment": "Malware payload", "value": "11eff337572a2cbf0deec605652bd955aab5c4174864bc366ac5dd0d2ac0540cff5743c3792fa1577f686c711567539f", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618699143, "uuid": "54539b50-da44-4613-afcb-cab8cf69a8b8", "value": "29F3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B496B1FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618699143, "uuid": "979935f5-5532-433f-822f-be74c7bd5e04", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618699143, "uuid": "af480885-3efa-408f-8023-f79a72fe587a", "value": "3072:3A6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:33J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618699143, "uuid": "f7be4c8a-075f-4fc8-a415-97c0a47129ad", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618699143, "uuid": "912319c9-1544-4440-aa01-96bf593ef668", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618699143, "uuid": "df0b31dc-090e-4906-b992-9cd9f77da9b3", "value": "830630f9f1c7ed82450b45259b6fa30dff5645c2372275aefd63c8f321b12da0", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b89980e5-9f90-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618672948, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672948, "uuid": "e613104f-1bd0-49ab-93e8-43db578d4dcf", "comment": "Malware payload", "value": "59d50ab0fac079c567cae8c5dde14d02", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672948, "uuid": "60c390a1-7aab-4aa3-b7b5-0dd7d5502e7d", "comment": "Malware payload", "value": "8378ad074ebc39d1910022a246ec1dd714f6e7e2e101516891d30aa6c438ec6c", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672948, "uuid": "60d40117-4aa7-41e3-ac58-70c93558bee7", "comment": "Malware payload", "value": "c7cb32f537b0bbe984a63a68a5093fe36456e85c", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672948, "uuid": "e3fc0777-1eb6-4b09-a335-04bc99d34466", "comment": "Malware payload", "value": "5cc0edd5b695cc92d8bb69b26a7a56ad2b2e5c7b847b93574ea6555647193182583e0ff1bfd9999f019274b45b45eed9", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672948, "uuid": "21cb68cf-e324-467b-8a65-768a967087e6", "value": "C0F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672948, "uuid": "b091389b-71ab-43bf-8160-bdb80c2ddaa8", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672948, "uuid": "cce0974a-dcfa-466d-81cf-16cae10de757", "value": "3072:hmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:QLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618672948, "uuid": "3bafc08e-10cb-457b-a755-def2879198d0", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618672948, "uuid": "597b7b08-43b1-434c-b2b9-9b5433301f61", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672948, "uuid": "50fc9921-47e7-484f-9c0a-787781e9d8f9", "value": "8378ad074ebc39d1910022a246ec1dd714f6e7e2e101516891d30aa6c438ec6c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d29d922-9f76-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618661735, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618661735, "uuid": "403e844f-500a-4d27-b0c6-198d579b6187", "comment": "Malware payload", "value": "9c28960c432bd2102ea58c4cd731f865", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618661735, "uuid": "3605d60c-e3f1-4472-9226-86d7dbad2b09", "comment": "Malware payload", "value": "83b8a5420df23e2dacdc0517223931ce6d27407b8da702621db17bd01212938d", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618661735, "uuid": "0ab30f10-616a-496f-bddd-2cc1aa147458", "comment": "Malware payload", "value": "fe0b09d03e2c19631bd034f251b86ddb84f514d9", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618661735, "uuid": "9a8ad880-8f97-48aa-9339-4b9a5b5fe3ac", "comment": "Malware payload", "value": "a41370ed75dd9f836f99218a75f1f94ea9df261151c72a2f56aca1a11541ae0c2b99facfdc33a80d1a7aec923e311750", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618661735, "uuid": "fc9c5c7b-6cea-4a89-9e34-a6a87913035d", "value": "59F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618661735, "uuid": "c5ed2c84-a2b8-4cac-a065-6959b6b9701f", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618661735, "uuid": "f54a7839-0aad-4ea4-a5ff-848dedd137cf", "value": "3072:gCmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:gTLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618661735, "uuid": "c5471929-0d3c-47f3-9bd8-05d4d698278c", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618661735, "uuid": "f07d5da9-a538-40f1-a896-5ccd0f52a8a6", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618661735, "uuid": "9c55430b-7327-4caf-9046-cfde240670eb", "value": "83b8a5420df23e2dacdc0517223931ce6d27407b8da702621db17bd01212938d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6aba36d0-9fd7-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618703312, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618703312, "uuid": "a50c1a78-6a08-4d3a-90ef-889918579ce8", "comment": "Malware payload", "value": "5152c5e30d68015018df8f66e3126af1", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618703312, "uuid": "8a9ba66a-7fcc-4cce-b64c-76511648a294", "comment": "Malware payload", "value": "8410ebfab9e68cdfe4dd420d4b79b35e5438a61b91aeedc3c4a0e7e8d64b69e1", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618703312, "uuid": "7f8f2e19-3974-4f03-9353-0d05492e36e2", "comment": "Malware payload", "value": "13021d17d5dfc047a29ff57c400431e1ea2491d6", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618703312, "uuid": "1ead27e0-9245-4d35-b253-89702b413610", "comment": "Malware payload", "value": "b55fd39b91d9ec2ea2bdca816891646f2ace50adbf3022b2eb2a0fba3f0d419d4a1f34ce150bd58ac736b8bc26fbb87f", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618703312, "uuid": "46948838-9a34-4a08-9234-40f5dd88dc02", "value": "63F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618703312, "uuid": "e05859a0-7d76-4f01-9b3c-16660da54995", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618703312, "uuid": "b7efc96b-c9ea-44b5-b16a-3f524ae45cc4", "value": "3072:OmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:/Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618703312, "uuid": "fc0a5c17-e209-41e8-bd9a-cd2e2eccfe72", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618703312, "uuid": "48c8260a-5f8d-4c2a-955f-fe2f3c13e6ff", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618703312, "uuid": "1009cd64-5fe9-4b81-b1aa-57f62ded7a67", "value": "8410ebfab9e68cdfe4dd420d4b79b35e5438a61b91aeedc3c4a0e7e8d64b69e1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c04a896f-9f5b-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618650198, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618650198, "uuid": "5558ddc7-2033-4c27-ac23-5674dbd965fa", "comment": "Malware payload (Dridex)", "value": "f9ca71f32d1b3a337e38be488117a180", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618650198, "uuid": "b0d00cb3-d268-4951-b657-074399bfa2d5", "comment": "Malware payload (Dridex)", "value": "8480e9f1620ef27e746e0a2e2164764d6503d41e6b7bc3232fb6349d9f74847a", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618650198, "uuid": "5c008f64-1bba-44c2-9c3d-02130c29b4e6", "comment": "Malware payload (Dridex)", "value": "8a088659edd32bc6fdc0db288d71cf2226a1e573", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618650198, "uuid": "ac9d545c-9673-46db-baa7-3e07a996c2c3", "comment": "Malware payload (Dridex)", "value": "c39fba0314da9260098f537a954605c786375127113eaaa26b61ad56934a0856b8c9a35022d0381ab8ca2d7acddf4518", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618650198, "uuid": "da023a32-4f1d-46de-bf92-c681dc632ed5", "value": "D2F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618650198, "uuid": "ee50f648-533d-49ff-a397-c9397653bb51", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618650198, "uuid": "864782f9-db26-4ac0-aa20-a7e222f58ebc", "value": "3072:GmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:XLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618650198, "uuid": "033bc143-caa9-4cb4-9e76-cfcd75e01cd5", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618650198, "uuid": "5ab53bba-f666-4aa0-8136-4012363525c4", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618650198, "uuid": "b151be2d-6af7-4349-b91c-9731d054108e", "value": "8480e9f1620ef27e746e0a2e2164764d6503d41e6b7bc3232fb6349d9f74847a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66e7fc02-9f4d-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618644035, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644035, "uuid": "181d219e-739e-4895-aa3a-f6a7454fd425", "comment": "Malware payload (Dridex)", "value": "d09e1891429d554897e744510a311557", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644035, "uuid": "01265a6c-b54e-4f55-965c-4e6fbf8a032f", "comment": "Malware payload (Dridex)", "value": "84e82144fffc11a5ce51e1e9a8a83a6729d013348a97a6b152e5490f1811c76e", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644035, "uuid": "eeaed7b6-b9d9-4839-a152-a456d22cbe0f", "comment": "Malware payload (Dridex)", "value": "d35789b73e72de3b59ebb3e118e5df20649dc0fc", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644035, "uuid": "b868c415-9e1b-4213-bf86-c97640236613", "comment": "Malware payload (Dridex)", "value": "b8c531b27d5eeec8f8aa582f00e05c00842f572a5547890c134fda1a449759fe631312577cf34263203a480dd6d2ff45", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644035, "uuid": "7524c4b5-c2e2-4f56-88f3-30f9964cd339", "value": "2AF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644035, "uuid": "043a096b-5be2-402e-9966-f776abc4d7d0", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644035, "uuid": "f23bbd1e-c81a-446d-bdbf-59cf23441f05", "value": "3072:NmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:sLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618644035, "uuid": "9199d874-7741-46ff-a0bb-a9f9153c3868", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618644035, "uuid": "9d8b255d-a1f3-4e8c-aac5-183171d82d7a", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644035, "uuid": "804121c4-ef1e-4359-8510-6cd151f92f39", "value": "84e82144fffc11a5ce51e1e9a8a83a6729d013348a97a6b152e5490f1811c76e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7233ebbd-9fa9-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618683567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683567, "uuid": "6ea1f4f9-2086-4378-89f0-4177ea60631b", "comment": "Malware payload", "value": "a1f8fb2f23561122b3a26ff347ffae37", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683567, "uuid": "593d3f3c-437a-4268-aa24-4b30cf40f51f", "comment": "Malware payload", "value": "853bc99d5d25a3765826330bf857df24bbf9a54c9e75aa9ee8f60f4331cabf07", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683567, "uuid": "facd7e50-22f7-41bf-bc57-32e658df17e1", "comment": "Malware payload", "value": "22ba38430b0378a67b3116cbcc96e1875c5b9486", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683567, "uuid": "6f116653-9fce-4405-afef-d2da46ec0c66", "comment": "Malware payload", "value": "4e0ebec8969973bffdb0c05895d3f19ec876f4da7aba18195ae5483bfa734b6ff5e44e9ac688e39da6d51d810bfa4c1a", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683567, "uuid": "47e7e89d-87f5-4fb0-855f-d4b971bf3e0b", "value": "E7F3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B496B1FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683567, "uuid": "6b6864e6-8488-4f37-8546-a6199ae57758", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683567, "uuid": "8c806c37-5796-41b2-8f0b-49e3f652d258", "value": "3072:yA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:y3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618683567, "uuid": "e09e13e8-551e-43a1-81a3-b7f25bc90ee4", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618683567, "uuid": "21b8c5e1-ae58-407b-992c-5cf49f3d5f4b", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683567, "uuid": "84ce7568-3575-4374-9a0e-f84f8d93cbdb", "value": "853bc99d5d25a3765826330bf857df24bbf9a54c9e75aa9ee8f60f4331cabf07", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b43d67f5-9f8f-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618672511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672511, "uuid": "c3bb4aa5-52be-4df3-bcd3-44d836d903f3", "comment": "Malware payload", "value": "9d472c6c1be4a9895ae411d177584773", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672511, "uuid": "b791ef04-a365-4b83-afba-6bb718e1dffc", "comment": "Malware payload", "value": "85eedab4a205456ea513805ef667791d5970fee11bbbfc37607738adc63bf739", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672511, "uuid": "a9a2e040-1e4c-4bf3-8ed2-ab8daf67137e", "comment": "Malware payload", "value": "664ff92f974d34f5b71006e4d4043ecd08d569f9", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672511, "uuid": "906a71d5-eb82-493a-b609-b2d5b3a62bfb", "comment": "Malware payload", "value": "83d824c6e8b22e787a2534f952645dde2e943f965077d55522ea20516f67dad11cf91ce421da2b6e528265a3fef3a1e8", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672511, "uuid": "6a493d5c-b565-42f5-b83b-bddc718f01fe", "value": "38F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672511, "uuid": "5bc8af82-c762-4994-922a-92219a849ba3", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672511, "uuid": "6e41d309-189e-4069-a082-d7e5635e9552", "value": "3072:smNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:1Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618672511, "uuid": "7886488d-6e5b-4860-87ad-e5e26a089e0b", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618672511, "uuid": "ce1a01a4-0dd1-4a07-8aa4-eac92bfafddd", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672511, "uuid": "d95c85af-f6b9-4473-a6ed-3dfad9e8426b", "value": "85eedab4a205456ea513805ef667791d5970fee11bbbfc37607738adc63bf739", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7be076e1-9f61-11eb-abe1-42010a9c0039", "comment": "Malware payload (IcedID)", "timestamp": 1618652660, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652660, "uuid": "0bc3e981-efff-4b9c-a075-48a230284907", "comment": "Malware payload (IcedID)", "value": "b5bee962d7e31a63dcd32236b77f7673", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "IcedID", "colour": "#819B92", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652660, "uuid": "8b152cfc-d348-4bda-bc8b-ef54c6d29bb8", "comment": "Malware payload (IcedID)", "value": "86150c570e2d253d54fd5f70c9fe62ff37897dc3a7b21658fa891263a843790d", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "IcedID", "colour": "#819B92", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652660, "uuid": "932bc782-4d66-4a8c-8cc0-92c9de72886f", "comment": "Malware payload (IcedID)", "value": "b77dc865013e78f6c773355453889478bfd66004", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "IcedID", "colour": "#819B92", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652660, "uuid": "7d1a2ac8-9bba-4542-8fd9-bd3d37d3d8b6", "comment": "Malware payload (IcedID)", "value": "e256d15dc00c7ca3b5685405d98337987bf744df9963c1e190a5ab75f956c2553f488b9542b710bdb5af9173beb84c06", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "IcedID", "colour": "#819B92", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652660, "uuid": "afd10d7d-bfb5-4cd6-af83-5e38beaed0cf", "value": "A053190DAB947CE0C0DDFE78F3858285571EBE32490D9B7B9ED25EBAC47AA045183718", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652660, "uuid": "1a93185d-9dfa-4488-ad1f-8737fcf2c1e6", "value": "418bb7afa91ee2677e9770deeeb77473", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652660, "uuid": "f0b3e148-9251-4b33-aa58-b18a4803201c", "value": "1536:zEHGJZblpKsmLTkD/QUh2WiVg26fQ6Ymxz5c:zee6kcrdwQ6xxG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618652660, "uuid": "d7757543-58ec-4e39-80dc-eb55f419e400", "value": 65536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618652660, "uuid": "943525c1-3d3c-457e-bfd0-74b92244dc0e", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652660, "uuid": "bbc51206-aed4-49ed-9e41-b4f456951410", "value": "b5bee962d7e31a63dcd32236b77f7673.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a24a2450-9fa3-11eb-abe1-42010a9c0039", "comment": "Malware payload (Loki)", "timestamp": 1618681071, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618681071, "uuid": "ecc8dcde-b9e6-4ebe-b7f4-73591733874d", "comment": "Malware payload (Loki)", "value": "bd4da56f33a7f9312220115dd952d085", "object_relation": "md5", "Tag": [ { "name": "Loki", "colour": "#D4868A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618681071, "uuid": "5f391c07-3a5a-4400-8726-57e8945c9773", "comment": "Malware payload (Loki)", "value": "861c03d487b914365bb0923f7a1ae1974cbff5a6f049bd648a3acdbdf1d859f8", "object_relation": "sha256", "Tag": [ { "name": "Loki", "colour": "#D4868A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618681071, "uuid": "9bcc6aff-b464-4afe-bf93-aae0f187356b", "comment": "Malware payload (Loki)", "value": "5300bf036004bec53b8100ab72dc0f1e8cca6448", "object_relation": "sha1", "Tag": [ { "name": "Loki", "colour": "#D4868A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618681071, "uuid": "ddfc61ed-d3d2-416c-a8d7-87313b75da8a", "comment": "Malware payload (Loki)", "value": "de0e3eefc8917a28f342ca40a7bc8523464960cc3b8c598b619a21fea4013e42701608fdc6641eba8792e8aae0dc1902", "object_relation": "sha3-384", "Tag": [ { "name": "Loki", "colour": "#D4868A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618681071, "uuid": "c1aade63-c14f-4b85-b9f8-7c5e44f8b80f", "value": "43B4238209AAE7AFA40809E903EE2C015D353CF827F36A4F40D5504E9AC5CA5FDD793E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618681071, "uuid": "9ec684ac-cd0f-4e89-9425-3490d6c8e779", "value": "6144:ssaMmWUnR/qi0AxXaC4kiAoaf3JsK8fVzw0L02HhtiSnCyLqPUg49UgTZ7E/MYEH:AMTUciHhaCq2WZdqSnV7FPTyDgJ3t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618681071, "uuid": "e86467a1-42ba-49d7-af29-cc5719f677ed", "value": 525418, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618681071, "uuid": "8e69044e-238d-47c7-90b1-4a4cfacd2cd8", "value": "application/zip", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618681071, "uuid": "f9061785-65ed-4c11-a882-62e7a5875c2a", "value": "Urgente RFQ_AP65425652_032421.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a9f5f1b-9f29-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618628445, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618628445, "uuid": "4a3c85b7-9479-475c-a1ea-ffe860793590", "comment": "Malware payload (Dridex)", "value": "2d10413ca4a3f52ec22f1c0db860fd07", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618628445, "uuid": "87d12250-67d3-404f-ad1e-0d52ad284de7", "comment": "Malware payload (Dridex)", "value": "8643eaa08d754c843806d0f5b7597503f096530aab312eb9a08a0089d6f4f071", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618628445, "uuid": "cf079091-9282-4749-9037-885551dc6f91", "comment": "Malware payload (Dridex)", "value": "1224eb74f6d3c47965bcc1a3fa37c9cd1e5e78be", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618628445, "uuid": "8820bf82-b810-4c32-a0e5-52b063b6c72e", "comment": "Malware payload (Dridex)", "value": "75eb093d501d957a12b4d08044142ef4efcb886128c98bef5325715dd70684484cc692ac9281726b0444983be2436d66", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618628445, "uuid": "e5caef01-fab4-40b4-be1e-bbef48a1412d", "value": "76F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618628445, "uuid": "c1366a09-1ddd-4c37-b1a1-f30cf5832f3a", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618628445, "uuid": "881ac921-36a2-4365-8d0f-9a0c66b09f38", "value": "3072:Vlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Vlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618628445, "uuid": "cc29f7bb-cf77-44b0-b21c-ef912074cb0f", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618628445, "uuid": "e3e36263-e555-4b98-9b0d-9e8f544bdd98", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618628445, "uuid": "8063496a-7f97-4cac-be26-a0d185dcd18e", "value": "8643eaa08d754c843806d0f5b7597503f096530aab312eb9a08a0089d6f4f071", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1eb3d724-9f1d-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618623298, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618623298, "uuid": "748bf243-41fd-40cd-974c-a5b1228c217e", "comment": "Malware payload (Dridex)", "value": "603b617285a44bf647439386e25731e5", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618623298, "uuid": "5c8f2d1d-6836-426a-bb18-b039ef251600", "comment": "Malware payload (Dridex)", "value": "86b25f5830e014d704d91b603481e1cd2cf92a5c94872ab409c0b1bd1317ade7", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618623298, "uuid": "5b914a47-4f20-4024-ac55-32010c7d280c", "comment": "Malware payload (Dridex)", "value": "c3e41dba288f318217b968ab9c6cb6bd6a99e927", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618623298, "uuid": "38a66aac-a202-417f-9676-2bcb1add9977", "comment": "Malware payload (Dridex)", "value": "af0536cfb913fabc5bf254cc64c9f331905ca3bd21909e0fd9e421f54b4ec61623c113b993ffedf72832c824773eaa8a", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618623298, "uuid": "6de6c938-250d-4403-8ec7-297ceb690b2e", "value": "81F3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B496B1FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618623298, "uuid": "7011c579-577b-4b83-b8a9-849af358e468", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618623298, "uuid": "7179b3cc-4144-451c-a77c-954f04c08756", "value": "3072:EA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:E3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618623298, "uuid": "548bbb59-5beb-4eb1-8b89-93dfdd65be09", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618623298, "uuid": "3d5d3fd0-9678-46c4-b7ea-7fd485585c63", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618623298, "uuid": "3e733c63-dd16-4a35-9f60-f072df37e499", "value": "86b25f5830e014d704d91b603481e1cd2cf92a5c94872ab409c0b1bd1317ade7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c20df09-9f5f-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618651828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618651828, "uuid": "1c7a1bc8-6481-43bc-80f7-a3a263e2bd5f", "comment": "Malware payload (Dridex)", "value": "5a16ec05c9a4ebaea85cf53042f99f5a", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618651828, "uuid": "a5b6efab-d497-4383-bd9c-78efe662f123", "comment": "Malware payload (Dridex)", "value": "870d773e97e7fc66179da9b8e821068b8cb410d8b1ab1246ff2f524c3c08f453", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618651828, "uuid": "18f22b22-3c8c-4f28-9c93-9effaa12adaa", "comment": "Malware payload (Dridex)", "value": "4ff7d7d513517daa9769c05dc0367b93a2ffc41d", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618651828, "uuid": "250ef5bf-fbaa-4367-9dfe-4b1d4caac81f", "comment": "Malware payload (Dridex)", "value": "06c96843d3e202525676112cf4a35d03ecb053e7e8ced895568ed41c01d86509be944753f7ccb53cf89f0590d4a2e868", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618651828, "uuid": "3a49991c-a4f9-4be1-b13a-998f354b10d1", "value": "EFF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618651828, "uuid": "50006757-ea22-47b0-aa81-d1cf09291dc2", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618651828, "uuid": "f0e5a809-a3a2-4e4a-9310-4e0af03ce195", "value": "3072:kmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:tLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618651828, "uuid": "e1aa5973-d583-401d-a8e0-a63e23677189", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618651828, "uuid": "4cf8d61d-2830-46ea-80d2-01e160ea983f", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618651828, "uuid": "3a07c74c-529e-46f0-8776-aa5441410e8e", "value": "870d773e97e7fc66179da9b8e821068b8cb410d8b1ab1246ff2f524c3c08f453", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b1fdbd2-9fc7-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618696521, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618696521, "uuid": "05fa4e99-61d7-4741-a51a-96e1bf6de038", "comment": "Malware payload", "value": "2a134662703fbcd40c7b427472506f26", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618696521, "uuid": "05b2e7d5-aa66-4451-a7a3-4db9cd4f9b76", "comment": "Malware payload", "value": "87b307d20b278940481a389e7e6373b70bacf893ee42915c09511e80c3b7a3fa", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618696521, "uuid": "c3d3c256-cd53-45f9-baa2-944e9e3b63e1", "comment": "Malware payload", "value": "034e923d6227c51b0c2b018be7b3a1c83a1efa09", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618696521, "uuid": "85016526-47e3-4f35-bde5-219d4764c90f", "comment": "Malware payload", "value": "50755e2cdaa9d0cfa33a9604f559e8ac3ff84526cd63aa225d8f7a5df2b06a69f8ea04746541fd1d04e8e5c7735fb3fc", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618696521, "uuid": "0811f197-49b0-4184-9c1d-63f98d42eecf", "value": "31F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618696521, "uuid": "d21f67ef-f740-46ab-b308-843e95efa31c", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618696521, "uuid": "1b5e0f74-03ec-4744-a843-edafe93bd391", "value": "3072:OmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:/Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618696521, "uuid": "4984768a-f062-4f62-900a-5bdbe807c33d", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618696521, "uuid": "dde57c8e-ec2d-4076-bb5d-f91e184cf0f4", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618696521, "uuid": "48834bc5-f2cc-43c3-a346-c451c74de6b2", "value": "87b307d20b278940481a389e7e6373b70bacf893ee42915c09511e80c3b7a3fa", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89b6e542-9fa1-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618680171, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680171, "uuid": "4625a6fc-3c6c-401b-a0c3-5cb76ad95ee2", "comment": "Malware payload", "value": "15aa0022a1c7d89f8267cdebcddf5629", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680171, "uuid": "3a8b2853-723f-44c8-8c22-821fc41a2472", "comment": "Malware payload", "value": "8821c8b3a0fb69f7431b3fca2523bca6c1282d575e51194f874b74959edcfb79", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680171, "uuid": "8a92b63c-ced2-4ad1-b9df-66e7ffb3becc", "comment": "Malware payload", "value": "c87d4ad52788563bfd42368c6e0756fd84fa6993", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680171, "uuid": "7a16f0f8-ae64-4c6b-8b1c-be56517a7c98", "comment": "Malware payload", "value": "dfc4f79ff4af14aea091aece67b14f58fd3ca2db8a676252e7e0fcfcd7cc39ff0b29448c5cef52cba1cd381c28a44890", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680171, "uuid": "8a37c3fd-aa77-4a57-bedb-874204c9dbeb", "value": "82F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680171, "uuid": "2acfbc59-7718-4837-8edf-5c7f75fec6bd", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680171, "uuid": "1bdb918e-8f20-488d-a082-04134f3dee33", "value": "3072:8mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:lLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618680171, "uuid": "3331b333-2107-4ada-bae0-23b952c1af0d", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618680171, "uuid": "a5a2aebc-ebf7-4b54-bb96-cb6dc2fa61eb", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680171, "uuid": "bed2cfc8-0af6-4b6e-a337-544b312fc0d9", "value": "8821c8b3a0fb69f7431b3fca2523bca6c1282d575e51194f874b74959edcfb79", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2cef54d2-9f65-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618654245, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618654245, "uuid": "78bcf853-5aaa-4530-a84c-22ace5736053", "comment": "Malware payload (Dridex)", "value": "bf88fec89723eb8f1d304228034d8cc6", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618654245, "uuid": "2137f2de-61b0-4a7a-b692-26ad74729b4d", "comment": "Malware payload (Dridex)", "value": "89a934d5be95ea53651682babccc3b8b9caccf56b482b2827df287ea2678a086", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618654245, "uuid": "5817ac40-08d8-450b-b1cb-5c853454fea6", "comment": "Malware payload (Dridex)", "value": "99de3e7948b574264be9207583d13920df04da35", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618654245, "uuid": "a0451171-7a13-4997-8168-468aa257b31d", "comment": "Malware payload (Dridex)", "value": "f204c9d04f7bdffd49576295f51407b21702f874754779c73fd8530e2a844331c20c1b0a47a35f174b24a5f7118705a0", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618654245, "uuid": "0f670bbc-ae70-4912-8f8f-e508b374fd21", "value": "3EF3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618654245, "uuid": "f426220b-0632-4d37-a1ec-a8273e092792", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618654245, "uuid": "3536ac05-4e86-4451-967c-6a484f03dea9", "value": "3072:xmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ALc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618654245, "uuid": "b8e5daad-8c65-49b9-888a-2a0fe0915c91", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618654245, "uuid": "a42dda32-10c8-415a-98bf-de403e67ceac", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618654245, "uuid": "d017b8de-fffc-4d5d-ba2a-3bf901e2beb2", "value": "89a934d5be95ea53651682babccc3b8b9caccf56b482b2827df287ea2678a086", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79b4e773-9f65-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618654374, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618654374, "uuid": "9b320ac3-3ee1-4d4d-a377-72659bd89b64", "comment": "Malware payload (Dridex)", "value": "64c60d3fea38a93d7d66e8e5f71d79c5", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618654374, "uuid": "b089b175-b10e-4af4-872d-047bd3b115d8", "comment": "Malware payload (Dridex)", "value": "8a1869d020b92b608c92b5d972b145f2f5d0f2d2e780824797a099a15afb1ee8", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618654374, "uuid": "3f37a5d0-9b36-4b3a-9dd2-ce86ef22e1af", "comment": "Malware payload (Dridex)", "value": "587ca07cc4c779f195f3175fefff7343a1fe888c", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618654374, "uuid": "96010d08-85e1-4bd9-826f-4053149e9dbb", "comment": "Malware payload (Dridex)", "value": "e31c26dc74fe8456d7fbf06dbdcd37bd0ee4246d35e1562f25a7407c3348caf6cbfc805bcc133fed18f129d5bfef1330", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618654374, "uuid": "73fc9903-68b0-400b-9a65-baeb8e0cf02d", "value": "E7F3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618654374, "uuid": "4d7fdba3-d310-4738-b5b9-db7c9889d71c", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618654374, "uuid": "3f6a57de-79d1-4fa3-8a20-9f11bcf7430e", "value": "3072:tiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:2eAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618654374, "uuid": "05df7c20-47c0-43ef-a999-12d5e0bd8b0e", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618654374, "uuid": "c723a4f2-e2e1-4892-b038-62af3c7d7352", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618654374, "uuid": "ded47a4a-6299-4547-85ad-ab26e82ed7c9", "value": "8a1869d020b92b608c92b5d972b145f2f5d0f2d2e780824797a099a15afb1ee8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8c0bfeb-9f84-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618667794, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618667794, "uuid": "a563929d-e440-4ab1-8a5c-872af827a727", "comment": "Malware payload", "value": "475ccbcdb8d1048a00f31d9ba74dd259", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618667794, "uuid": "14a64d2b-86ac-4d0b-a1a0-e58336895f15", "comment": "Malware payload", "value": "8a2b9af052123f2adca7d2306c27cb1b94cf31abfbd29fd0fa8f7df3ccaf5932", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618667794, "uuid": "fb9e5425-107f-478a-acce-1203fb363fef", "comment": "Malware payload", "value": "e6fb07af3ef38b366c1b9ad3a467d5df94706218", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618667794, "uuid": "c7a34320-0e40-4e4f-a62a-a8867137f2ce", "comment": "Malware payload", "value": "b2c504e2e692142dbc0d27369355e4a7db53269c9416607038eb8bb4b571a00490a02553eb3be7bd01c88bba646acaaa", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618667794, "uuid": "5531fb6d-fbb0-4dab-867f-2c12a780f117", "value": "E7F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618667794, "uuid": "1d4a7aec-1b6c-449a-8f3d-f738e6cd3ffc", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618667794, "uuid": "22a6c3cd-78bd-421c-a5bb-33741be688f4", "value": "3072:Zlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Zlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618667794, "uuid": "9475ed02-358c-4ff1-b109-3d0491703696", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618667794, "uuid": "21d7a7a5-babc-46c7-a401-00ddee598a6c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618667794, "uuid": "c0a22509-49ac-44c8-bbfb-a2b6699a7009", "value": "8a2b9af052123f2adca7d2306c27cb1b94cf31abfbd29fd0fa8f7df3ccaf5932", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f31e85e3-9f5a-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618649853, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618649853, "uuid": "85c1a8f7-63d2-4543-9f35-29ea652bd983", "comment": "Malware payload (Dridex)", "value": "bff3158242cb7dd0e3037fdd314feebe", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618649853, "uuid": "fae4c8eb-1122-4368-8140-8dfb9a1b5236", "comment": "Malware payload (Dridex)", "value": "8a391bf49684f0f5d1e115f34927c1717e62699f7a993536a2c718a85286b01c", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618649853, "uuid": "0b483b29-3747-4816-9317-667aaad98033", "comment": "Malware payload (Dridex)", "value": "eb9fbad44c0099e1b629a34e5787d4c40e7b1f8d", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618649853, "uuid": "53c3d202-be86-47e9-a61b-3214643d8123", "comment": "Malware payload (Dridex)", "value": "2521eae1a585b1ca2711771ecef5fcd865453e0fbd56f88f9ca1935590be1c5bc9e7b59ffd81731b7b0aa480c0f8b6bb", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618649853, "uuid": "828acee1-1ea3-448d-8dcc-4f33c2cbe4e8", "value": "76F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618649853, "uuid": "e5a9c78e-8829-4cfb-b32c-b04cd0c56185", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618649853, "uuid": "7bc00b1a-ae08-4331-a3e4-fc9746fc6069", "value": "3072:zmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:CLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618649853, "uuid": "a1c17dba-1ffd-4030-b0a6-5929f510ab64", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618649853, "uuid": "42161e0e-88d3-4b86-b0db-5c44a83a90ef", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618649853, "uuid": "b592fc5f-6760-40b3-8305-a1cdac349ba2", "value": "8a391bf49684f0f5d1e115f34927c1717e62699f7a993536a2c718a85286b01c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d9df6426-9f5d-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618651100, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618651100, "uuid": "3e09126d-783d-41fa-9a62-8e04b1b55b97", "comment": "Malware payload (Dridex)", "value": "8a4dca9e1e45d152b959780f40a9dbfc", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618651100, "uuid": "8242cbd2-4d61-4166-baed-d5780d343bd8", "comment": "Malware payload (Dridex)", "value": "8ba12578a2ae853ab1abeceecedbd3f47707b25c9147e51cf756deccc90b0965", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618651100, "uuid": "a3a819e6-c1d6-4b52-aa6a-1563b63f474a", "comment": "Malware payload (Dridex)", "value": "138e98b44dd5ed58a5d691c2958b3f1f13cd1146", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618651100, "uuid": "3b8631f5-2df5-474a-8466-21f730d85463", "comment": "Malware payload (Dridex)", "value": "d91c313d76817d6fbe41234718b120e9cb4c98256b2da4cc8544c8ee35c954f9c092901415a7af55942e767467b24895", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618651100, "uuid": "6f7c0a51-f1d5-49b2-99a6-628c070032c2", "value": "2FF3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B49671FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618651100, "uuid": "a4ae4c62-f589-4b92-b60d-e4a0f73ff16a", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618651100, "uuid": "fc53f6f2-9875-44c1-98b8-c350131b009e", "value": "3072:CA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:C3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618651100, "uuid": "5bbd320c-9912-4bd8-bb21-15402224a096", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618651100, "uuid": "6cdfd3cb-3aad-4348-a117-afe2d24e7115", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618651100, "uuid": "80536874-f3a5-4cb9-97db-8dda46e75d9c", "value": "8ba12578a2ae853ab1abeceecedbd3f47707b25c9147e51cf756deccc90b0965", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "932b6248-9f3c-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618636808, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636808, "uuid": "ddab4d51-d929-4d64-8b67-4ec41dd7a313", "comment": "Malware payload (Dridex)", "value": "088be7fc7990717ff182e9c3d41c7048", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636808, "uuid": "65f5e728-69ef-4f2f-8954-8057b5c0bc4c", "comment": "Malware payload (Dridex)", "value": "8c7ac924d941d34a872a9281ccd3691cc3b0a250aba0c6712b5a1f8452dbf3a5", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636808, "uuid": "69728e3f-c69a-4fd2-bdd5-e4f87cb3254b", "comment": "Malware payload (Dridex)", "value": "76387c656f467d1c52f2840579bede573db4474b", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636808, "uuid": "52e7e07f-e464-4e0a-8617-d5c348bb874e", "comment": "Malware payload (Dridex)", "value": "1be0f6f8817f5849111e47398f07f9d9d555549191327f05e7232192182142f7965afdadb4adc18e592fe118e19bfb7e", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636808, "uuid": "7639f80c-98f3-4992-861c-bfb3f7dc8b80", "value": "94F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636808, "uuid": "35c5028e-47e1-424f-9fd4-1d232f2f1d7e", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636808, "uuid": "f8b38766-1097-48fc-a733-8699d51dec32", "value": "3072:imNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:zLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618636808, "uuid": "c6ce0747-7a53-44f1-ba2a-03bf7f8b5061", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618636808, "uuid": "fb4a3c69-b87f-4743-bd64-c144464c786a", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636808, "uuid": "ee21d362-63d3-4ad1-80e7-4c1eed156af8", "value": "8c7ac924d941d34a872a9281ccd3691cc3b0a250aba0c6712b5a1f8452dbf3a5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c281239-9fc2-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618694375, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694375, "uuid": "607b1c81-a2da-40c9-afbe-c0b1c81b5027", "comment": "Malware payload", "value": "bc286fb4e35b09a642426e1c2b14fcac", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694375, "uuid": "6943e7d1-9827-4d0e-bc5b-d0f4db0f86d5", "comment": "Malware payload", "value": "8cb62fe9310d4ada10b1da2f29ad734efc5323befe3fabfc4a0631b25838dbe0", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694375, "uuid": "84e0dafc-6b4c-4d48-9901-30b754f07c1a", "comment": "Malware payload", "value": "f7408d52fdb1514a10a5e2a77a3e3f90a06cd151", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694375, "uuid": "f6f18a0c-6006-486a-82e1-2571fc1f5fe2", "comment": "Malware payload", "value": "f9a85d039839ba22adfd0dca402d467eef6f858b0c6ceeb5dcef5dba9e249c8b769eddc327be2f32302cd2d2d93332ce", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694375, "uuid": "63489f0e-e172-45d8-9d89-91c54e240db7", "value": "1FF3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B496B1FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694375, "uuid": "7911782b-2813-4a54-b42d-89cb952e0c95", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694375, "uuid": "7943fff3-4546-4778-bb50-beb14c898064", "value": "3072:MA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:M3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618694375, "uuid": "093570aa-c4dc-497c-8a1e-97f3300b5f65", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618694375, "uuid": "71c04362-adab-43ad-a3c7-4360b4cae67b", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694375, "uuid": "c4883a2c-7910-4091-aef6-b139f7f905fa", "value": "8cb62fe9310d4ada10b1da2f29ad734efc5323befe3fabfc4a0631b25838dbe0", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad9999a3-9f24-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618626544, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626544, "uuid": "000b01c2-c02b-4e03-b004-2f0d0770ed40", "comment": "Malware payload (Dridex)", "value": "68da380333e11dd35c1de82f86ba1d75", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626544, "uuid": "4779d504-d5c0-4d0a-a762-e57f6fb3b0e5", "comment": "Malware payload (Dridex)", "value": "8e4d4ac9e7595af5cfdb74f653d62768df10f88f127bc30812423a2355cea48b", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626544, "uuid": "1b10edcf-112e-45b5-8842-aa99b25ae106", "comment": "Malware payload (Dridex)", "value": "6a3abdffd883f5988f245e6a083efedea2bdb754", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626544, "uuid": "1a49a4d1-ba99-4e49-8408-7b4a1937d81b", "comment": "Malware payload (Dridex)", "value": "233473e70bf550eb7ace9a2d8a3d7b72b8bd14200c8f37f406262aefdaf2e59a56b4fcaf45e6e5862b2aba2b15777cf5", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626544, "uuid": "dd522f39-1ce7-457f-948e-d6fce86e1471", "value": "89F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626544, "uuid": "4fbcc015-ea59-413d-9c22-f87230e03d57", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626544, "uuid": "160ff606-a534-4602-bbbe-cddd2e2ed90e", "value": "3072:fmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:+Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618626544, "uuid": "cefbde43-f171-4fa1-8188-9f791b34dc03", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618626544, "uuid": "81223f1c-7b11-408d-84df-f89b5df93752", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626544, "uuid": "f63d51f1-5047-449a-b091-260f5e4c73c6", "value": "8e4d4ac9e7595af5cfdb74f653d62768df10f88f127bc30812423a2355cea48b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c233798-9f6d-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618657707, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657707, "uuid": "14998c2a-789d-42e6-8fac-ae3a8d1fc019", "comment": "Malware payload (Dridex)", "value": "2176989774cc7bab99e6721c842aa298", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657707, "uuid": "88f2f44d-518a-44d9-ac35-557e4afdb9bd", "comment": "Malware payload (Dridex)", "value": "8e516aaf279ea8383e01d6aa6f7a0fc20c30299d8da79939d6d43ffcc1cec569", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657707, "uuid": "0f0a0a16-8f18-40c8-ae31-49914da47d00", "comment": "Malware payload (Dridex)", "value": "66e2493d01cbbde987a0e1f7c961c98a55f3e819", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657707, "uuid": "f98f29c6-dafa-4d3a-8ae8-a5213d795b91", "comment": "Malware payload (Dridex)", "value": "7845be073afc8490154bfab1a0a19b19b38eea3544cb2f7c72ab38288e7166bc97725ae42c502a5f7ee4a764b1f32a65", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657707, "uuid": "becdc9c5-36ac-4c81-8c76-4db866bffdf8", "value": "04F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657707, "uuid": "882b7173-ea6c-429a-85c4-3e7fb180b9f7", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657707, "uuid": "73db14c1-5976-40bf-aea2-6869048fb909", "value": "3072:OmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:/Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618657707, "uuid": "1d4a5a75-6c6c-4738-8a76-44ed34117959", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618657707, "uuid": "55714e4c-cfa3-475a-9df7-1efab7706586", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657707, "uuid": "8a39e582-54c6-4231-a834-89d0c2a1dcc3", "value": "8e516aaf279ea8383e01d6aa6f7a0fc20c30299d8da79939d6d43ffcc1cec569", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4943892-9f6e-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618658446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618658446, "uuid": "06ae5d6f-b128-4838-90a2-2e17ede3be32", "comment": "Malware payload (Dridex)", "value": "eb1aea4375796c970e9ed723026d8d58", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618658446, "uuid": "9ce37662-3c11-4664-a6d8-180f2a657b2f", "comment": "Malware payload (Dridex)", "value": "8ede8545c28ea0e0af315cc339d7d4d00bda9ed2e884f5bd9c6deb0479526235", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618658446, "uuid": "daec58eb-3326-40ed-9148-617468e9cbde", "comment": "Malware payload (Dridex)", "value": "78592b8127961d082d8b778ef26d65f954bcd8b7", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618658446, "uuid": "292f7f9d-5e7f-4b93-a59d-1016d4fa08e2", "comment": "Malware payload (Dridex)", "value": "cd448a07703cb4b9c393ea26981da47936cc18f93d4d6dfcd6e3f2085b1efed6c778bbc14047fc8b774e1cee8e905046", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618658446, "uuid": "7ac089d6-baf1-4f51-a73e-6b27d320b2d6", "value": "ABF3D088CBB3E4E6EFB3D37866F85E1B561174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618658446, "uuid": "a1ffb7f5-fb21-42cb-982a-ae4ca92b8560", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618658446, "uuid": "55b48291-38dd-4a5a-a356-c8e0d26e9706", "value": "3072:RmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:gLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618658446, "uuid": "b0ae39f6-be1b-4e70-bfc3-8d1f43937e63", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618658446, "uuid": "51314021-0dfc-4542-9f74-876066080cf0", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618658446, "uuid": "d13dcfb8-1992-4bdd-be04-ce32b1783b64", "value": "8ede8545c28ea0e0af315cc339d7d4d00bda9ed2e884f5bd9c6deb0479526235", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b884e59f-9fb2-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618687551, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687551, "uuid": "35c61672-b445-4864-a3b1-47481bbb1209", "comment": "Malware payload", "value": "681cfe7d6d92b01a33ee7fa01de3b3c1", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687551, "uuid": "875ceedf-9663-4064-9421-36f48dcd9bea", "comment": "Malware payload", "value": "8ef48d24a9a2db0aa143a908003fb85e852586583fbe5662baede5828a2af1f5", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687551, "uuid": "861d1376-b629-4c67-b545-5baa045c176f", "comment": "Malware payload", "value": "d530a9805d6efce361e347aa6fea3a50482157ca", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687551, "uuid": "c535ef71-b976-488c-a507-09a13deb1a4f", "comment": "Malware payload", "value": "5fdd4a131bbf4c737a0cdcf8cf3a33b2ebae1e8e4bb0d6f2843c7c8dd753aea9ebba50408c0194f0f110ce00635376b5", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687551, "uuid": "565ebf83-d6c6-40dc-b014-c3cec9588c8f", "value": "E0F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687551, "uuid": "f04b6e9e-e262-4384-a425-54964eaa2226", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687551, "uuid": "2cd2f547-698d-49f2-8e5d-5f38c5c917a5", "value": "3072:tmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:MLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618687551, "uuid": "7eb69116-1275-4454-9bcd-2cd2586dcff3", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618687551, "uuid": "6398cf62-6f5e-4a62-b799-35fc921470b6", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687551, "uuid": "a43384fa-4388-4f9f-aaec-c5b546283944", "value": "8ef48d24a9a2db0aa143a908003fb85e852586583fbe5662baede5828a2af1f5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62d387cf-9f58-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618648752, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648752, "uuid": "6b8e65a4-32ab-43f0-a924-9a139e569f6e", "comment": "Malware payload (Dridex)", "value": "7f7c6954bd6d520bba841590edb84708", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648752, "uuid": "0fdacfa1-4ac8-4da8-8a30-18186aaa18d3", "comment": "Malware payload (Dridex)", "value": "8f38c1ea62d839365681ca6f673d6001471eedaa1455f6c14120e0eb9f42ccb9", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648752, "uuid": "a9919893-189d-4dae-b226-edeb578a7c5a", "comment": "Malware payload (Dridex)", "value": "ad93b53320de5ef608152bf4f404b5a3478c0e37", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648752, "uuid": "88bb4996-375e-4a24-89f7-fa20fc127057", "comment": "Malware payload (Dridex)", "value": "897d98a9049bfa3f274dbee3415f16f0ea7c2a8f836960ee5a5f114d05aa109a1e14ed2d8dd48b40c2a9f87dec3319bd", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648752, "uuid": "43449c4f-2dde-4272-8ff7-eb6e9f86c465", "value": "DDF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648752, "uuid": "c12486fe-9639-43a9-8acd-e3f9750382f1", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648752, "uuid": "5b1e4db4-8857-433b-8f7d-980d6a0ab144", "value": "3072:Nlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Nlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618648752, "uuid": "e14c7505-f9fe-4df9-93ab-fdbf9328b011", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618648752, "uuid": "92e5db23-293f-4f4b-8f5a-60759073f843", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648752, "uuid": "c8f71040-0840-40ce-a823-045340e7d327", "value": "8f38c1ea62d839365681ca6f673d6001471eedaa1455f6c14120e0eb9f42ccb9", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d7f348f-9fd7-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618703155, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618703155, "uuid": "43406f78-c5fa-4e9a-b351-cbe193fabd85", "comment": "Malware payload", "value": "9f1ee50a47c25d39f3174b1dde2e8dc9", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618703155, "uuid": "937cb731-7708-4217-98cd-8134d46d996f", "comment": "Malware payload", "value": "8f4d72bb5c27f00cf6432602893e6f6360c841d5875ee2cc5621a6508bc38261", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618703155, "uuid": "e8ef5d6e-cfe6-42ac-9ebf-9b18a73aab03", "comment": "Malware payload", "value": "96b0853e58a6f9c1545481e1aac478151d019b32", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618703155, "uuid": "a7d2aef9-58d8-43f4-b5d6-b40b6d10adfd", "comment": "Malware payload", "value": "4b87508268fee5f412e8016e193d90460c757307e7f7a35e29719337334418f32f7c960707408e621fb91a43ef6219ae", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618703155, "uuid": "63bf4c59-5841-44f3-b3e4-2981f192088b", "value": "7FF3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B49671FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618703155, "uuid": "4e182a1a-8bdb-4459-b5e9-8d1efc128103", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618703155, "uuid": "a2aca1bf-0823-4e56-b225-911a414707bd", "value": "3072:7A6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:73J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618703155, "uuid": "7e3ed1dc-cb56-4ed8-a4ec-355bd7ba02d2", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618703155, "uuid": "13fbadc8-1003-4296-9a57-2eb63fc1e589", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618703155, "uuid": "0348a2bf-9bde-4680-b389-a0bae3c74873", "value": "8f4d72bb5c27f00cf6432602893e6f6360c841d5875ee2cc5621a6508bc38261", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f81421c-9f4e-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618644532, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644532, "uuid": "f287e611-4c7e-48b3-bd2a-a34e363b3b2b", "comment": "Malware payload (Dridex)", "value": "38f1828994480d938d1c10dca0962b6a", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644532, "uuid": "3be29f92-4d49-4bd2-b80a-dcd88a8f45bd", "comment": "Malware payload (Dridex)", "value": "90f65cd24849f01427f08c545bebf25c788eb2a1e0e8885e2afcc7d06a35e49f", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644532, "uuid": "04bea595-6f5b-4b22-a6ac-485c4855b98a", "comment": "Malware payload (Dridex)", "value": "9bba10b6d45afad6f68e52d6df9f4fe339b321f9", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644532, "uuid": "badf27c7-499c-4d03-a3d7-fe7b38ccff23", "comment": "Malware payload (Dridex)", "value": "ff0d7c49bb0bdbd7c3c2b2252f10d4c796f50c17f3e5382f7458d7d412d56c8f55675d8ea16cf180e0ccf182f31ebcb0", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644532, "uuid": "7ea1ff9c-90bd-43f4-a3b0-330e9581d863", "value": "C3F3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644532, "uuid": "9ea7105c-cbf7-4983-ae29-8d6d68a9dd1c", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644532, "uuid": "122f5620-9dc6-49a8-aad7-efd07cc0ec01", "value": "3072:piFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:aeAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618644532, "uuid": "d9520edc-48aa-4fde-85f0-409b5dd1984e", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618644532, "uuid": "76cdd20b-538a-4d56-90cb-700711c5977e", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644532, "uuid": "b17ccfe7-6066-4b0e-910e-9a0ca97a1b57", "value": "90f65cd24849f01427f08c545bebf25c788eb2a1e0e8885e2afcc7d06a35e49f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d35bc74-9fb2-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618687398, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687398, "uuid": "bc1d9dab-9565-43da-ad85-f9625acdc385", "comment": "Malware payload", "value": "e567591f1f8d2aa625fc345b0e66de33", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687398, "uuid": "bb721847-74b5-4d95-98a6-81212c063d44", "comment": "Malware payload", "value": "91343163ab1a6196ed185d0b60ccda2f5323e1bf50e6764a7555e8393a97505c", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687398, "uuid": "a96f883b-d2b4-44bb-bad8-4bfcbeb143a5", "comment": "Malware payload", "value": "d77ea0c1abd378fbd6f57eb78993de272fe58de3", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687398, "uuid": "8d0ee60b-e398-4370-8ca4-420220e98cbb", "comment": "Malware payload", "value": "df25e81b27ca2d8c84a4c9dc0d25a990aad7026a05ebe094f10ebd0cd71b6506b7a95f76d2b06f0a70d9c3000cb31d48", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687398, "uuid": "f53977ca-70f2-4b5a-be24-382925fc4e12", "value": "C4F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687398, "uuid": "9ed87326-b248-4cd6-89f7-027a5117d460", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687398, "uuid": "b1e724ab-8941-42ca-9603-1f571038c2f6", "value": "3072:JmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:YLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618687398, "uuid": "88dbb125-5ea4-45bb-a781-b76296883b27", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618687398, "uuid": "09527ad5-61b2-4add-9071-4d83fea498e9", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687398, "uuid": "528de515-e259-40fc-bb28-0bfb2d28d97b", "value": "91343163ab1a6196ed185d0b60ccda2f5323e1bf50e6764a7555e8393a97505c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dee68a5e-9f3c-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618636935, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636935, "uuid": "b0655389-f4d0-4bbc-a7d7-f6c1e5b64b56", "comment": "Malware payload (Dridex)", "value": "87227c7c06612b1675d11ed2e875a764", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636935, "uuid": "ae510c6a-1df5-4019-a56a-ba42975e59a1", "comment": "Malware payload (Dridex)", "value": "914000fdcb6dacbfdb27841fb7daa047cbd1c7fb08cb91965e3cd747ea966a6b", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636935, "uuid": "79ea6e98-f8ea-4655-a3fc-ab25c1b64de0", "comment": "Malware payload (Dridex)", "value": "85f5c42ea28b80c552fe6ce41fb55368920f0973", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636935, "uuid": "c0a8710d-0c96-49e7-9d69-4abb6068a91c", "comment": "Malware payload (Dridex)", "value": "aee3aebca7f01626be1772a1d1308e159575e4038ff180d1230cff1a4cca147f5c1fd25e882394a7843e6d99d7074c1d", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636935, "uuid": "98fdb530-9e7e-4a8a-9fb9-2885d215c7c5", "value": "A2F3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636935, "uuid": "39c8a453-3c77-454f-99b7-b33ad5ffcc38", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636935, "uuid": "b21cccd4-376f-46f5-bb80-160172565bea", "value": "3072:3iFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:MeAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618636935, "uuid": "2415413a-2eaa-4451-9c17-9059d1053494", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618636935, "uuid": "1d8eb5e6-f544-4157-9111-3a99466c0382", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636935, "uuid": "4b9ce2fa-16e6-4e87-a520-a0eb14ef3cab", "value": "914000fdcb6dacbfdb27841fb7daa047cbd1c7fb08cb91965e3cd747ea966a6b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc9980cd-9fab-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618684578, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618684578, "uuid": "6aa13a59-76d8-459c-8617-af7c3364a30e", "comment": "Malware payload", "value": "62c6422b2170bf9db8c65b1c116cf9c5", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618684578, "uuid": "d1606eca-0c2a-44cd-a5e9-6ad17b5d9c25", "comment": "Malware payload", "value": "9196b3ab46f5d0a01f9309557356c545fbda4c8039d8b6c4b9c258898724d5ff", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618684578, "uuid": "7299bb8b-a4d8-4d46-93e3-a0ab214b0cd8", "comment": "Malware payload", "value": "8eff428cc4e8e2305491f21b21ce2c10ba47e0c6", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618684578, "uuid": "c006337e-29d0-4dca-997c-d31b9112d944", "comment": "Malware payload", "value": "ab87e2dc3619897bba046d82b9fd7618d850399299057812076129d51215804f73129408f1f5a46cf4786fc6bbaee588", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618684578, "uuid": "88a036db-dfb8-400f-abe9-1aedc7fef925", "value": "FEF3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618684578, "uuid": "6888c491-23ac-4eae-abff-eb1c06882dac", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618684578, "uuid": "0ae80440-da99-4be8-a2a3-8c6746b1a88c", "value": "3072:IiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:TeAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618684578, "uuid": "38486cd9-11bb-4053-af41-6d5701bd656c", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618684578, "uuid": "bb1e5692-3e43-4d1c-bf30-711216a28c1a", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618684578, "uuid": "03bb6fa9-be2d-4535-a2a4-377d0f8ed68d", "value": "9196b3ab46f5d0a01f9309557356c545fbda4c8039d8b6c4b9c258898724d5ff", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98fd314d-9fb3-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618687927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687927, "uuid": "b2d01638-7932-4313-b9a1-3c7ed72208ae", "comment": "Malware payload", "value": "f909a6fb32b438f766c1773c8bf45104", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687927, "uuid": "396de45f-3e93-4491-aa67-a952b14961e4", "comment": "Malware payload", "value": "9202f7fa33db5e5f9004f6f12ca6fe18f106396d978a7718430f24357afbc10f", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687927, "uuid": "cecda900-ded6-4da0-a0e2-35f029e9f74a", "comment": "Malware payload", "value": "7833640404c4ec8803d759982752d368973188f2", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687927, "uuid": "c8a758bb-e7fe-46e7-9024-7d39d4a00b44", "comment": "Malware payload", "value": "210880d589e60b440dee27737a977db21d842508e092c7133e4c7f1e522db1a5ac45bfa9a4f23416f4c48ebd190a17dd", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687927, "uuid": "3db1cc36-f1be-446e-b436-a695e7c747d8", "value": "4BF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687927, "uuid": "3e63e199-bb75-496f-b1c2-af481ba327c9", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687927, "uuid": "5f00ba06-fffc-41fe-96bd-38d03877c16e", "value": "3072:EmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:NLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618687927, "uuid": "affefab2-5ef8-49de-98c7-af9202c5a7e9", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618687927, "uuid": "fdaac49c-0165-4980-a807-6d621671dcc7", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687927, "uuid": "99f10215-fe5b-499d-bb94-7df3f45350fd", "value": "9202f7fa33db5e5f9004f6f12ca6fe18f106396d978a7718430f24357afbc10f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c61d470b-9f1c-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618623149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618623149, "uuid": "7f437d40-039f-4907-8fcb-5f030c7ca9eb", "comment": "Malware payload (Dridex)", "value": "b849ea92a643b4afa7141eeb43d0a8e4", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618623149, "uuid": "6121d9ec-826a-4752-b4f0-6e4300089bb5", "comment": "Malware payload (Dridex)", "value": "9251c270ee2ba70bf6e0db200364948916121900344fa3645861053ca2ba5315", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618623149, "uuid": "b1baf288-a0b3-459d-b556-f164bbec1de0", "comment": "Malware payload (Dridex)", "value": "edfb9c4f0a806935485cf2cfd250d67382b0ff10", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618623149, "uuid": "6829f852-4db0-4bd9-b585-95b225a8f69a", "comment": "Malware payload (Dridex)", "value": "a58c7768203f07fc847fed7ac68f778326d882e3c46d7e01016871b3376be2f13e8fe205cb097f1b4f51a2dfc3034375", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618623149, "uuid": "7238dc47-0ee1-423b-a98a-4998e2dedd34", "value": "A8F3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C5846E9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618623149, "uuid": "6b398aca-ee4f-45ce-9e7d-903bfd526310", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618623149, "uuid": "b4877b98-4a85-421c-8463-16fa83756f8c", "value": "3072:7iFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:YeAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618623149, "uuid": "6198d089-c04f-47ec-95e0-70017f77f4ce", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618623149, "uuid": "1ddc88eb-7ed7-4fc2-bcb7-e7f4110c6fa2", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618623149, "uuid": "2710b762-d337-4449-b467-1e315cc940f3", "value": "9251c270ee2ba70bf6e0db200364948916121900344fa3645861053ca2ba5315", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "219fefce-9f91-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618673124, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673124, "uuid": "824bc390-6b5f-4e59-bb97-3df42cb630b1", "comment": "Malware payload", "value": "3d789c6199eeda5ea494a5332f1386ec", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673124, "uuid": "73a4e1f8-291f-4cff-8f97-c2a0afad40e5", "comment": "Malware payload", "value": "929323e00a539cd11332a86eef7df79dfe2312443e1f4dd061804241c79f09e9", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673124, "uuid": "74db0561-1505-4698-aa65-7983652152e1", "comment": "Malware payload", "value": "ce666dcf5d6fe8c3c04ddeae3c69c0ef0349fb69", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618673124, "uuid": "1435f8ce-f3ac-40b9-9820-d2ac5e424afd", "comment": "Malware payload", "value": "c081a8b59d9f60ef3e999d27c6f4c26265424af54534bf0a7e0cad01f5a77bea9141aa5f80e3cb42e772b326f2ba7315", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673124, "uuid": "6fe5a0bf-3b24-44d8-b149-43c476b22ec6", "value": "00F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673124, "uuid": "0c002e72-b392-4ae6-a0fc-34590f589e1c", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673124, "uuid": "514bbbb5-0200-4dac-8725-dc2fa77146ac", "value": "3072:pmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:4Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618673124, "uuid": "a549f922-61a4-4a69-928a-b7f68a6be19d", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618673124, "uuid": "8da8cb6b-cb11-45cf-8160-f52ad2d5347b", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618673124, "uuid": "e1e0418c-618e-4960-aed1-5e14cd2d0c80", "value": "929323e00a539cd11332a86eef7df79dfe2312443e1f4dd061804241c79f09e9", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cef8f9a8-9f2a-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618629177, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629177, "uuid": "61456cdb-60c0-4f31-8955-d416e2f7bc89", "comment": "Malware payload (Dridex)", "value": "e102be8823270fe56ba56a8edf3daa4f", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629177, "uuid": "a4b0cc16-d676-4fd6-aa3c-18010c2af149", "comment": "Malware payload (Dridex)", "value": "92f12d7d24eb3c9b3d6afa250bb1d532f15923c86670a2fd1c1975ef1ee6b7ec", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629177, "uuid": "8d8a561a-b090-4077-a758-e0744269eead", "comment": "Malware payload (Dridex)", "value": "7113769ab49f4666c3851a7488757392240eb865", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629177, "uuid": "08005e8f-7225-475e-99ee-05581ef82192", "comment": "Malware payload (Dridex)", "value": "656e73eb540a9ecf93d14ec459b44d88f21e4012adcb3d45b2ae000eaad349a1df984cc32739038e37e413f97584058b", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629177, "uuid": "8be8fc0c-9bf3-45e8-b157-824f3145d597", "value": "AAF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629177, "uuid": "d458f13f-8d2a-4233-8216-4d23e4276601", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629177, "uuid": "67381fa4-9e26-4594-ab2d-55e7eb3a016c", "value": "3072:WmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:HLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618629177, "uuid": "e62e9238-411c-445c-ad9b-95f1f9d2deae", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618629177, "uuid": "dc452a3e-266d-4c8f-9ff1-39d3074025c5", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629177, "uuid": "5be6e226-a577-4e45-bc3e-b9f64a00f545", "value": "92f12d7d24eb3c9b3d6afa250bb1d532f15923c86670a2fd1c1975ef1ee6b7ec", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d834ae57-9f15-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618620173, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618620173, "uuid": "e4c91021-1f31-4bad-960d-3efa9f1ac5f8", "comment": "Malware payload (Dridex)", "value": "e016d35d3ea7fdcbca8e00e674feca72", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618620173, "uuid": "93cbe7dc-f8da-454b-b2e2-525b70e07f2f", "comment": "Malware payload (Dridex)", "value": "9328352a4a5cb0703566def7fd41db6fd2813473ef7433aa9519b07f858c6d63", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618620173, "uuid": "e4f1b4dd-d03e-4ad2-a8cf-127e1f36ea52", "comment": "Malware payload (Dridex)", "value": "ad27dd815cd6cad838f8559e55c5a2bd664f54f3", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618620173, "uuid": "a6c259f5-00dd-4d85-b5d6-a21f085d43cc", "comment": "Malware payload (Dridex)", "value": "b5005f5181da56a25addec65ea443669433a41608ee49f78b8a7ab6c221aa760b42e72af830011cc081682b6dcaf0f67", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618620173, "uuid": "1716b04c-f76b-45f9-8672-2407756c4fb3", "value": "3BF3DF08D1CFCA46E00B69700D9A761BB79839812F7C8EA8B49671FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618620173, "uuid": "76f19933-6fd4-4330-bc9b-595a1a33b5d9", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618620173, "uuid": "bccb3f6d-ebba-4996-bf8e-fb7af061ea77", "value": "3072:YA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:Y3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618620173, "uuid": "143dbcd7-93e6-432b-a91b-487f59b12c65", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618620173, "uuid": "fc110115-a4b1-43eb-bfb4-52f127955806", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618620173, "uuid": "ada2d351-a48c-48c1-a1f4-472badd32dfe", "value": "9328352a4a5cb0703566def7fd41db6fd2813473ef7433aa9519b07f858c6d63", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ecc0394-9f12-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618618654, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618654, "uuid": "5d7e3e1d-c897-4d9b-873a-c619292cc4cb", "comment": "Malware payload (Dridex)", "value": "9a856a6684a9638595e6de2f7f1d28c5", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618654, "uuid": "47c367bb-1cba-41c3-9bcf-f213e61214d9", "comment": "Malware payload (Dridex)", "value": "9336e245b9b923739ea701f24836a4477a0d472a61b5b3bea1819fc53246d62b", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618654, "uuid": "08d683a3-552c-462d-a18d-4f1b95f3877a", "comment": "Malware payload (Dridex)", "value": "c449ae38cdeb78fb732617a405a4f1b04a8e16ac", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618654, "uuid": "eb77bbb2-976b-40de-b663-f1e91885f56a", "comment": "Malware payload (Dridex)", "value": "fd22450972e820f95189577b9dbac83a94c911fe4e67abf967a1c5f0f7f272407cddf1b810bddac864198a60d162d831", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618654, "uuid": "59267e65-37d5-4ee6-8926-47427534790d", "value": "34F3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B49671FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618654, "uuid": "bcba8029-dbb4-4f16-9a9b-6b1021f531fc", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618654, "uuid": "c91adffb-bda0-41d3-b575-a946236a6513", "value": "3072:RA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:R3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618618654, "uuid": "e007c0c7-e26d-484c-8373-e53a5ee331cc", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618618654, "uuid": "c59f7840-a2cf-4b3d-a7f0-cece0b53521d", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618654, "uuid": "de4b3983-fc22-4c89-b065-42878c7685f9", "value": "9336e245b9b923739ea701f24836a4477a0d472a61b5b3bea1819fc53246d62b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51fb1813-9f45-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618640564, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618640564, "uuid": "14f4ce65-e1ee-4404-9a8b-90ed0d624dec", "comment": "Malware payload (Dridex)", "value": "a85d2bbf51f71f5fc4a7fecbdd0725d2", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618640564, "uuid": "53fd326d-1475-4815-a820-4e9433d3b69c", "comment": "Malware payload (Dridex)", "value": "9496b228f28ae83a00d2fadbf6a3e4739bab5c1d38e6099ea1c0d076844af586", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618640564, "uuid": "224d5172-58f6-47a9-8291-3e1a314b26a9", "comment": "Malware payload (Dridex)", "value": "3bafc3b2445da9547cc2aec26cfe03b5c306117b", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618640564, "uuid": "2468cb50-6aa7-4491-8e82-05c5e0fc1d8c", "comment": "Malware payload (Dridex)", "value": "afb6a47b6c0874ab65791470819b2a0ba212e58ebf415dc73860a670b334b065bfb5ab82d70fc9aca90b9a75a1c0e565", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618640564, "uuid": "ce2c35e0-b60b-4fd2-8075-5c42e7631007", "value": "5EF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618640564, "uuid": "8d64e2c6-aa39-493d-88fa-ab63c5fc9f33", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618640564, "uuid": "ca9b0284-fcd8-4402-9d44-bb752163af0e", "value": "3072:AmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:JLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618640564, "uuid": "15067635-12ce-49fd-b8e9-7442302cb339", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618640564, "uuid": "eeef3b0a-d886-416a-81e8-e99f9eb21dd6", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618640564, "uuid": "47542893-0892-419d-9e09-f120928787ec", "value": "9496b228f28ae83a00d2fadbf6a3e4739bab5c1d38e6099ea1c0d076844af586", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ada5a23-9f7c-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618664067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618664067, "uuid": "835ba597-17b3-4ac9-b8bd-415c0f2c4455", "comment": "Malware payload", "value": "207e550a62b5f954a44fa5a0a4149605", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618664067, "uuid": "4e5bc8d1-d778-494e-b1a2-239c66f9a37f", "comment": "Malware payload", "value": "94bb9baf24c296560d0f93e2f50f22dc9779dcb7bc4dad06aff469e2d1441782", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618664067, "uuid": "e5da5894-f044-4464-8d85-8a0385476a3c", "comment": "Malware payload", "value": "2a83bd458e7fdfb44262d482c5da970352934e0a", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618664067, "uuid": "ab9f17da-5f53-4fff-a2b3-adbd5bf4ead2", "comment": "Malware payload", "value": "869a3c30f59354a01f1acd51c3529e7d67f044103acff0784bdf14580d8c0926279ee6b385a410cb1a34b7f27f39d8f8", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618664067, "uuid": "d4d0dc81-4239-4bd1-a840-385e25dd533a", "value": "17F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618664067, "uuid": "c9cf6cea-ec5e-4c16-9aeb-1101d48c4842", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618664067, "uuid": "f7044224-cbb7-4aae-8d2f-33512a35d5a3", "value": "3072:Blpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Blo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618664067, "uuid": "ae293e60-9b05-4e30-8a36-3fe2ddeedea7", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618664067, "uuid": "f3ff6bde-ab39-49d3-948d-6781370d13e1", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618664067, "uuid": "b8831dfb-c162-43a8-ae3f-ed145aff3e04", "value": "94bb9baf24c296560d0f93e2f50f22dc9779dcb7bc4dad06aff469e2d1441782", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3398ff19-9fab-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618684321, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618684321, "uuid": "b8d3908b-c083-4619-a1e5-6de1631134f6", "comment": "Malware payload", "value": "982fbf7728efa5a48b463f614d2deefa", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618684321, "uuid": "b1bd3c32-d171-43ce-8ffc-43009d334e42", "comment": "Malware payload", "value": "94ff8bad73c026a862b7ddc0ecc8bcd52b9a21a7c0fdafdb7fbaeadfa97978e4", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618684321, "uuid": "cb7f6ea1-da56-4ff2-b3b0-93e5050e0736", "comment": "Malware payload", "value": "820f13c3c118140116326775c7659ea6e9ae4dd4", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618684321, "uuid": "0f5894ed-6c6f-4165-ae02-5e474d94df94", "comment": "Malware payload", "value": "048ecc67371ff9f6436307f2e1d040151bc1b7e75f1cd6bf7f37eb1ba0d7a8bdac053db1c0b913c63b424beb9ac64c73", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618684321, "uuid": "83560ba8-7bed-48cd-9e1a-de51aebad1bf", "value": "96F3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618684321, "uuid": "c028ec26-7026-477d-8cec-bae9d42af987", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618684321, "uuid": "e6caf349-554d-432a-b4d7-23dd6d6809dd", "value": "3072:niFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:8eAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618684321, "uuid": "156d39c9-94d9-4f05-907a-5026792f16fa", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618684321, "uuid": "58e8333d-f132-4236-acf9-85e20fd7eaf5", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618684321, "uuid": "8315ee44-acba-489c-be64-abe723256ca5", "value": "94ff8bad73c026a862b7ddc0ecc8bcd52b9a21a7c0fdafdb7fbaeadfa97978e4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e868557d-9f3d-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618637380, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637380, "uuid": "ece73ff2-d19b-4e3a-bcdc-f96d232378eb", "comment": "Malware payload (Dridex)", "value": "686dd6c71f0181e9c1ad96eb84895eb8", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637380, "uuid": "7a43ae1f-8356-4031-8742-a3ffb7ec9223", "comment": "Malware payload (Dridex)", "value": "952d1230b12103e517dc6f998d4819d08ba45a276e48a2daa8134e87edf8a954", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637380, "uuid": "164c7d9b-f8de-49d8-8efe-f6ee77c873d4", "comment": "Malware payload (Dridex)", "value": "962a3acad42518ea67d4fa879be1d4a583c8a967", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637380, "uuid": "7077e72a-01b6-455c-bf01-49d088347761", "comment": "Malware payload (Dridex)", "value": "90dc6eaa5e114a247854b514582b7d0489e43a50ca8e4669390defe04f0adfd4fe6de8b14ad483bf356ba3f17390713c", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637380, "uuid": "de1b1470-db3b-4398-949e-592c8fd2ff8e", "value": "32F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637380, "uuid": "065960de-d1f8-4de2-b907-5d0d42ee9d34", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637380, "uuid": "100f84d7-36a0-473a-b823-6125ac89084b", "value": "3072:dlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:dlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618637380, "uuid": "c63a1098-f04d-4f26-a0e4-450d75717af4", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618637380, "uuid": "9d715b75-6b11-44cf-8c60-3fd82229ae9f", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637380, "uuid": "e166086c-35ad-4642-b848-6f7ec38a60f1", "value": "952d1230b12103e517dc6f998d4819d08ba45a276e48a2daa8134e87edf8a954", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "49c87bc3-9f3c-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618636684, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636684, "uuid": "ef210746-47e8-4e72-a6d5-c9bf46d9e3c3", "comment": "Malware payload (Dridex)", "value": "070b2686f7b575108bec02cf4de73e35", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636684, "uuid": "6f5ae32a-03e6-4d18-b7ca-cf295acf3faa", "comment": "Malware payload (Dridex)", "value": "95c8afdb6169f00ac5657f4e966f73a63e366850f8e0f77578758192d885fe5d", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636684, "uuid": "a2e542be-bd78-458c-80b3-cda66bcc687a", "comment": "Malware payload (Dridex)", "value": "89012edf8c0b6a67d0c4e5d65fbaa20caa82b61c", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636684, "uuid": "d86df2d4-2b08-4720-b4e0-1f8226c7878e", "comment": "Malware payload (Dridex)", "value": "ae9819e7cab813bc1b05697c8572ddb1a134bfa36e1b9202232fa526d7aa0732076fd7f03f76edd824186d356f36c2bd", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636684, "uuid": "0f2920be-1195-4f80-a262-b45743530276", "value": "ADF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636684, "uuid": "8cb56045-96e4-4578-849d-04a667cef3c7", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636684, "uuid": "193f632d-4ccd-4354-801a-134d6b5a0a42", "value": "3072:Dlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Dlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618636684, "uuid": "2062874a-cafc-4ab5-a385-a9e3c56f6985", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618636684, "uuid": "2e5444b2-1b0f-4c37-99aa-2b97cb594aee", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636684, "uuid": "3ca35d0c-0bb2-49cd-aff5-dbebd1bb9390", "value": "95c8afdb6169f00ac5657f4e966f73a63e366850f8e0f77578758192d885fe5d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b41b480e-9fa3-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618681101, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618681101, "uuid": "020b4a5c-52d3-424c-a6e5-70ece9c8c437", "comment": "Malware payload", "value": "e3bc0c31664f9826b7a69374bf8ae816", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618681101, "uuid": "e76c7421-58cf-4048-a633-995a369256df", "comment": "Malware payload", "value": "95dc41c70d7237e48f29063923519bb80475cf75c540f0ea6e3d1c46d2a4dadd", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618681101, "uuid": "39009071-b121-4cf8-b806-2fd942f20749", "comment": "Malware payload", "value": "475e85200f27d64fb3f81872ffd61b0a144f8582", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618681101, "uuid": "d1a803db-f1c9-451b-9a5e-2eee22db6bfc", "comment": "Malware payload", "value": "7633d103494bab8e36425ebae5c09b4652143a28b6a5517950c6487b79951726f76978e54e328f6ff4029eb2c1a036f4", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618681101, "uuid": "f73d07f0-8c06-442b-ac93-8d019288c072", "value": "C3F3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B496B1FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618681101, "uuid": "1e398022-bd40-43ca-9259-5c9e1c1d1f86", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618681101, "uuid": "bde35d76-ddc7-4dd8-a515-7735ce488bbf", "value": "3072:nA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:n3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618681101, "uuid": "a0e8698f-abe7-4fb2-af2b-c5ab8e08216b", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618681101, "uuid": "140c050f-b921-49d1-b173-a6b91d2eaf9d", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618681101, "uuid": "42475c14-f432-40e6-a48c-dc7b04e7cd8e", "value": "95dc41c70d7237e48f29063923519bb80475cf75c540f0ea6e3d1c46d2a4dadd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a4adab5f-9fb7-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618689665, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618689665, "uuid": "e77e83b3-c0ad-4692-bfed-535d0f123252", "comment": "Malware payload", "value": "9885b718b30522578b775f229186ece6", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618689665, "uuid": "3d3d81ff-02da-41bb-8129-81368e1dcc52", "comment": "Malware payload", "value": "9611aed300c0351fe504d497e450f3b6b217ddfb990be5edbda8b54589ca2d16", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618689665, "uuid": "722f26f0-0252-411b-bf54-06e5fcc3f585", "comment": "Malware payload", "value": "9ad9bc34d83cce4db833f4f0e9908dabf19be549", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618689665, "uuid": "0e6a7bee-c45b-422b-bc3b-9209c6fdf2f0", "comment": "Malware payload", "value": "28baae5564145bb7ea82e40a9a1399d1a2ae24379691017b6712a4a018c0e2ecdd832a0774acb1360338a354e3b28023", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618689665, "uuid": "3cd9c588-5628-4ed6-b260-f760cccd548e", "value": "F1F3C088CBB3E4E6EFB3937966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618689665, "uuid": "39765a51-42be-4fb0-aefc-ef40b3aa731a", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618689665, "uuid": "8f99f276-412e-4224-97c4-aa0e8deeaafe", "value": "3072:HmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:GLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618689665, "uuid": "3749476e-dc79-4ef1-b31b-a6114326b043", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618689665, "uuid": "157097af-9efe-402c-a91d-0763d8dd0289", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618689665, "uuid": "790e40b5-18df-48ee-8643-9164a09baf94", "value": "9611aed300c0351fe504d497e450f3b6b217ddfb990be5edbda8b54589ca2d16", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "135bb836-9f9f-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618679113, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618679113, "uuid": "b1e052f1-a13f-4543-8c95-7110934345e7", "comment": "Malware payload", "value": "360b80f1fba0949f4d42add195575acb", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618679113, "uuid": "2c7e8006-99de-41e9-818c-2746207bf104", "comment": "Malware payload", "value": "96b28f841479ad3db06823571745d7d4480549716a6d30fce46436a58dfb8148", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618679113, "uuid": "8735e11f-a38c-4a68-bd19-c58a5057f6b4", "comment": "Malware payload", "value": "33e7c01beaa9fada1e42b427f7c7d5860f64578c", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618679113, "uuid": "62aebf15-b400-4f8e-90b2-f4e380692bb5", "comment": "Malware payload", "value": "014ec61c2bf434633e5bed8c83632e534ec2e9e9cf0b0162ed64c273dc258fdbe927c28a9acda029f817ed3621586ee3", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618679113, "uuid": "c46ad569-9ca3-46ad-8e35-b9fe22df7027", "value": "5BF3D088CBB3E4E6EFB3D37866F85E1B461174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618679113, "uuid": "0d647479-d70f-4a16-b308-e0321d59065e", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618679113, "uuid": "e746aec5-a1a2-4eb1-8f63-209a0c64c3f6", "value": "3072:imNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:zLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618679113, "uuid": "d70aab6a-dcfe-459b-98ac-defc6efdc65e", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618679113, "uuid": "bfcd6504-542c-4517-877a-fdef100f309a", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618679113, "uuid": "853a958a-ec85-41c5-9439-f767eb9a40f1", "value": "96b28f841479ad3db06823571745d7d4480549716a6d30fce46436a58dfb8148", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25b8d821-9f98-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618676138, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676138, "uuid": "18f8b168-ec2b-4c58-baf7-6cdcb3666a4d", "comment": "Malware payload", "value": "f6c316806c046370cce026bde1dda931", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676138, "uuid": "dc939977-ed1f-4060-8723-226c011ab059", "comment": "Malware payload", "value": "970f6d5503dd53f2e899ba980612a270a0329650b4b61bb836428cef49670759", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676138, "uuid": "1fb1c767-ebe9-48b1-843e-a76486c48cfb", "comment": "Malware payload", "value": "4c16f43178ec4dc002ee05a552dffc0ba4b6e7d5", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676138, "uuid": "6bceeb8b-1942-47d2-9eef-bcce8b1db55e", "comment": "Malware payload", "value": "6db3056eb818e74d19c5a553f736e7f9464142477fdf6c6c2043a70482d53552a792f375c4b5d8278a992ee80a217469", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676138, "uuid": "7665667c-cbd1-4fd7-a0a2-79d2e8e871c0", "value": "30F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676138, "uuid": "00dda5ce-4aac-46c8-a499-ba04aa2378b2", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676138, "uuid": "1574b392-e187-4b78-86e9-03dc256ed103", "value": "3072:Mlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Mlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618676138, "uuid": "211fb6e2-bd36-40d5-80e6-eb8eccfe325f", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618676138, "uuid": "54f20e33-602b-4217-8a59-0757be05d1ae", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676138, "uuid": "9b36fe91-3ef4-450e-8667-1a8d8e3dd7e9", "value": "970f6d5503dd53f2e899ba980612a270a0329650b4b61bb836428cef49670759", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1acaa9d3-9f3d-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618637035, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637035, "uuid": "f73caa94-7961-43b6-b07e-095535586ba0", "comment": "Malware payload (Dridex)", "value": "038ff04f78e3b7167935af6f95266d17", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637035, "uuid": "5a7e134e-4279-4485-9e94-fd06c003168a", "comment": "Malware payload (Dridex)", "value": "978999cc96ec5f0aea016dd4882c34cb23f0c44244bdf5c2f089d5245cf2de25", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637035, "uuid": "15d7e00f-c09e-4afc-9e11-c0006842fa3a", "comment": "Malware payload (Dridex)", "value": "14af0f86c7f3e54e24256571b5dd1ae9bdc31e6c", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637035, "uuid": "062060ef-6fbb-4a8b-8ee0-11ce26ebad4d", "comment": "Malware payload (Dridex)", "value": "f93645745183f3d82e3a2aa31f1f7811d3df8677f0eebbafde86aee2c88e2c2957c0db8886c012f8bc4217f2c7b6244a", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637035, "uuid": "94e107eb-d3e5-4d9e-b156-a6784888b448", "value": "A5F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637035, "uuid": "a6638762-36db-4968-a6ea-b5788ccf37e7", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637035, "uuid": "bce1ea29-085f-4e22-a03b-dc2001f2755b", "value": "3072:Klpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Klo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618637035, "uuid": "14fd4701-63f7-4498-bad7-5f00706c1a45", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618637035, "uuid": "5454a137-08c0-44ed-89dd-b4512226521e", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637035, "uuid": "46ac2d5d-d34c-46c2-8bf2-936a8b6995d6", "value": "978999cc96ec5f0aea016dd4882c34cb23f0c44244bdf5c2f089d5245cf2de25", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f2a2e79-9f52-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618646196, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618646196, "uuid": "f7e75554-8748-46b8-ba57-0bee1eefe86d", "comment": "Malware payload (Dridex)", "value": "25266f4f61dbf025d397b388cffbd884", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618646196, "uuid": "35ffe1f6-b76b-4723-b4ad-8d7c272986e7", "comment": "Malware payload (Dridex)", "value": "97a2c9de3386a6b3c4c10adea445c848ad66f88e043ae1595b33536ed962dd5d", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618646196, "uuid": "df8b4e0e-0110-4015-9534-763230e51176", "comment": "Malware payload (Dridex)", "value": "832b39bf65f30e0282de188d5a084fbdf8186d53", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618646196, "uuid": "09e278a0-0b44-48e0-89cf-ef1aa0cc8469", "comment": "Malware payload (Dridex)", "value": "12ce897ae8b06764a5ba7a1ddca580855be9f324d803054d1a579c75860b72e2cef00fef540f89d50e5838e1983db6af", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618646196, "uuid": "e3b9a6c7-d42f-428c-b674-8d915842dfa4", "value": "B9F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618646196, "uuid": "bf0799f4-dbfc-4143-8abb-3f950e4d51b6", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618646196, "uuid": "6b1a693e-a17d-4ba9-9934-317ec103545e", "value": "3072:pmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:4Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618646196, "uuid": "537e6d56-332a-4f41-988d-8201d64d4a6a", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618646196, "uuid": "d0034f61-fc2a-46ec-b884-1380734662bc", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618646196, "uuid": "e1f2e066-d34d-434b-87dc-543d956e2411", "value": "97a2c9de3386a6b3c4c10adea445c848ad66f88e043ae1595b33536ed962dd5d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "451245f3-9fbe-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618692511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618692511, "uuid": "b469e3e9-5a08-478c-8b9b-2bde1686020c", "comment": "Malware payload", "value": "c5f8caccd6adab7ff8f45b6f10eeb912", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618692511, "uuid": "48a12246-038a-40b2-8c00-660c17a3f58a", "comment": "Malware payload", "value": "97de18f03a71c9ddfdd3d020430af00312eff2aed26f2897a415669d163a5d03", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618692511, "uuid": "898ee36c-fcc9-4290-be64-0978584f2dbd", "comment": "Malware payload", "value": "b7c6cd9b499f14427a980b0c048095374e42d496", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618692511, "uuid": "b9a8c049-96cd-415f-b838-f851a9576033", "comment": "Malware payload", "value": "39b01123861c281b40fd68505a9c537e19301771696012f12cbfaf4a32ed647b65ec6b12223e7be43a070b93bdbeddc6", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618692511, "uuid": "e7b7c043-b2ab-41f2-8332-25f3a3ff01b7", "value": "5CF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618692511, "uuid": "baa32eee-42e2-481d-baaf-c11895921af9", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618692511, "uuid": "d129641d-1179-44c8-9367-79ab368bc6ed", "value": "3072:/mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:eLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618692511, "uuid": "b83006b4-690f-4b71-a242-a0d273a568e3", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618692511, "uuid": "d2ba4b1f-8ea0-4a3c-974b-19c4c1b85962", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618692511, "uuid": "468df012-727c-4611-bfb8-546d58ebc3d3", "value": "97de18f03a71c9ddfdd3d020430af00312eff2aed26f2897a415669d163a5d03", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10ccaabf-9fbc-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618691564, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691564, "uuid": "75af3003-5fb6-428c-9153-1587a82e13b6", "comment": "Malware payload", "value": "56fe9c7c23a1f024970ed543d28c3a8f", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691564, "uuid": "64673183-0ba6-454a-a6ea-a59feefe1510", "comment": "Malware payload", "value": "980b4c1807fa0876c07ac9ad38e27c22127e390799576df34e314124da5ceec5", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691564, "uuid": "bd442421-957c-418c-836c-066c0177c27b", "comment": "Malware payload", "value": "cfaa5199a0cd97aacd9a4a6ae758709e126cdd6b", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691564, "uuid": "91cefce2-7eb0-4b2a-8d76-77faa1c5422d", "comment": "Malware payload", "value": "d04c78a66017069352415686c3a2d85a899425d36dfa349d229890510d093e069302b4aefa8229a6e80ab9fd2a9f3129", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691564, "uuid": "454c5a13-de54-4f7a-9fb4-eb91017dea29", "value": "4CF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691564, "uuid": "95c5807d-318f-4389-925e-1d746838c519", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691564, "uuid": "c3732bf7-af15-4c9f-a041-80925d00ca66", "value": "3072:LmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:aLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618691564, "uuid": "bc0bbcd2-0406-4bcc-a838-0688d99b1ff3", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618691564, "uuid": "026abcd8-cb46-4572-9781-cb5f731554d1", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691564, "uuid": "f9e76f67-691a-4f47-948f-940965939253", "value": "980b4c1807fa0876c07ac9ad38e27c22127e390799576df34e314124da5ceec5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3bcd1f23-9fc6-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618695932, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695932, "uuid": "5512184f-2886-4571-8bea-b7a45d039bed", "comment": "Malware payload", "value": "be90ba1ba607e55758a23e3be0baf957", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695932, "uuid": "7f463de7-aad1-4f2b-bfac-e4701bbd87bb", "comment": "Malware payload", "value": "980e112378b5e09f174ac3d00e875d9147a6b2d399a9e3daaecfd5dc1c07e18b", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695932, "uuid": "6fedbd41-5585-4689-8489-0b3b210f0e29", "comment": "Malware payload", "value": "88ac55b2fbdf3e958d1a1e3efa3228b0cc6590a2", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695932, "uuid": "6cc4492f-19c6-49ba-a954-847997641871", "comment": "Malware payload", "value": "e96c8b99bf73f958bc49b0efb930526586bd1ca97f92dd3dc391d253f492d1f983d79b5282ad74ac6f0c57fa432d747b", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695932, "uuid": "16db514b-33b0-4f22-8cef-9804f86e2fef", "value": "25F3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B49671FD4F43729E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695932, "uuid": "42d0f869-f134-4d72-9792-377268b681ef", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695932, "uuid": "f641dca0-ac6b-409c-bc8c-2ce1ab4530b3", "value": "3072:HA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:H3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618695932, "uuid": "914c1eeb-8590-4cb3-b428-1f3de23014da", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618695932, "uuid": "379658ae-4d00-484c-8704-680eba2e1427", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695932, "uuid": "50a63c1b-fe88-4130-9d42-44a27466a9b6", "value": "980e112378b5e09f174ac3d00e875d9147a6b2d399a9e3daaecfd5dc1c07e18b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b87f9fc5-9fba-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618690987, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618690987, "uuid": "ec61be78-b98f-4e7d-9d1a-2a6cf528f42d", "comment": "Malware payload", "value": "bd21afeedd4d21cc3c56afb04c4b459a", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618690987, "uuid": "8decf32f-d6c2-4530-8b8e-ebe83c866f89", "comment": "Malware payload", "value": "986e66d00d15156d9c1d49ce18de2d0020d7639ecea4db62eea5eb2bba2a97ac", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618690987, "uuid": "3c6b9c71-fc71-4b62-b467-fbbf567bf55c", "comment": "Malware payload", "value": "ddc12bffbb61460658afe42bd5b0ccc7d72a625b", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618690987, "uuid": "c85ebcc2-6d20-427f-aa6c-9e9617f8a073", "comment": "Malware payload", "value": "f717cf8b287efc670c9cc1c9c9c6e61409c8f67fa351bf48d49d8a05e02e0b5c696c8e532ada510e5a43ec954b61f3a6", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618690987, "uuid": "7b1fa3d7-72ea-44ed-9116-7a3150f77843", "value": "87F3D088CBB3E4E6EFB3D37866F85E1B561174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618690987, "uuid": "d6936b1d-da73-4d99-be72-28d9e1c53afb", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618690987, "uuid": "248e79d8-dcfb-442a-b2c0-1659aeda8d59", "value": "3072:emNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:vLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618690987, "uuid": "3ff16dc1-a79f-4761-b289-e958fbd9ca3a", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618690987, "uuid": "76ae93b3-2f2b-466d-89a0-185d7bacfa93", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618690987, "uuid": "e940df08-fe04-43c5-a59e-75c25a9fad4e", "value": "986e66d00d15156d9c1d49ce18de2d0020d7639ecea4db62eea5eb2bba2a97ac", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25d3f7bb-9f42-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618639201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618639201, "uuid": "80b97697-6276-43bb-a4dd-a1f78379a941", "comment": "Malware payload (Dridex)", "value": "3def820d51d0cd6d11c0f33132aebaf5", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618639201, "uuid": "e165f99d-12a2-4f79-bc5d-966e40579d4f", "comment": "Malware payload (Dridex)", "value": "9950251e0d75fc75c8510b18d427f33338901368b060284e5d2ff7914c6e4e78", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618639201, "uuid": "015f143e-070e-4d60-b4e3-ab0eac1a763c", "comment": "Malware payload (Dridex)", "value": "3b033ffa2a1fe4ffd695e793188e93531e04f8f9", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618639201, "uuid": "6e27a569-cf7e-404b-9458-7f2dd6c4ac76", "comment": "Malware payload (Dridex)", "value": "0b3c94e777f2259ee0b46b7ebb93a785e0905903adaa90ddf8c190477f83700ee8bfdabdaa1fba9207865459e598949a", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618639201, "uuid": "7be9f3e3-0279-4a09-a28c-35ed7860140b", "value": "96F3C088CBB3E4E6EFB3937966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618639201, "uuid": "ce27f5e8-3fd9-4770-845d-730ced0bb90a", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618639201, "uuid": "69f35336-e9a9-4855-9874-46d370a10841", "value": "3072:hmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:QLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618639201, "uuid": "f3358226-9870-451d-b56d-f2a8299f33a5", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618639201, "uuid": "91c42b4f-4b94-41cd-b83e-1413e0500707", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618639201, "uuid": "22602308-1e72-4337-8b28-73626e2e0d47", "value": "9950251e0d75fc75c8510b18d427f33338901368b060284e5d2ff7914c6e4e78", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0cf21bf-9f17-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618620939, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618620939, "uuid": "2f0d10b5-a3b4-4ce7-93e2-7cec2255aaaf", "comment": "Malware payload (Dridex)", "value": "7975af233434110cd27fc8cb122a1d1d", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618620939, "uuid": "ce926902-1f17-4c9e-a7bd-87ea661390b3", "comment": "Malware payload (Dridex)", "value": "9a8ae06465d640571f9a7dc58f076d889dcf2847e6066fccefa710a1dbd12a5d", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618620939, "uuid": "0aaadbfe-cf0e-4965-bca4-f25e0b5005f6", "comment": "Malware payload (Dridex)", "value": "5006a99c62e46cdcbdd3aaa602aa21715c874911", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618620939, "uuid": "5e758e3a-68bd-44f7-a2ba-0e9e69274242", "comment": "Malware payload (Dridex)", "value": "4f1dda5015fd1f2139f4587710cf7eb8792aa639af61a1392ac60358289cf300b932fc4be0d8d1b344c21878c8208aab", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618620939, "uuid": "fe3e9c29-04ba-491b-b494-54e6d7d5a29c", "value": "E7F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618620939, "uuid": "95980d8b-fcdb-482a-8b37-fbc02e7f92be", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618620939, "uuid": "c15e9186-f184-467b-827a-c2d439a82587", "value": "3072:ImNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:RLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618620939, "uuid": "b7e91f95-cbdd-47c6-8254-3f8ca3c586d4", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618620939, "uuid": "eeb82cd9-86dd-4d91-a9f8-47a1cb67e0b9", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618620939, "uuid": "2c989db2-e7ee-4f81-a671-0c509f0c1f37", "value": "9a8ae06465d640571f9a7dc58f076d889dcf2847e6066fccefa710a1dbd12a5d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "940cbba8-9fc6-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618696080, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618696080, "uuid": "3ccbc272-9bae-4afc-8988-32a6e05803d1", "comment": "Malware payload", "value": "e400da6739c16f497091950899b9c339", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618696080, "uuid": "fd949a2d-94fd-4f34-85e4-948329ffb475", "comment": "Malware payload", "value": "9ab9d725a77342e851fc092554c509fecb971baed6ca914653871b5a7704f04b", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618696080, "uuid": "01689352-a796-46c4-86a8-cf55a51c8b14", "comment": "Malware payload", "value": "401dddb7f2731c90f51fb0cb81c85885183fefaf", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618696080, "uuid": "40f3a774-7215-4934-844e-854c451f284f", "comment": "Malware payload", "value": "afe8b6890569d6a2f31e1443ed85e78a4d5175506e37e1ff3280fba07182c7e87eb5a81d5af0154ab1de1b801bf988fe", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618696080, "uuid": "9d957edc-d692-4f63-8dd5-52849d899a76", "value": "22F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618696080, "uuid": "40f6e16b-6004-4c4f-9e87-300acbca5f54", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618696080, "uuid": "e9e8954b-b03f-4356-9bf7-62b4b9d6828c", "value": "3072:NmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:sLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618696080, "uuid": "ee5feecb-e822-4b02-acad-82b7a7144795", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618696080, "uuid": "537ab61a-a0be-427f-b569-cfd170721e1a", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618696080, "uuid": "43cb0067-b9ec-41b4-b9d2-6e3226531600", "value": "9ab9d725a77342e851fc092554c509fecb971baed6ca914653871b5a7704f04b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52145f80-9fb1-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618686950, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618686950, "uuid": "2e0af828-74b6-4df0-a7e3-accdbd1f67c9", "comment": "Malware payload", "value": "58219f811cc28468f68f155d0f7e56fc", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618686950, "uuid": "fe55c9d9-f7f5-428d-9910-cb67f64126ba", "comment": "Malware payload", "value": "9b5790fdbd9d05e2b817c3aba0bfab0fee4c851f7fa11db886e6bf73c87a7c8a", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618686950, "uuid": "6996edec-38ac-485b-8735-2acbadf8b5e3", "comment": "Malware payload", "value": "1430bc7e1cf25ba08701705d3bb2a07ce435eb11", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618686950, "uuid": "2a136da0-2c14-4879-94d8-e23637e91856", "comment": "Malware payload", "value": "a72674a58f31b788ee35d043620e3ca11aa90a716d6e5431c4e31c996c3c0c2b6dc6953f6309b4e8432eb02413b5e650", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618686950, "uuid": "4aed252e-bf16-49f4-a4fc-7da8550fb651", "value": "62F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618686950, "uuid": "355bcb17-3719-4fa9-915c-f8a87ae5f084", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618686950, "uuid": "2ee673f8-3aa5-4aa4-b814-5277388b8897", "value": "3072:blpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:blo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618686950, "uuid": "4bc3e1bc-6413-47a3-ac3c-4f4a8ffd6bcb", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618686950, "uuid": "e56294ea-5a62-40c9-a5ac-427b0df21035", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618686950, "uuid": "25fe565f-879a-4ba6-a06d-8a8a0c12f680", "value": "9b5790fdbd9d05e2b817c3aba0bfab0fee4c851f7fa11db886e6bf73c87a7c8a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb37f919-9f58-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618648901, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648901, "uuid": "da4bbea6-46d0-4891-94fb-3c2bcefc2ff7", "comment": "Malware payload (Dridex)", "value": "0e8bb4f86ad0acfb0f70a751e00d1317", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648901, "uuid": "d304b38a-d3a1-4362-ae6a-65047db61efa", "comment": "Malware payload (Dridex)", "value": "9b5fc0f7549f414fd2a84517e78fe520c8011d2e584b30c80494b942b03bb3ef", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648901, "uuid": "2ec80e03-088d-4763-8fa3-6ef46c470d52", "comment": "Malware payload (Dridex)", "value": "b0a82bb2508a094b415f16e825807942fa2a4367", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648901, "uuid": "feee5a05-191c-4e81-92c5-995bf5c3aeef", "comment": "Malware payload (Dridex)", "value": "e1dd70f843421c7fc2913249ad2e3cf8a8231e0bcc674e3a149c287698a06349ff77987bd0d72c47f1ec81f1871a7abd", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648901, "uuid": "ec354258-9dbd-46c9-9039-3e7a7aca2d35", "value": "E1F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648901, "uuid": "37fbdb1d-7631-489c-a705-d696e5c08dc2", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648901, "uuid": "a00ca1ac-e05a-49dd-95c4-83896da8aa34", "value": "3072:0lpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:0lo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618648901, "uuid": "8804b9bc-061a-4d64-9937-43fab7542a04", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618648901, "uuid": "ac965302-2ba8-427f-bb2b-1ded14024441", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648901, "uuid": "e163651f-0c47-4f68-97c7-9233c7a0c61f", "value": "9b5fc0f7549f414fd2a84517e78fe520c8011d2e584b30c80494b942b03bb3ef", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d404775f-9fcd-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618699193, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618699193, "uuid": "9797cadd-8741-4b36-8d89-a7e8e2f8418c", "comment": "Malware payload", "value": "0f3217082cba81a88cbbf3f5a16f8601", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618699193, "uuid": "b84fcc4d-6e35-4029-8c9f-7736649a9b7f", "comment": "Malware payload", "value": "9bffcf482f72fe72d54d24b99886666643d36f0efa0f77fc5b274ad221c61ce5", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618699193, "uuid": "d372b0f5-7ff2-4f3b-9476-847916f428fc", "comment": "Malware payload", "value": "c4953516a39ae2f30280e421b38780fe0ff9409e", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618699193, "uuid": "cd135d1d-4f73-4f73-b5a5-69be92faf991", "comment": "Malware payload", "value": "8e94c01e341d542b2471bc4ea1b5d8b79b393fec4aaf1c69620e17f0c8efdddf9fa6a86a9ceddb6c688d7255484de6fb", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618699193, "uuid": "46e4a966-9408-443c-821a-f31b292c321c", "value": "48F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618699193, "uuid": "1c219fcc-3ed8-4912-a21d-179786247401", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618699193, "uuid": "f1144ee3-c4b4-4a5e-8e7b-6a904170f6a2", "value": "3072:pmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:4Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618699193, "uuid": "e6cf8e14-8d0e-44b5-9563-1a64571ef0bf", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618699193, "uuid": "cbee9da0-159a-49e3-b2aa-1aa80de675da", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618699193, "uuid": "1c221b69-3137-408f-a826-a02f8f8d9799", "value": "9bffcf482f72fe72d54d24b99886666643d36f0efa0f77fc5b274ad221c61ce5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f2d9c0e1-9f7b-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618664026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618664026, "uuid": "c6378bfc-0683-48d6-ab91-d86409190680", "comment": "Malware payload", "value": "82658e62e6e86afe6aca448ab4897523", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618664026, "uuid": "221a5930-9901-433d-adef-58c58a78d87a", "comment": "Malware payload", "value": "9c0eebb2a1f23ae0329937e841ca3076c759b6d03c8f9f0e90ee59bdd782e15b", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618664026, "uuid": "6d287c4c-f474-4bf8-b501-7d7d983b241d", "comment": "Malware payload", "value": "ef1ae09e8731d1b53e728c82a778f49aef3c5338", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618664026, "uuid": "ef892730-2165-4e83-89ae-d6dd6e8987af", "comment": "Malware payload", "value": "85094cdacad807e931105b7f676e1ea44abc782dcc4fde9695431ce26293043b96121465579312d2b62dfacc0beb0560", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618664026, "uuid": "487b5b16-1122-48c4-8911-1ad6bfc68694", "value": "EBF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618664026, "uuid": "d1eff1a0-0e09-4368-9934-dca3cb8dfbab", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618664026, "uuid": "13ba08e8-b428-4430-8e44-10874e1f13e1", "value": "3072:Klpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Klo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618664026, "uuid": "dc7807df-dd78-4731-9745-d13b0a16e883", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618664026, "uuid": "2872a614-4846-4a92-be69-ec1b73350573", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618664026, "uuid": "55d6b991-3459-4a39-8c51-105423518598", "value": "9c0eebb2a1f23ae0329937e841ca3076c759b6d03c8f9f0e90ee59bdd782e15b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a3f93512-9f47-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618641560, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641560, "uuid": "e1ce1072-5e83-40c3-abe6-52141a693a85", "comment": "Malware payload (Dridex)", "value": "1209fb1441f927c286e3b42df706a53e", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641560, "uuid": "38a22135-61e3-4a55-9036-611d51ba5f0e", "comment": "Malware payload (Dridex)", "value": "9c57189063d7ed739cec32ca6860058a25236e221517f9e95c73f556116b1afa", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641560, "uuid": "838c72f8-5214-49c8-b8cc-3ba8ae80c038", "comment": "Malware payload (Dridex)", "value": "084cc6462cc200c2dc11df60653deac1d838f115", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641560, "uuid": "e9e5e8b4-8e99-4e0e-8f24-b418b43bab49", "comment": "Malware payload (Dridex)", "value": "1b183734897694cd22985b6eefcf2447986f47ef004ff6d12dc7454f55e57f93f6714219ca29dfd27ced98de5e965c32", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641560, "uuid": "07413060-1aba-4bdf-acd7-b6946a915fc3", "value": "BBF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641560, "uuid": "cec9e62b-7d77-43d1-b1cc-dd86e58de264", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641560, "uuid": "d62191af-6ce2-4871-8f46-abe18972027f", "value": "3072:Mlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Mlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618641560, "uuid": "01068ae0-e403-4f39-8942-2aa8018ed8ae", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618641560, "uuid": "116c52ac-43bb-4c4b-a244-e101959d430d", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641560, "uuid": "bbe8550f-2f9e-4044-89d4-23ee2d598186", "value": "9c57189063d7ed739cec32ca6860058a25236e221517f9e95c73f556116b1afa", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c45edb58-9f6e-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618658365, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618658365, "uuid": "63259757-2705-4aa3-be31-0f50529b95fc", "comment": "Malware payload (Dridex)", "value": "ae3b2676a5d8a5d1419cbf4b5ccc4470", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618658365, "uuid": "2dc8499a-91e8-42eb-ba4c-d5b2e2f22eb5", "comment": "Malware payload (Dridex)", "value": "9cc92241cd6609f10c66015767e6d981b833060e4ffea8fff43137bbe83b428c", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618658365, "uuid": "7cdb471e-4152-4bce-b4fa-8b85bde0125b", "comment": "Malware payload (Dridex)", "value": "79039ae6c56059196d15fc4220c3a8e905d330e2", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618658365, "uuid": "85a417da-bd22-43ae-ba60-04c81e9e7a35", "comment": "Malware payload (Dridex)", "value": "4aaf4e110b89b2335732794a0cdd3aebadb1d2ef504407f4afe9e964dbb856788827e0d54d9d03b011246b1031753ce7", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618658365, "uuid": "1f712f83-938a-467e-99ac-158563da1ebb", "value": "05F3D088CBB3E4E6EFB3D37866F85E1B561174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618658365, "uuid": "89743f5d-1eaf-4e8e-b129-2c6eab1461a3", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618658365, "uuid": "1a14d326-cf18-435b-8d92-e7fba799cdd0", "value": "3072:LmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:aLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618658365, "uuid": "4becef0a-7fb0-401a-b5c1-d558cf8c5f6f", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618658365, "uuid": "62db47f9-7828-4627-8ed5-142498e94ba3", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618658365, "uuid": "a38259fe-c018-4fba-95bc-392f20cca0c9", "value": "9cc92241cd6609f10c66015767e6d981b833060e4ffea8fff43137bbe83b428c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8bd955a0-9fc3-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618694777, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694777, "uuid": "2dccc2ae-b80c-44ad-a917-64514412550d", "comment": "Malware payload", "value": "35ece894d0dabe779f3576c84c01c844", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694777, "uuid": "a6a85312-e28d-410b-8b3b-6097e1b987b8", "comment": "Malware payload", "value": "9d1b9d58301d1b92a2f3830bab157a2744be62f085468b4ff4a64c96cf134614", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694777, "uuid": "89e95e83-e712-43c4-abb6-8977e2459a9e", "comment": "Malware payload", "value": "5279e404fa93d6075c7e002cfbaadf17e8752563", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694777, "uuid": "e1b0184b-b218-4146-91be-531a041da871", "comment": "Malware payload", "value": "37d7e8e3751d7f0eef4ade8f5f4191ce4a9e8fc87d41b61fd66e293bd456a30d98c9f396406fd8da5ded7fd6e2741317", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694777, "uuid": "3382a1a2-6ed3-4486-8c7c-023dadc7525a", "value": "7CF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694777, "uuid": "0b1f489a-d60a-447d-a561-ef11f2cd9def", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694777, "uuid": "7ab45763-7822-43aa-86c7-0e630ea91364", "value": "3072:CmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:TLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618694777, "uuid": "097ee0ab-8a1b-4f96-b86f-7317eb077933", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618694777, "uuid": "b888990a-96f0-4ade-a7fd-a25d11b31c7f", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694777, "uuid": "ed1bd9fb-bc68-4a11-ae93-c50743ce5c5f", "value": "9d1b9d58301d1b92a2f3830bab157a2744be62f085468b4ff4a64c96cf134614", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17e4cf2b-9f7c-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618664089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618664089, "uuid": "2d5ebab6-7c4d-4453-bae9-e12c7123d14e", "comment": "Malware payload", "value": "92bf14426f1213f64222d9b9fe2b49c4", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618664089, "uuid": "9ae8d6ad-ef29-40b7-b6e5-cb3436521831", "comment": "Malware payload", "value": "9da795bfd9446d9f6a1a8000954b18566581c6a28181d0b23fb2f098aa7c364e", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618664089, "uuid": "9aecc35c-bd52-4b6c-a6f9-06eaab864cc8", "comment": "Malware payload", "value": "9bc271f7be66b5a03dd1a31cbce9807900aa23c6", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618664089, "uuid": "7a1f40d6-3e4c-4283-869b-397efc4473be", "comment": "Malware payload", "value": "a6c67921460e25db577f4a288098265ab2e1689baddc60b7d7b641f268155d9180fbd26f02149aaa5dd0289457ba5e7f", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618664089, "uuid": "ca4fe193-5f7c-4ea9-84be-edb6532ecf35", "value": "8AF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618664089, "uuid": "e69192e8-4bc9-41f3-baf5-cb5ad0fdbe39", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618664089, "uuid": "93974233-01aa-4223-a011-fbddf83de1b2", "value": "3072:flpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:flo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618664089, "uuid": "cea0c9d1-643c-40e8-a02a-83dd601b4ee7", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618664089, "uuid": "834d4c5c-b63a-49d8-a0a3-4b5778a18bfc", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618664089, "uuid": "8a899979-721e-482e-ac58-534c88d9bf39", "value": "9da795bfd9446d9f6a1a8000954b18566581c6a28181d0b23fb2f098aa7c364e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "32d70956-9fc3-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618694628, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694628, "uuid": "08213bd3-1a07-4cf4-bb56-79079a4ed3da", "comment": "Malware payload", "value": "a033ed9cf5e532f06a5cf9943e146881", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694628, "uuid": "6554f37c-25dd-4dc7-9d39-b34cf6fcf289", "comment": "Malware payload", "value": "9dbe9526e7cb343c4fac0c4bd9ce761abb074c786f071a9cd3d2162a1975225b", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694628, "uuid": "380437fd-974a-40e8-8acf-552bf37226c4", "comment": "Malware payload", "value": "929154ea71d4962847d963775156dbe3c06e05de", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694628, "uuid": "c814a364-d77c-46d9-baf8-aae2e425dfeb", "comment": "Malware payload", "value": "670e2f09de87d4c43d3d440740668019d80996da45a8e838f05992d51ae2e2607d1ab1426278b79bc22e08e3e198e0e0", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694628, "uuid": "7aaad32c-5a13-48db-bee4-cafc826638e7", "value": "54F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694628, "uuid": "a51b2fa6-01a3-410d-8e22-66aaaf46ec88", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694628, "uuid": "72f983dd-9e49-47c0-b64b-d928098430fd", "value": "3072:nmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:mLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618694628, "uuid": "dba878ad-e659-48d5-ae0a-694021d760af", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618694628, "uuid": "08ab173e-3e64-4a03-a4ea-c4f1c2e459c5", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694628, "uuid": "a944ee18-0661-4451-a018-ea4155bb8184", "value": "9dbe9526e7cb343c4fac0c4bd9ce761abb074c786f071a9cd3d2162a1975225b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77a0fe32-9fa1-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618680141, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680141, "uuid": "a42be921-c225-46f9-8b16-0e4ef63d3e16", "comment": "Malware payload", "value": "52c53d0c2c3c3594d295edf73ef25486", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680141, "uuid": "660921fa-bcac-42c0-ae25-5d42f4477fc5", "comment": "Malware payload", "value": "9ddc500d13810ea4c7e5327d35e5920c76475f90439942242eae189cf4fe59a7", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680141, "uuid": "a083c85f-9a24-4390-b137-1da97f5ddeeb", "comment": "Malware payload", "value": "63424d185e9f3d273f0dbd7202fc298e057cc05a", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680141, "uuid": "d49ae44e-a6ca-4718-ba9e-9a4d70d92bdc", "comment": "Malware payload", "value": "9cde034ff433a7d276a3ed8525f8f11edb82b55d39edeeadb963ba49ce52d57d99634c2ac7e81b35b20118b483bfa066", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680141, "uuid": "99447fb7-ce5d-4348-b9d0-bafa3cef5e0d", "value": "A7F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680141, "uuid": "c3ebc9d4-b072-4b7f-98b4-98c502f322d1", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680141, "uuid": "e116cda3-80c8-45d6-9502-feae3cd1af96", "value": "3072:4lpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:4lo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618680141, "uuid": "158c9e5f-c77b-4481-81d0-7b6e9ff75bee", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618680141, "uuid": "7586ad84-d1f3-4298-b40a-bf3093ae9bab", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680141, "uuid": "1c386e7f-862b-4937-ab52-ab5c1f9ddd0d", "value": "9ddc500d13810ea4c7e5327d35e5920c76475f90439942242eae189cf4fe59a7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86cda30c-9f64-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618653967, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618653967, "uuid": "7d17a893-5800-4200-9b10-12bacefd137b", "comment": "Malware payload (Dridex)", "value": "a72867cd96109276724fd03faeaf7f37", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618653967, "uuid": "8a4e30a3-15a9-41e8-8b5a-958d0908f926", "comment": "Malware payload (Dridex)", "value": "9e30b7db460acbd42d08144c51dd81f3e99c91ca14460e942ec54a61e8eba9e5", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618653967, "uuid": "8d81a565-b62d-40ad-b332-4b40a110303f", "comment": "Malware payload (Dridex)", "value": "80f7fd6ece857846ffc34d5c6931d6d85fed099e", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618653967, "uuid": "502ce487-b274-45dd-8365-e2d0fc601512", "comment": "Malware payload (Dridex)", "value": "1b60814404c23605ea55229b0cca22b05d45216dbdbd08216c5a62c53eaa2181c72154be59ef478fd84f58358b7d1cf3", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618653967, "uuid": "ec335c11-73e8-431a-ab91-ec07124ca405", "value": "EEF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618653967, "uuid": "331b2424-b48e-4477-ad1d-54727c823619", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618653967, "uuid": "3101fa9d-4b9c-446d-9015-00d97a9c63b3", "value": "3072:ymNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:jLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618653967, "uuid": "29bfeb78-0842-4f80-9390-d67ae3c59355", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618653967, "uuid": "e0d7f8f3-e5dd-4637-aebb-79f3b55fffa8", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618653967, "uuid": "042ef6a9-73ed-4d27-82ba-d981491a9f3b", "value": "9e30b7db460acbd42d08144c51dd81f3e99c91ca14460e942ec54a61e8eba9e5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8bb4f162-9f75-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618661276, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618661276, "uuid": "5a1414e3-9406-4673-b11d-1da16479385a", "comment": "Malware payload (Dridex)", "value": "af36212b4fa9f70a03f1137af173b196", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618661276, "uuid": "d495715c-64b0-4edc-82a0-f483940a30c7", "comment": "Malware payload (Dridex)", "value": "9fb78386a8251e943126126f2a36c3a1d1e54a5179a89e469ccf7e13a57eb9a7", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618661276, "uuid": "c9e3dfac-5107-4741-87a7-4062eec36377", "comment": "Malware payload (Dridex)", "value": "1726a4271b882cea2751b7ef7d6b20704c0cbf12", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618661276, "uuid": "112130d5-7630-4607-ae5c-5cba22318ad7", "comment": "Malware payload (Dridex)", "value": "990f53b58a1d0346f4e7a1595041bd8847dedd10381b74773ad4a3a6b9e588549a5ae82aae29c4dbe6b4d76f1bbb14b6", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618661276, "uuid": "48170e59-0989-4f26-962b-d1b5aedc1397", "value": "6EF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618661276, "uuid": "a4a41d2b-76f2-4c29-81e2-9e0314314546", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618661276, "uuid": "30fe9769-edcd-47c7-bfb4-f60b0ed17581", "value": "3072:UmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:9Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618661276, "uuid": "2c0d3391-6b1f-4cc7-a42d-398e497fbea5", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618661276, "uuid": "bb8464ab-f996-473c-9105-3a1572c98c06", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618661276, "uuid": "6603ae35-83b3-4b9a-8726-51b68d2b38d0", "value": "9fb78386a8251e943126126f2a36c3a1d1e54a5179a89e469ccf7e13a57eb9a7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1dbb3bb8-9fb0-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618686432, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618686432, "uuid": "e6ef8034-b27c-4839-9289-75d5254d0481", "comment": "Malware payload", "value": "1755dedbb19f8cb80b4fd2c6d93d17ab", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618686432, "uuid": "1087cc9c-a03e-41ff-8344-75d0199966c2", "comment": "Malware payload", "value": "a02682360384aabf63e541779c4b4a872a84563648f91c178a473e44c7dafd2c", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618686432, "uuid": "006dc623-94fb-4764-9d5d-843d994dcaaa", "comment": "Malware payload", "value": "9f7f8ccf40f55f70f55f2ebc1d390bd3a749ea78", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618686432, "uuid": "f892a935-2375-407e-aaab-a2f422287dd8", "comment": "Malware payload", "value": "3e98a3f5d58d1538da045c35d37f9e046eb2c66a762fcd352d60fa62a4a71c8d1c2ea800ec67c359b410cb369255056d", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618686432, "uuid": "5039ecae-21da-4be6-93f2-3dfd6a5e553a", "value": "CCF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618686432, "uuid": "24dc0aee-54f1-4b1a-b8a7-3d27a3035145", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618686432, "uuid": "4e3faf24-ab11-47ec-84c3-9e5289ca15c3", "value": "3072:Hlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Hlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618686432, "uuid": "c0e37078-febf-4e85-997f-507ca37f285c", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618686432, "uuid": "6ee5e899-0cdb-4159-9eb3-1622d2819114", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618686432, "uuid": "5da676a5-5c98-402e-8261-ec8c11c80a51", "value": "a02682360384aabf63e541779c4b4a872a84563648f91c178a473e44c7dafd2c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b97373c7-9f88-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618669514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669514, "uuid": "7eb82092-4b32-410c-8368-317b8ccab66d", "comment": "Malware payload", "value": "f778e517cfdeec281b6e14f9e1ed6cbc", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669514, "uuid": "7b5766e0-8f44-460e-88c5-a20462cafc97", "comment": "Malware payload", "value": "a0537463dd3e0ab3c54f998419ac8e40b4976124976e056889b027f05329779a", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669514, "uuid": "75c52313-472b-49f3-bfa2-9e123f6bd073", "comment": "Malware payload", "value": "bab346b188b1a6e932cf8cfdf9c3d4e2e20bad86", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669514, "uuid": "b1dc563e-9dd2-437a-a7cd-b02bcc7417e9", "comment": "Malware payload", "value": "52fa3efeef3011a3dc863b97803ed0783c25cd44d30a49024793a1391e2c40889bed7531cc2812f9373c9d80712684ed", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669514, "uuid": "2c3f0dcb-5731-4a9b-8d9d-983a717af3cd", "value": "35F3D088CBB3E4E6EFB3D37866F85E1B461174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669514, "uuid": "9aac4c26-e046-4cd4-80bd-b7a1418538eb", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669514, "uuid": "e25d1671-e344-41b8-bf66-00a07becd294", "value": "3072:3mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:WLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618669514, "uuid": "0cd341c3-6006-4bb6-adc7-f4f48889b345", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618669514, "uuid": "180a6d3e-1926-42af-b511-8d9cc8cf1e7b", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669514, "uuid": "6a7331cf-ebc6-402a-ac6b-a1a3dfcaf3a4", "value": "a0537463dd3e0ab3c54f998419ac8e40b4976124976e056889b027f05329779a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6fbed04-9f19-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618621835, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618621835, "uuid": "b324ef94-1bb8-4104-8fdf-aea2b8631300", "comment": "Malware payload (Dridex)", "value": "a121f02ecbd995ea5cb1426b3ad36419", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618621835, "uuid": "0af01861-467f-4206-8312-9e6480b41d36", "comment": "Malware payload (Dridex)", "value": "a06dc3aa73bb879cb1309891b3fc7574f069363f1c39ba992daa34006d7771d5", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618621835, "uuid": "311f9a80-067d-490d-bf89-30df01c45ecb", "comment": "Malware payload (Dridex)", "value": "a97c64d21073ca841ab021c5666fe0d15e99e3be", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618621835, "uuid": "3baaf7c5-1267-472c-83de-6b42cfb4f387", "comment": "Malware payload (Dridex)", "value": "0e684f307b314274524623b097ffd56be1e11e3420fe062c2c20a181d08178da6a43bbc3acc99cd1befc071f215c02cf", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618621835, "uuid": "40144774-7272-4127-a45a-629299f5041d", "value": "DFF3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618621835, "uuid": "e8777dfd-ded3-4f7e-b62f-6b2c48ac6cb0", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618621835, "uuid": "5ccc6001-67c7-4fd9-86d5-f21cd33dd667", "value": "3072:uiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:leAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618621835, "uuid": "ca573a55-185b-4277-8bcb-577650154b3a", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618621835, "uuid": "96a04fd4-26b4-4bc7-b8d4-b86564f3f11c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618621835, "uuid": "0e282351-bb36-408a-b261-9c41dd14ef8b", "value": "a06dc3aa73bb879cb1309891b3fc7574f069363f1c39ba992daa34006d7771d5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94cb3ba3-9f42-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618639387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618639387, "uuid": "9caa4331-4a35-4e22-8bc5-74cd3d2b5f79", "comment": "Malware payload (Dridex)", "value": "fb162f38d0200df10803f4c472ff763d", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618639387, "uuid": "8e152490-2c61-4ef3-8a88-c8a34d7c9d4a", "comment": "Malware payload (Dridex)", "value": "a071d3b7468984e75a1c1c1b036e9cb6c22c88639e86f1f7e12d2c913fee4228", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618639387, "uuid": "dff9884a-0a16-4c78-b95f-d3aaf21abef6", "comment": "Malware payload (Dridex)", "value": "5a13c0ca7998ac327a06ad4a5532b3f919def1b1", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618639387, "uuid": "e23f2754-599e-473f-bbc6-60272c94a819", "comment": "Malware payload (Dridex)", "value": "b9f35c29921e50a3af9bb22e7b405e3e0427c6dca6166840ee0be5903846a2f31cc9c9140a125e17195de7efb7549cca", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618639387, "uuid": "59afd23c-082f-49e3-82de-6daf53a7af0f", "value": "FFF3D088CBB3E4E6EFB3D37866F85E1B461174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618639387, "uuid": "ba2c3e51-b039-4d2b-a0db-f2be5f6ea28a", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618639387, "uuid": "fd733b51-6a2f-4d72-9f69-b19c7fc0f561", "value": "3072:9mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:8Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618639387, "uuid": "6cf8f6a6-a0cc-4409-a5db-324e6e8b4d2f", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618639387, "uuid": "74e85b18-25b7-48ed-9bde-e6fe11d09427", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618639387, "uuid": "68eecb2a-29a2-44cd-9738-d244d44d99de", "value": "a071d3b7468984e75a1c1c1b036e9cb6c22c88639e86f1f7e12d2c913fee4228", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e8d3a9a-9f6f-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618658677, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618658677, "uuid": "7f8efdbe-65e3-40e8-ba94-c97263f18492", "comment": "Malware payload (Dridex)", "value": "3080a38c4dcdbc78cc0311eb1803ad64", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618658677, "uuid": "fb9e2a5b-6276-419f-b6b6-4e3c2695a09a", "comment": "Malware payload (Dridex)", "value": "a0b3703e09829821c1b2a8903dcb3aa02dbbc1055cc0a06ba3a01fba06f2e9bc", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618658677, "uuid": "65f9bfcc-bb87-4a2e-9a0d-fc99914e18ff", "comment": "Malware payload (Dridex)", "value": "d81a5b2a33cbd8d28a7bf652796ed82e196d9fb0", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618658677, "uuid": "123f167d-0a65-443f-a84b-ef2e4a03eb1b", "comment": "Malware payload (Dridex)", "value": "68b95a0d8d9edb439af34d238f9ae4604ff1692c17078a81e8ec149d926b3ce9dc73883b3fa5cea93dddc57c84b99415", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618658677, "uuid": "d027f410-9f43-4a90-b906-75b90fdb585c", "value": "9BF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618658677, "uuid": "18dbc6f2-98e3-4136-92ad-3de532343dc2", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618658677, "uuid": "927ad717-0c47-4b9c-bbc3-3a805ff1290a", "value": "3072:RmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:gLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618658677, "uuid": "55d87550-9b7f-4776-a126-1969ee6fe234", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618658677, "uuid": "843d9f82-25dd-4808-9a24-db42a518248f", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618658677, "uuid": "ffca2cef-4542-4028-9064-18429b5f0ed2", "value": "a0b3703e09829821c1b2a8903dcb3aa02dbbc1055cc0a06ba3a01fba06f2e9bc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c90fdbc2-9f81-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618666533, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618666533, "uuid": "4af0877c-8b4f-46eb-a062-5470e265f8b1", "comment": "Malware payload", "value": "42f9903590a4f1676b859c9c870eeb1f", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618666533, "uuid": "7d43f77c-6216-4993-8a26-cdcd82e3a731", "comment": "Malware payload", "value": "a1620abd94484a9d21ff69f9fb279a5ccfdfb7c2c8261c33a2cce0487a946bc5", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618666533, "uuid": "22f2fc03-55ae-4922-95cb-cf5219ac5e99", "comment": "Malware payload", "value": "75c7ab735632f634f73e7f81d142c6d4724b82a7", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618666533, "uuid": "71875c02-101d-43f1-9c2b-7c205408a9ff", "comment": "Malware payload", "value": "3f6d5fc7e8cbc13c34321eeb38dae3f7086e19bd74c0fe228b3ac7ca14c4081366f0a77083144d2583ecb479bf12c96e", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618666533, "uuid": "3fd6856a-8715-4d85-8e24-f6737f7bf5b6", "value": "6EF3E00AED9FE988E84C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618666533, "uuid": "6ce19e44-125a-4578-8054-7dc3cbd62d34", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618666533, "uuid": "5c1a9916-3217-4d09-a7e0-13ecac797858", "value": "3072:iiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:heAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618666533, "uuid": "317e2ca1-4f87-40a0-abfd-682154e5002e", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618666533, "uuid": "9260ff79-cc86-43ab-a6e7-492b1a40a0c7", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618666533, "uuid": "1a07f82a-7704-4a3c-a3d8-49cf3c6d9552", "value": "a1620abd94484a9d21ff69f9fb279a5ccfdfb7c2c8261c33a2cce0487a946bc5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a33762c9-9f5e-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618651437, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618651437, "uuid": "1d0688de-7a22-4ddb-a9ef-aa8e8a61960b", "comment": "Malware payload (Dridex)", "value": "bd8b49d7cbc105b0f6036c83853cad8b", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618651437, "uuid": "e5e56526-7669-4ff7-8010-3f2cfc63b741", "comment": "Malware payload (Dridex)", "value": "a226dfa2c616edf85871fa8f62dbeb350dd03b3616929c9ac646817a6e55a99b", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618651437, "uuid": "d49c4492-5334-4dc5-83a8-476af5259607", "comment": "Malware payload (Dridex)", "value": "efe83a993ce07bd69d370513ace58c5327642f0c", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618651437, "uuid": "df5970a9-d118-4dfb-93b7-67195e95b5ab", "comment": "Malware payload (Dridex)", "value": "22c3cded5d1e80e3aa638363bb9572092879d23e680324c4872776c6e9cbae7b2db13437be28529d6de297098e91ee0b", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618651437, "uuid": "eac04c5f-b60d-407d-9ebc-91b8a496e60e", "value": "01F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618651437, "uuid": "e7bb1acd-b79b-48b2-8d13-519ae131da8a", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618651437, "uuid": "422b4971-bb03-43ad-9793-d0aa0bcc045f", "value": "3072:emNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:vLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618651437, "uuid": "5492ec80-cef7-492a-843b-18d790b0aedd", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618651437, "uuid": "1e5b180e-e84e-4150-9247-687c0d96b3e2", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618651437, "uuid": "f7934398-3d05-40a4-a8fb-7dc0232e1c5d", "value": "a226dfa2c616edf85871fa8f62dbeb350dd03b3616929c9ac646817a6e55a99b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a2c51c00-9f31-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618632109, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618632109, "uuid": "d6c21205-6313-4b1c-9d8f-a6c4f6666830", "comment": "Malware payload (Dridex)", "value": "cf022e35b9a1b7ec50e779e9ff36a2bd", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618632109, "uuid": "4e911852-a02e-4722-bb85-851b1f95bd02", "comment": "Malware payload (Dridex)", "value": "a233a7295102ac00ce19740bce5a3584899399e7ede7dee15afda0be3efb56e1", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618632109, "uuid": "708548e9-7770-41cc-aba3-e333b4b9afbc", "comment": "Malware payload (Dridex)", "value": "3ecb11d3754d4fd0cbbc286eedfb76dab15b9e56", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618632109, "uuid": "db4c4c3f-290b-4555-8f21-2dedd6e4b58c", "comment": "Malware payload (Dridex)", "value": "0838f7032a392c3067017eb99fd90f6a79e802443d0d738a5ca80dbbdb23fbdcf1ce320fbd01be793a44b881306decaa", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618632109, "uuid": "7ae7d716-871a-4710-88a5-20ff359e7ab4", "value": "18F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618632109, "uuid": "2cff46ac-10fe-46d2-955d-6e5d513accda", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618632109, "uuid": "55f3c927-cdae-46e4-af37-e9adfa0ae963", "value": "3072:RmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:gLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618632109, "uuid": "350834df-c565-44c5-9ffa-967fc50903f8", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618632109, "uuid": "6121ddd7-bfa4-4560-beab-9739b2e9165a", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618632109, "uuid": "97ad3d8b-8326-4b4c-bd68-7067f19f2da3", "value": "a233a7295102ac00ce19740bce5a3584899399e7ede7dee15afda0be3efb56e1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c29cde72-9f54-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618647195, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647195, "uuid": "3854fb98-d81d-40db-a812-fac3833e56ac", "comment": "Malware payload (Dridex)", "value": "86064a4211bca243e489588c428c6f95", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647195, "uuid": "0bf1f375-cd6a-40e2-b449-3926e4dce4b7", "comment": "Malware payload (Dridex)", "value": "a2445809a7bd29b6d1a32e1ab60305a76efd9bd0bd49246b6def682833dba405", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647195, "uuid": "e2e87671-ee40-4700-8161-d45a87b64a84", "comment": "Malware payload (Dridex)", "value": "901be7be497832c61037d43d2e7fdb79b6aace2c", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647195, "uuid": "6ba079c7-8799-4f0c-a3d2-e58a061436fb", "comment": "Malware payload (Dridex)", "value": "48a140a2386212698b1226eed8e4e90fc8f53ba22de9d7a1d52663f9be40dec66ee8bbef93062557643001b5726ca675", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647195, "uuid": "34cb7be3-b900-4a94-85ef-6179fb2e6dd1", "value": "52F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647195, "uuid": "cf8b6ba6-5bd4-463d-a88c-1bede3a26da8", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647195, "uuid": "9cd967e0-2832-4aca-a410-3b4f77242be1", "value": "3072:gmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:pLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618647195, "uuid": "33fc9631-18f0-44eb-b251-2c3080f3d6d1", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618647195, "uuid": "8956d05c-74a4-4169-b9f7-447f09e356ee", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647195, "uuid": "3d09bc7e-e2c3-4805-9adf-f987e53c40e1", "value": "a2445809a7bd29b6d1a32e1ab60305a76efd9bd0bd49246b6def682833dba405", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "049845ad-9f45-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618640434, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618640434, "uuid": "53f6299f-07af-495c-9c4b-8ebe07e7dae2", "comment": "Malware payload (Dridex)", "value": "6f6185bcaf450a8a4ff815a41bd2557c", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618640434, "uuid": "31574abf-9bb9-4fc7-b7e5-44b2b940d90a", "comment": "Malware payload (Dridex)", "value": "a35e8794b887258c45e0e13b7a8b7e84b50baac36af2fbebb357fa6377cbd502", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618640434, "uuid": "3cab1e44-eda9-4859-8865-09b5d1a7ff29", "comment": "Malware payload (Dridex)", "value": "a2da79f6904fc03cd544091ee67ed618bce89b84", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618640434, "uuid": "341ec370-42dc-459a-86bd-dfb78598e0ac", "comment": "Malware payload (Dridex)", "value": "adb7623aeae9299d4196970ed347ea1e60bede4056d634c9ad49d2a2e9ee494f5a2a1d76d13788ed7affa2c3443bcc03", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618640434, "uuid": "c9c3e20b-de82-4aaf-9ce6-23487695ce01", "value": "12F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618640434, "uuid": "56d52167-f534-4760-b3ef-477aef25c517", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618640434, "uuid": "1b532a1f-2b20-48e9-a8c9-0845777bbafe", "value": "3072:YmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:BLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618640434, "uuid": "2c64b9dc-1752-485d-bdde-70e39a5d2ef8", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618640434, "uuid": "1d90b3a3-070b-4aeb-857c-14b2432b14eb", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618640434, "uuid": "0ffe19af-7042-4069-824b-8a2642eac247", "value": "a35e8794b887258c45e0e13b7a8b7e84b50baac36af2fbebb357fa6377cbd502", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1126dcc6-9f82-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618666654, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618666654, "uuid": "dfa544ba-727a-4a2c-afd3-48a424b290c6", "comment": "Malware payload", "value": "e59f9045db08c11502eb1ce87136ae36", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618666654, "uuid": "7d2e492c-6a0a-4e32-90ae-ce6dc23bd365", "comment": "Malware payload", "value": "a3971b445b8590c8afad2dabd1fa2f996320822e5d81d5cb6699684f1deec8e2", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618666654, "uuid": "e060d20a-3dc7-4deb-b832-fb3fb7dae31b", "comment": "Malware payload", "value": "31e9d2109bf90ddc2c30d02b1c1f5985c22b873c", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618666654, "uuid": "7145ffa8-a361-4545-a481-e7765e9b8e37", "comment": "Malware payload", "value": "ae0b056653e22109e08c316ae0a7bc513f86b0eeefee4b546196bcbcd125e2a65eeffbfd04aab77b94d0ceae3806e5a9", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618666654, "uuid": "84f1d468-5193-4ebf-b847-59d878defb6b", "value": "83F3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B496B1FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618666654, "uuid": "6ace146e-5332-4349-bcd3-f7872095d7b4", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618666654, "uuid": "7f997089-94d0-46c3-863e-acf297ae6653", "value": "3072:uA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:u3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618666654, "uuid": "6ac36146-1fd9-4b41-b0fd-e8fe6aac7a74", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618666654, "uuid": "cad2d761-dea8-4a6b-822e-212b56611b71", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618666654, "uuid": "34a58ff9-ea54-4e0f-80b6-42fed7a6e5ee", "value": "a3971b445b8590c8afad2dabd1fa2f996320822e5d81d5cb6699684f1deec8e2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71886b09-9f77-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618662091, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662091, "uuid": "b6ebf17d-30ef-491c-b779-fb549cc60506", "comment": "Malware payload", "value": "b24e6b80dda66f8a717218d2fcb813c9", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662091, "uuid": "1613a83e-4d3f-4ee6-8990-cd4206a11a35", "comment": "Malware payload", "value": "a3c81d05d109e1da7b0c41facc9365fd06aead3612891762b4dd27f154379df0", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662091, "uuid": "69b19668-dc14-49c3-8535-fb8bd540d9a2", "comment": "Malware payload", "value": "2af777883a0b21bc20d8ec7594cd0dd4396af4d5", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662091, "uuid": "6760abe1-f14d-442f-a54d-7afcdfce0224", "comment": "Malware payload", "value": "7d4780385532f5ebd149abd85d06dc64bc5865f2459a0c6a5b897ca3fe299388b76e74ef414c9b8fd4c37160d2ced957", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662091, "uuid": "73399f48-bf43-4da4-9bbd-70f5c37ad038", "value": "0DF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662091, "uuid": "009febf0-d8ca-472c-ac37-de67d0812352", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662091, "uuid": "81a40e2e-667e-4946-8d2b-dc6c7b7851cc", "value": "3072:hmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:QLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618662091, "uuid": "5af8750a-6e74-4fc9-b656-b92c4f273cdf", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618662091, "uuid": "45eb3f7e-90aa-4a54-98b2-6167592f8291", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662091, "uuid": "9e094628-d3cb-4b86-94d3-fa012740e059", "value": "a3c81d05d109e1da7b0c41facc9365fd06aead3612891762b4dd27f154379df0", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63a84f8b-9fd4-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618702011, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702011, "uuid": "32231884-a53b-46d5-9ceb-8385444106cf", "comment": "Malware payload", "value": "376676c2db9c666a9aa25f2759528e51", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702011, "uuid": "6579d435-65b0-42a4-bc69-f09d03a0d7f2", "comment": "Malware payload", "value": "a40904a2da190059535ffd3b260ff7c956ca508df030b26aa62dda92cb16661b", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702011, "uuid": "78e75650-0ba6-4a47-836c-1b7bcacb7822", "comment": "Malware payload", "value": "bb26d012e178c64c4686fa925c81d5600bf2e692", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702011, "uuid": "b7de66ec-5e91-47b7-83c5-04911a34e83c", "comment": "Malware payload", "value": "96feb488aee20a0d2888ff5e9e43cb320bca27d946cb6d998f624638cd9f9ee1f4efb167ce700c3fab6cb0315b4ecf22", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702011, "uuid": "22b6b98e-a2a3-417a-b4ec-56357d8fd9f8", "value": "04F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702011, "uuid": "0dddbd5e-02e0-4d9d-80f9-ea550c167e13", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702011, "uuid": "ebc175e9-03d3-4771-bfbb-6cfeee4db02d", "value": "3072:Alpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Alo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618702011, "uuid": "d8da76bd-e213-4b9d-9e50-177834617289", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618702011, "uuid": "63dcf7c6-a213-49ae-a00d-3f11adccb976", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702011, "uuid": "137a4725-27df-4ccc-bdd2-8b46e8f8d01c", "value": "a40904a2da190059535ffd3b260ff7c956ca508df030b26aa62dda92cb16661b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2a0adb3-9fb4-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618688481, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688481, "uuid": "61a1257c-c0d1-4ed8-976d-4c503e06ae2c", "comment": "Malware payload", "value": "6d248c611de8a4ab22d9a4cf7e7b1fb3", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688481, "uuid": "e1ed4fc3-332c-4541-9bd7-27f11794bdf7", "comment": "Malware payload", "value": "a423314d33b74a166ce89ccef59bd5da0b25a6cfdc4ab59ac0fe157dad3082cd", "object_relation": "sha256", "Tag": [] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688481, "uuid": "aeb10dda-3eb3-46a8-9963-6f4030db47bf", "comment": "Malware payload", "value": "f92013c1762eafbbb430892e8cb32356d07e29e6", "object_relation": "sha1", "Tag": [] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688481, "uuid": "a99b22cf-93d6-48c1-976b-606038460cc2", "comment": "Malware payload", "value": "9a342f65f2a9032ac797a89c58c5b315c4ca9654351ceb66fcab2adc461c71b1e0d839cb4a7b3fba5add665469c47d22", "object_relation": "sha3-384", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688481, "uuid": "ffdb2c32-9ec1-47c8-a758-36020428fd5c", "value": "1984DF1232D1C032E09624798668D7F64EBEB471271A59CBBBD40BBD4F217D6B63230B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688481, "uuid": "052d0d0e-ac0f-42cb-b4a5-bc36d15e6bc4", "value": "fd4bf10af10a6da7366de6cd4288ec3e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688481, "uuid": "87ba37f8-d15f-4aaa-ada6-9f922cb6a051", "value": "6144:ViGyGXk+IcGThqs2YmTXTIbrs2s5Yiz0LUe8yrMRwSUp6O+J0b2IH:Vcmk+0Q4ATIPsbjz0LUlHqSlsH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618688481, "uuid": "ed67a7c0-9936-4a6f-9ab0-9a2d074f259f", "value": 407040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618688481, "uuid": "6eb12415-857d-4b8e-9c30-c717cde45363", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688481, "uuid": "68071023-20d9-4e35-8731-d0fb8c13be46", "value": "SecuriteInfo.com.W32.AIDetect.malware1.18890.7779", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e6cde5c-9f24-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618626465, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626465, "uuid": "e7f0f4de-5ea8-4426-9be1-bb732e76346c", "comment": "Malware payload (Dridex)", "value": "bad400e54ab07d202be8c9021de18b3c", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626465, "uuid": "a690b0ec-171e-4a98-977f-f0ddfb99f2e4", "comment": "Malware payload (Dridex)", "value": "a483cf05f2fa8c377259cd76d2e9c9c295d40ddb635bb94f4793d22c9fe79c3d", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626465, "uuid": "f557184d-bffe-4b7c-aa86-030a27ccb804", "comment": "Malware payload (Dridex)", "value": "006af993912f1a3eb14fb1899457a1cf9b3d69cf", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626465, "uuid": "b599f923-71ac-487d-826e-787ec99cf387", "comment": "Malware payload (Dridex)", "value": "69b9df0eeb0aa77ae7a791085191e3c558743751ea11dd5a7423aa02b18180fc68b4eceb2c917f08cde3a479d0012774", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626465, "uuid": "7f06152d-416a-4389-87b0-036d8ccd32d9", "value": "DAF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626465, "uuid": "cf247ce0-c4f6-4082-8a1f-bdfa70d4224d", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626465, "uuid": "a09091c1-2e78-41d0-a67c-27caac419d7a", "value": "3072:YmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:BLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618626465, "uuid": "fdca4a35-6ebd-4c3a-bb42-8796b3d659a8", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618626465, "uuid": "7916ad1a-f31c-464f-ba70-6a2e266fd186", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626465, "uuid": "590e0a34-bff8-4be1-8ca3-070d8c483c90", "value": "a483cf05f2fa8c377259cd76d2e9c9c295d40ddb635bb94f4793d22c9fe79c3d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3553e2ba-9f74-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618660702, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618660702, "uuid": "8b2a6481-e073-4bd1-b9af-a108e74322cc", "comment": "Malware payload (Dridex)", "value": "324b18b597f9b674d3840d8a6650943c", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618660702, "uuid": "80c2a885-4370-4154-92de-eccc87170bb7", "comment": "Malware payload (Dridex)", "value": "a4891ddd8afbd0400f16ab87e92a8301becdb1306c36c47eb054267ae057596a", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618660702, "uuid": "8ef994e8-c6ac-4fe6-9ce9-2af2e46c7a72", "comment": "Malware payload (Dridex)", "value": "03aba13a2557c31af28ec83b6e439442885fe1c3", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618660702, "uuid": "035fb1e1-78b0-4c04-8c90-4e0dd390ac89", "comment": "Malware payload (Dridex)", "value": "66060653adab7c85a5924cc0433920d8a977d05f5eba4129ec8d326790ca277a99d4056800292359aba4a2b3a621b0c2", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618660702, "uuid": "624f5498-0ad4-408e-99ef-aeb73802b499", "value": "94F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618660702, "uuid": "ab4c449c-9795-4a35-b910-3e888e93d357", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618660702, "uuid": "de1a5da8-ab64-43fa-b3f7-2c23baab38b9", "value": "3072:FmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ELc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618660702, "uuid": "a835ceae-a83a-4229-92f7-917fdfde074c", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618660702, "uuid": "43e4c4ce-adba-40af-9a96-b5d41815cd87", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618660702, "uuid": "7bce73bd-fe23-4978-be65-7d1df7a057fe", "value": "a4891ddd8afbd0400f16ab87e92a8301becdb1306c36c47eb054267ae057596a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a130c12-9f93-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618674051, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674051, "uuid": "f9ac58c7-d6eb-4c11-96cd-a0f8d16203d0", "comment": "Malware payload", "value": "d4831adb73b1beab0de809fe11309a84", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674051, "uuid": "06a3cda5-407c-4711-bd5d-03eb9e12ea47", "comment": "Malware payload", "value": "a4b59de8e7c2c1a2312362b23515f4bedc57fabf3bd9bb70bc5f541f6a6ed883", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674051, "uuid": "759f822e-73a8-4c6d-b5c5-e2e9c214ca77", "comment": "Malware payload", "value": "22acd3a022fff210aad94ed1a9873484d130abfa", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674051, "uuid": "5692d028-c157-4e0a-a9aa-9d86173ea126", "comment": "Malware payload", "value": "2b01602387e0f77b7967102f613e2e8af0ee430de4507777556fd591bbb005b71c7fb8f6764b7e6215153d8ac779e75a", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674051, "uuid": "c00db449-79ea-4b70-805c-412b39b6b6fd", "value": "30F3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B496B1FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674051, "uuid": "30514be0-f708-499e-bdfe-d5ef686b584a", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674051, "uuid": "e1c3b735-46b9-41c0-b01b-b3d43eb496ab", "value": "3072:xA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:x3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618674051, "uuid": "619fd5fc-ba76-466f-94c5-042845ababda", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618674051, "uuid": "0053624c-97f8-4db2-a3d2-75fa0c972471", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674051, "uuid": "cd297438-5e0f-4074-838b-743346fdf523", "value": "a4b59de8e7c2c1a2312362b23515f4bedc57fabf3bd9bb70bc5f541f6a6ed883", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "739f1747-9fb5-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618688724, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688724, "uuid": "661b5c5e-b939-4d2e-ba71-8c2564a76b73", "comment": "Malware payload", "value": "f34c3e99ceb97e5c0663e91150d46919", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688724, "uuid": "4e084192-3bbc-4188-837f-079e29b82a3a", "comment": "Malware payload", "value": "a4c5cccd81c19592179255c05bfdce9b21e0c9dddb24d64a387014e1ed6fbb90", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688724, "uuid": "f967b7c6-6833-4742-922d-ca18162e8207", "comment": "Malware payload", "value": "bcb061970de5116006b0339815bfd8e4bbfb1fe6", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688724, "uuid": "5f48013e-d269-403c-8799-b138070b32be", "comment": "Malware payload", "value": "beae0e4b23ffe0217e26a64df1cf724d8133255c9e97b5f55f259e02fc809d8d37f17e2531162953fd232024375bd54e", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688724, "uuid": "3ca952ed-35c4-47f4-bb3b-453bf375c26b", "value": "FDF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688724, "uuid": "829e104e-7b08-4d18-bc47-e01ae5845816", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688724, "uuid": "b4c9df1d-c22c-441c-a779-6ab1332de9b5", "value": "3072:1mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ULc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618688724, "uuid": "e70811a0-e147-4d75-803a-e3f2d98e2d56", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618688724, "uuid": "03dcf6f8-95ac-48b8-9d2d-69e0e9cc316b", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688724, "uuid": "b5f6a73f-a736-4d23-90ec-3bb58da4b2c2", "value": "a4c5cccd81c19592179255c05bfdce9b21e0c9dddb24d64a387014e1ed6fbb90", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72ebb91c-9f60-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618652215, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652215, "uuid": "969e840f-37f6-4129-b146-70fbab2e6533", "comment": "Malware payload (Dridex)", "value": "6441f3dbca767bdc65636882a794c4cb", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652215, "uuid": "7b9f53f2-218e-4533-9d9b-0b09ae4df240", "comment": "Malware payload (Dridex)", "value": "a5336f60c5fca5b19fb89dcce0b4efd4fb84efd75a4862f3a83262f1cea6d126", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652215, "uuid": "fd69281a-29bf-4a9e-846a-3aef4d56cbcc", "comment": "Malware payload (Dridex)", "value": "b623ea77b1ae5b5d0a3343a3e78c115a3bcfed71", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652215, "uuid": "4853b351-5355-44b6-bfe4-30e9d626ecae", "comment": "Malware payload (Dridex)", "value": "b2592ef937f91894629eb1e2224bb6c21ea38e69009d1b7705d6ad58257223060ecacac50f88a089646385435027b718", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652215, "uuid": "41488ea9-37ea-44c5-936a-ff94a3aa6d4f", "value": "51F3C088CBB3E4E6EFB3D37966F85E1B4A1574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652215, "uuid": "087c2c5b-12e0-4824-aef1-802d64075776", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652215, "uuid": "1e79eff8-6619-4daa-98c7-c7bb6f8a660a", "value": "3072:xmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ALc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618652215, "uuid": "f14b4ff9-e931-411f-a7d2-f57e30162a29", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618652215, "uuid": "6766a8f2-6227-4fad-997c-6fa7f19410ef", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652215, "uuid": "8d099d59-4f0d-4f88-bc0a-cc9bd9a91d30", "value": "a5336f60c5fca5b19fb89dcce0b4efd4fb84efd75a4862f3a83262f1cea6d126", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "adee0949-9f44-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618640288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618640288, "uuid": "28dc5dc1-d76c-4258-b388-b72bf648e337", "comment": "Malware payload (Dridex)", "value": "1e55d795ad4da6684971be5da5388a5a", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618640288, "uuid": "27aea5f8-1ec7-492a-b6df-d37aa0a56062", "comment": "Malware payload (Dridex)", "value": "a5494f09be43d05eaa73cbb499bafcb28e1a4a2b26353019513401d330291236", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618640288, "uuid": "cf32dc13-ccf5-4cd2-9b75-422f07115eb2", "comment": "Malware payload (Dridex)", "value": "f1e719b8e25335248d99e194cd4704e43c96915a", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618640288, "uuid": "42e400f3-3a1d-4eb0-bf1d-8324abc34aa4", "comment": "Malware payload (Dridex)", "value": "1832dad71482f452273b1deb7c837303df02d0c505b4056a0a96906345058db2785e1368c782cb1f1a09304fdb2be551", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618640288, "uuid": "2d70bf26-ccf2-48ee-9a69-61bdd140decc", "value": "9CF3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B49671FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618640288, "uuid": "8408a706-a3c5-420b-8433-50087471699f", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618640288, "uuid": "2c1e19b3-94d5-4da0-a1db-fac9f19fb107", "value": "3072:DA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:D3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618640288, "uuid": "3a0dd3fb-35bb-493f-8246-935387b16730", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618640288, "uuid": "99bf06f7-8d82-46c2-848f-a24efef7f8b7", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618640288, "uuid": "e3334baa-23ba-4a08-af80-01d96c113923", "value": "a5494f09be43d05eaa73cbb499bafcb28e1a4a2b26353019513401d330291236", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9743206d-9f34-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618633378, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633378, "uuid": "1764cf9c-7df0-4d63-924f-b128d7f23fa5", "comment": "Malware payload (Dridex)", "value": "6224d23a81c47f48c349a1aab238168d", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633378, "uuid": "d9e5f310-0eb8-48b9-b8af-1ce9b12bbf30", "comment": "Malware payload (Dridex)", "value": "a5b1b1d2ff204ad681c1e2177527e8309ca490523c2f91e0a3b27a23898de61d", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633378, "uuid": "25b30b57-6f3a-4a43-8dcb-a17de52bdbaa", "comment": "Malware payload (Dridex)", "value": "0e69c3f4472802cd548af50d38798b495d50b858", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633378, "uuid": "b1237bf8-5ae2-4baf-bdbd-e699efb8777a", "comment": "Malware payload (Dridex)", "value": "8944031fa4f7ea4b12d834c69785b43fd5e47ce063463cd78e4a00b56da941b21a53c4594c11c688bc6d4c946bc3c02c", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633378, "uuid": "2f9f81a7-d7d6-46f0-952f-d64029fde00d", "value": "39F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633378, "uuid": "133f3fa9-9218-4276-b6f0-0b9ca3f0823c", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633378, "uuid": "e88ab2d5-2ce8-4cb0-b358-9ae44190dc85", "value": "3072:2mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:nLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618633378, "uuid": "76992fa2-ee29-4abd-ad7a-c39fd194cb67", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618633378, "uuid": "3cc29162-1678-4543-9cd9-7c20f628cf53", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633378, "uuid": "7e8ce418-5b47-406e-997d-e5cdd5338a7d", "value": "a5b1b1d2ff204ad681c1e2177527e8309ca490523c2f91e0a3b27a23898de61d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "354db8c6-9f64-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618653830, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618653830, "uuid": "a5e10b0b-a29d-40da-a0e5-e871559e85b1", "comment": "Malware payload (Dridex)", "value": "825276f7126e08323938f332deb38997", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618653830, "uuid": "ce428370-75b6-4978-8835-b1702cc1a6bb", "comment": "Malware payload (Dridex)", "value": "a5d0d9fb6f07b90513d89e1858520d9896c3c861caad17689528e0b08ba6ccc8", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618653830, "uuid": "90205126-5c1c-42d1-a711-20a45b5c747a", "comment": "Malware payload (Dridex)", "value": "1a997cdd657efe959baee2f3e8f1a0b81b4dff5f", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618653830, "uuid": "895b5e6b-9651-41a8-af5c-bb2dd12b462d", "comment": "Malware payload (Dridex)", "value": "7f05ef53d4bf8eb8c76dd4bf24ec1ec5449bac0ddaf3541e2232ce308420133554ca4fbc528b89d3625437f69ffdeb5a", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618653830, "uuid": "397013ed-6002-4e13-b56b-fdcb17eaa9a4", "value": "81F3D088CBB3E4E6EFB3937966F85E1B461174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618653830, "uuid": "fde0dc5b-5f6f-496b-8335-ecb6b8b73cbc", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618653830, "uuid": "726548ca-bf9c-46f1-8c74-6b368b4f9cae", "value": "3072:hmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:QLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618653830, "uuid": "31e198ac-07cd-4835-9025-60449d5060c1", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618653830, "uuid": "4d2e55b1-62a7-46b9-bdc6-c9e1a263352f", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618653830, "uuid": "d895900f-465c-434f-bfae-f51b6f39b925", "value": "a5d0d9fb6f07b90513d89e1858520d9896c3c861caad17689528e0b08ba6ccc8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5eaf0772-9f93-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618674086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674086, "uuid": "a96f4483-8113-45e5-b125-75152134ce4e", "comment": "Malware payload", "value": "65bbfe9455d111405282fc9345844a3a", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674086, "uuid": "961e8b22-bfdb-40ae-80be-fd73f9cdb4b1", "comment": "Malware payload", "value": "a5de8c1396fb3409ad4300b49ea72184ffc4865173b17e23fc9d3e34a0530520", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674086, "uuid": "cbd8345e-18e8-4c33-a948-19b8957a0cbc", "comment": "Malware payload", "value": "8252cece87040ed0fe7ce5d7a6269e24c315e031", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674086, "uuid": "1928cc6f-7eea-4e3b-9cc4-08a50ff1e7f0", "comment": "Malware payload", "value": "13ca03b6fcd9502a6427a250be6a1acf9baa9fc06fdb3162cbbc045cf4b74920b4103bc33c97eba65d01d23ad7f945a6", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674086, "uuid": "f3300159-f66c-4d04-94ee-8265e1689f45", "value": "C9F3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B49671FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674086, "uuid": "ea916e7b-fdf5-4e61-b2cf-0714b27c1442", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674086, "uuid": "82f04bb2-dfa6-48cb-9fa1-07c48ab922ef", "value": "3072:yA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:y3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618674086, "uuid": "938b7f2b-5ee8-48b9-9f04-c0365e68a9e5", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618674086, "uuid": "ca994765-cf3d-4454-bdf9-60e40e18d8af", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674086, "uuid": "d0811960-a227-4168-bd52-bd1efb333b86", "value": "a5de8c1396fb3409ad4300b49ea72184ffc4865173b17e23fc9d3e34a0530520", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65059ecc-9f7f-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618665506, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665506, "uuid": "a7cb3ae2-650b-4f60-b248-73b6edac02f2", "comment": "Malware payload", "value": "7bbfa4cbc92553e9f77ae494789f609c", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665506, "uuid": "155f74cb-584f-495b-9482-d7c8e9d3d53c", "comment": "Malware payload", "value": "a625ce602988313f7c5e4733d7cfc13f864d11ae6b8a4726ef62da2dd072b680", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665506, "uuid": "62dff60d-826e-45d1-adfe-cbdc2fd3eb0e", "comment": "Malware payload", "value": "f0c0241b6b802cef908157c72557d47f86aaa75a", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665506, "uuid": "a2b49944-cca2-4feb-8439-f17e589588ef", "comment": "Malware payload", "value": "b357f705049cc0dd4481527b17f9cd8e7a9a23efd87f0c4c9eb56f5e36b94bab0f0e608b061eda20d76057de1883a9e1", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665506, "uuid": "444df3c5-c2be-4da3-b239-0eee66858b64", "value": "4AF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665506, "uuid": "9cdb2010-2ee4-47d6-82eb-4a4504ca38ea", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665506, "uuid": "eae4074e-16f7-4329-a552-8eb5c61c7647", "value": "3072:tmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:MLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618665506, "uuid": "10b06b1d-7a31-4933-90fd-541a02caf2f0", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618665506, "uuid": "a8102c5a-360d-432f-9b8f-0a9aea6413e5", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665506, "uuid": "755a1a97-bf64-46c3-9225-7e834a8dd22f", "value": "a625ce602988313f7c5e4733d7cfc13f864d11ae6b8a4726ef62da2dd072b680", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "115f0385-9f67-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618655058, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618655058, "uuid": "15e143b2-4990-4769-ab15-6768f39a15ca", "comment": "Malware payload (Dridex)", "value": "51426862e4e7a813a651a55af1f6b966", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618655058, "uuid": "2408dd09-5611-4e7d-9361-86bbdb058626", "comment": "Malware payload (Dridex)", "value": "a637b5bd2b03545c4f7e0409e5da405b54caa4573a84cb0302e484ddb54b507a", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618655058, "uuid": "fd6ea581-b5e9-4c50-b2d7-4e2ec08f6251", "comment": "Malware payload (Dridex)", "value": "020161260fc619cde378e1db58017defb99c85d1", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618655058, "uuid": "09320ff3-8b62-4ac0-85ff-323467671aa3", "comment": "Malware payload (Dridex)", "value": "6c8de60b564606007629f931d9c82c8ccaddbe9239fbe8c9ea885acbfdd05c9ab63c157a2b3a93283613660630abd1d1", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618655058, "uuid": "5cd89b1c-42d2-42e9-be5f-6d72f136efed", "value": "F5F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618655058, "uuid": "db80ae2e-dbde-48e6-903b-0404721aac26", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618655058, "uuid": "6702a41e-8e42-43ed-a22d-c58aa06e1807", "value": "3072:UmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:9Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618655058, "uuid": "48ea00e4-3ab1-4260-ac55-ed0b34b89390", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618655058, "uuid": "2bfc8c6e-8e0e-4efd-a3f9-28c51f3fbe80", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618655058, "uuid": "49f86314-536b-417a-814c-8ac2f081c1dc", "value": "a637b5bd2b03545c4f7e0409e5da405b54caa4573a84cb0302e484ddb54b507a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ffece9e-9f12-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618618737, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618737, "uuid": "268c38f1-8d85-4f46-9583-9fa9858a0162", "comment": "Malware payload (Dridex)", "value": "e7d53faeb41b832997b9fbe73c83b7c2", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618737, "uuid": "963191c5-ad59-4454-b938-1604a50a5dee", "comment": "Malware payload (Dridex)", "value": "a64549ea1ec1359980c325dc783248dda9e77c3980bc681ec5ca3b89487932b5", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618737, "uuid": "4da018f2-c7ce-440f-883d-2a8c2c7e1dc3", "comment": "Malware payload (Dridex)", "value": "7eb8c7ec6c2dc33e87827b1c73995f4e8e97b695", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618737, "uuid": "fcff401f-ff08-4270-bf2e-76aa29d1c09a", "comment": "Malware payload (Dridex)", "value": "e06e02aa39fabe7eb8183d3371debc40ecb708b18bd8af7c4605e9720ef99692384b19232e548cfe1b51406b6db1e2bb", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618737, "uuid": "a89420be-f0e0-4350-bc5a-a7a6cf9ed990", "value": "73F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618737, "uuid": "673d43e8-a5fa-478a-b57d-dace4255d39d", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618737, "uuid": "2c9d35e7-24c4-4d4b-99a0-ca0639496d96", "value": "3072:4mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:hLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618618737, "uuid": "0716a148-086c-4de4-881d-16b5669fa538", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618618737, "uuid": "e555e4fb-54a1-4ca2-8394-97476e70f8ef", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618737, "uuid": "a0362175-0066-4d35-b48a-a2d80588e138", "value": "a64549ea1ec1359980c325dc783248dda9e77c3980bc681ec5ca3b89487932b5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3bc210f6-9f2b-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618629359, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629359, "uuid": "4599eabd-9fb7-42bf-af2a-cbe6c956e9c5", "comment": "Malware payload (Dridex)", "value": "b898db86181324309e40f2e00581becb", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629359, "uuid": "92e5813d-66ee-461d-bd90-3af2f389ec7d", "comment": "Malware payload (Dridex)", "value": "a661410a77853cb7fca6650676a43a8e9fa46161ef7a776392ab18f8b5786179", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629359, "uuid": "4aa60b6d-48f2-4541-ac59-547f8b027a63", "comment": "Malware payload (Dridex)", "value": "fa59a1ebadac6f98d69b10f0ac0bdc621d872043", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629359, "uuid": "7163e605-9112-49fb-9b4a-e11ca76d0de0", "comment": "Malware payload (Dridex)", "value": "7b9607b63583c631a453543925c5fbde253bd7d3a0e5436d31bf9278639998f146e201c9e8c6d92b45e3f9f90a2c8b9a", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629359, "uuid": "f5272ceb-e1dc-4b9d-bdcf-9e714a41d530", "value": "09F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629359, "uuid": "f173263d-9ab1-482f-9eba-f1f510ad1846", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629359, "uuid": "3f2bae91-d416-40f5-809f-704ed9218253", "value": "3072:qmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:7Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618629359, "uuid": "981b8983-0a6f-4857-8bfd-813d82846e6c", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618629359, "uuid": "8b776a8a-17d5-4242-862d-53eea3b95602", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629359, "uuid": "c2c935b4-a5cb-42a7-918f-7bcc68d4c77d", "value": "a661410a77853cb7fca6650676a43a8e9fa46161ef7a776392ab18f8b5786179", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db277848-9f67-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618655397, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618655397, "uuid": "ef49f553-8e97-4780-add7-8c5cbb1d55b7", "comment": "Malware payload (Dridex)", "value": "bbdaec0dfb28b6cf155eecbd4783da5d", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618655397, "uuid": "463b3d5f-c937-472e-b6b2-2b4b5f402537", "comment": "Malware payload (Dridex)", "value": "a6da909429ec5d6bc4c454e6986ca9cd9f4b58ea1762a5d95d3c3c1dd4e713d2", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618655397, "uuid": "624376ff-af6e-4843-bb97-3275212d9abf", "comment": "Malware payload (Dridex)", "value": "6b12906fd86651a585ed366f18d8354aab6fa968", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618655397, "uuid": "8476b4bf-e9c7-421d-8a7f-12cc43c17a44", "comment": "Malware payload (Dridex)", "value": "62a8e71ef34c5291db43023525c1d95bbc554dd0fe7f27c0bb97d36cdec5675ebaa2ae065f3666b0fb3126c2508ebf71", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618655397, "uuid": "0a63283a-d52b-4f72-9d59-0bb6cba29094", "value": "24F3E00AED9FE988E85C51F1CA4D363EE9713E361B5BDD08C584AEDDC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618655397, "uuid": "0637dc85-63ac-4998-8b6f-cc7bbcddc2a5", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618655397, "uuid": "674ed4ca-47fd-4a2b-94b4-c9c0afd5474b", "value": "3072:6iFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:5eAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618655397, "uuid": "de7e7daf-c192-4df2-a3cc-5ff02423c679", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618655397, "uuid": "2d05662e-ad09-40fe-9665-d440acea9eec", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618655397, "uuid": "ba8070c2-2951-4050-b75f-0301816191ca", "value": "a6da909429ec5d6bc4c454e6986ca9cd9f4b58ea1762a5d95d3c3c1dd4e713d2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "347ca544-9f26-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618627200, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618627200, "uuid": "a8b15e6a-3a85-4e6d-9652-415fcde0076c", "comment": "Malware payload (Dridex)", "value": "31256b6d8eede2dd360e44db9bc50174", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618627200, "uuid": "cb6cea40-4177-4ca5-9d99-8774c21ed0a7", "comment": "Malware payload (Dridex)", "value": "a6f03a4450e5749fc56ece01f2c322820d0fb03dbc01542b9b4d24ec84b9d7ae", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618627200, "uuid": "d35b5518-68f5-4e0d-8e3e-1bb36325a605", "comment": "Malware payload (Dridex)", "value": "fd398a8407f7364e0e5c099ab44d3266ab40df7a", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618627200, "uuid": "22bbf0b4-b35b-4f3b-a6ae-05fb1bb98977", "comment": "Malware payload (Dridex)", "value": "b8fa5cc00a2b3a3d4b0119afbb17a7375680650dce083a32c8d89ecd3a108e609a28d267b76356f3853746856141ac6b", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618627200, "uuid": "959b6a9c-6d9e-4158-8bfa-22e3bba64cdf", "value": "13F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618627200, "uuid": "8a4ebfb1-4a24-48fa-929c-336b8f2dfd76", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618627200, "uuid": "803b4996-f442-4036-8d26-0836ef82a3dc", "value": "3072:8mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:lLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618627200, "uuid": "bea0a135-6f0b-4bbc-8303-83e11290cee6", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618627200, "uuid": "9143b14e-29a5-4cdd-bfb2-ea8c10807b8d", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618627200, "uuid": "bbf66eef-4c18-4c32-8282-15a217316c4f", "value": "a6f03a4450e5749fc56ece01f2c322820d0fb03dbc01542b9b4d24ec84b9d7ae", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "038f9729-9f1e-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618623682, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618623682, "uuid": "237f3a6f-437e-47f5-b5a9-e87ebe0dc127", "comment": "Malware payload (Dridex)", "value": "333e387a2964b05eae1412803d7f4a1a", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618623682, "uuid": "7182b2db-d629-4e8c-ac47-449366b85883", "comment": "Malware payload (Dridex)", "value": "a77103cc373bf7f949132e5693b609f33f1f42f4ac72f8c899b04a3e3b846152", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618623682, "uuid": "4dcaf5cf-0380-4ef6-81a5-5b5acb340d62", "comment": "Malware payload (Dridex)", "value": "69b54fa46007f2d67a270357c4fce02ef4bea2ff", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618623682, "uuid": "fac457ec-7754-48d1-8696-c438a2370c2f", "comment": "Malware payload (Dridex)", "value": "97b9d151edeb53a321c8219430f5d8e4a4f17be44a141557cc2dec2907dc2dc34107830d3feaa2c8384faec6a9e0260e", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618623682, "uuid": "75c074d7-ade0-4868-afdf-9e0e1c48c5ec", "value": "4FF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618623682, "uuid": "8633a632-6272-4606-980b-46025d120628", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618623682, "uuid": "9dc3e47d-38ff-4e28-9133-294798d2e578", "value": "3072:emNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:vLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618623682, "uuid": "c5e7fdc9-befa-4dbd-9707-eec35228357e", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618623682, "uuid": "42b084ab-c259-41a9-ad72-030468bafa31", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618623682, "uuid": "7468e1f0-5bc1-48a5-a38e-138be6918ea5", "value": "a77103cc373bf7f949132e5693b609f33f1f42f4ac72f8c899b04a3e3b846152", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b87a2be-9f6a-11eb-abe1-42010a9c0039", "comment": "Malware payload (AsyncRAT)", "timestamp": 1618656444, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656444, "uuid": "20c89661-e3fe-41b0-ab04-e130c58e6a2c", "comment": "Malware payload (AsyncRAT)", "value": "87d9e7f1e756d2cb1d5bc6e9415cd217", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656444, "uuid": "776cc9c1-57bd-4a7d-9e40-3166106dcef0", "comment": "Malware payload (AsyncRAT)", "value": "a7997d254547bc1c1da4f6e00b47af6b389627b6b638ac1ffd793777edca9911", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656444, "uuid": "63a12b95-1072-4ae2-b386-3630968cb8de", "comment": "Malware payload (AsyncRAT)", "value": "673c133698597505b2a08b78c34460ac6aad3375", "object_relation": "sha1", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656444, "uuid": "e780eaa4-4fe5-4d64-bed5-7faea184cd23", "comment": "Malware payload (AsyncRAT)", "value": "6eccf0b4aad25a362d3930ec162d6a465d0a32d29e10ed087fedf4eab8265ea716208c6879cc08fc205e5103c10bb427", "object_relation": "sha3-384", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656444, "uuid": "91343465-52dc-43e6-84fc-c21c55fda69b", "value": "A1335C0037E88225E7BE5FB859F621158AB9F6272903D64E3CCC41D65B13BC3CA536E6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656444, "uuid": "9e0e3c3e-ad98-4f75-a07d-865272b254e6", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656444, "uuid": "d7cca868-1671-4256-aeae-bb142f427c8e", "value": "1536:U1UZvD6sWaibvqbwh/JDoGii5sB2npqKmg:AIWdjqbAJ5o20z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618656444, "uuid": "909a28a2-22ea-4983-9985-df7ba7282f0c", "value": 50176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618656444, "uuid": "0b291988-437a-4546-b38d-a28d1d68505e", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656444, "uuid": "d58e5f85-4fd5-4609-a892-d0163ca1c340", "value": "qJiGYEJs.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f67d92de-9f71-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618659738, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618659738, "uuid": "3d770ba3-596f-4b8c-86d0-4de133894bea", "comment": "Malware payload (Dridex)", "value": "0b104633094bd8a5f09e5bc8b224afb5", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618659738, "uuid": "0eb06be5-8547-4b14-b192-c27385afb037", "comment": "Malware payload (Dridex)", "value": "a7be6cad7738430b3065903d0bc0d9b8c6f40b08ed448068ac74a6f4d1ea1a4d", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618659738, "uuid": "b00c3cb2-f267-408d-8aeb-0be8205bb6fa", "comment": "Malware payload (Dridex)", "value": "0c3acc9101be7752732290f1c56d467011cca4bb", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618659738, "uuid": "6d5d7218-3232-4796-9ee4-226259e7081b", "comment": "Malware payload (Dridex)", "value": "4203b24441fafa7a6769244bf0158fc2e4ef04c0997481f0c95bddd8546cf7bc9aca233d0187b656be4d38019cf4eb20", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618659738, "uuid": "936ceab5-e0a1-4471-9329-9c70407fbf32", "value": "1CF3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618659738, "uuid": "ddb260b2-3f72-44dc-9d5c-febbc00e87a3", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618659738, "uuid": "8a09113e-8b3e-46f4-9fc7-2435c5332efd", "value": "3072:hmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:QLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618659738, "uuid": "e0acedb6-4a91-4d73-8adb-acc9e771e0b7", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618659738, "uuid": "b0c3a474-b063-4048-bf9d-c2e6d0bbfd5e", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618659738, "uuid": "1c8596ff-9502-473e-a50b-0998598c5056", "value": "a7be6cad7738430b3065903d0bc0d9b8c6f40b08ed448068ac74a6f4d1ea1a4d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8cc75a0b-9fc3-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618694779, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694779, "uuid": "addf4b4f-053f-44b1-820f-eea62a2a9c3f", "comment": "Malware payload", "value": "41230cb96f25a9c49ae939b8bedb9a11", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694779, "uuid": "8dc69771-f96a-4c4a-a6d1-2e4fcd489554", "comment": "Malware payload", "value": "a7ecf15e09627239eb4f9c1d6d72d2ab1d90eab3f9fc8490627d52402bd87143", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694779, "uuid": "842404d8-611b-4584-927e-26d27a882872", "comment": "Malware payload", "value": "404fce3f5a7e354a969b700ff88a0bf09de459a7", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694779, "uuid": "0555b7d9-a201-4c40-a3c2-43e44b1277de", "comment": "Malware payload", "value": "95dbf69f1ac1a766273c06d0f6c1a3e2a94dcd248d0aaae1127ccf6269c9fba1cc06ffc3a19d0537cce5fb877e56f239", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694779, "uuid": "adccc6aa-674a-41c3-a2e6-f0c063d3fd06", "value": "CFF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694779, "uuid": "a2adfe2d-7e6c-4ea3-82e7-7111d9d269d2", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694779, "uuid": "d6aa4f28-f82b-448b-98be-6d798cadb438", "value": "3072:FmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ELc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618694779, "uuid": "89f4dc25-9943-4a9c-a74c-52e2edb69a44", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618694779, "uuid": "3df8d2f0-11dc-460d-aa8b-1df468defdb5", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694779, "uuid": "81f32b75-06f8-4c5d-9c02-68df4c608499", "value": "a7ecf15e09627239eb4f9c1d6d72d2ab1d90eab3f9fc8490627d52402bd87143", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6dda9c9e-9f13-11eb-abe1-42010a9c0039", "comment": "Malware payload (Qealler)", "timestamp": 1618619136, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619136, "uuid": "95d59c27-8e50-4c79-81e9-7ec6171708a6", "comment": "Malware payload (Qealler)", "value": "cefa7949a874d064aba4959048f9ef65", "object_relation": "md5", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "qealler", "colour": "#22D507", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619136, "uuid": "0d2562e7-be8e-48bd-8dd2-fa0e60ec38e7", "comment": "Malware payload (Qealler)", "value": "a82c944e8de860c5098382980896f982acd19016af3b450172ec345b72827db4", "object_relation": "sha256", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "qealler", "colour": "#22D507", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619136, "uuid": "a3bab844-b546-4ff3-9dc2-7b38dc54e439", "comment": "Malware payload (Qealler)", "value": "ad190a73ab8b7c05223024cfaeba9cd38b417673", "object_relation": "sha1", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "qealler", "colour": "#22D507", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619136, "uuid": "060a455c-5dea-4828-bee2-6c4ede8f8d72", "comment": "Malware payload (Qealler)", "value": "d88367c1a8a2ee56c50f4f6447c09e237119ad71c84b151cb441b35a19f7c8a61f1fc1998c640c6a390fd28761d3bad7", "object_relation": "sha3-384", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "qealler", "colour": "#22D507", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619136, "uuid": "6811937e-6615-4b74-a7a1-7ca3f134f04b", "value": "DA948D58BFDCE051F527B4B31405C1B3EC0D6C88BB4AB50F59E406A68838D99EB66DCE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619136, "uuid": "89fdbf72-d487-4fb3-a800-4f5f2f8d85b5", "value": "6144:sun9RHigFLnUDzX90NCTJUfV0jiMTRh+1gHE+CAewLay3s2qJcfBiOwgls4Zb:sufia4/X68TJUfSXTSCblDsfOw/49", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618619136, "uuid": "51a64ef4-91c9-47e6-af86-f2f98a45e592", "value": 419167, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618619136, "uuid": "7d17972b-398a-4e64-aa0b-fc3b9aea4ab7", "value": "application/java-archive", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619136, "uuid": "24bda438-dd4c-4ed1-bb24-7d78464d6873", "value": "cefa7949a874d064aba4959048f9ef65.jar", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45362d77-9f6a-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618656434, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656434, "uuid": "d8e95c80-6d72-48d7-a27c-2854b4186e60", "comment": "Malware payload (Dridex)", "value": "b254b907ec75bf478e5e8a0413792397", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656434, "uuid": "721c2c8f-d3f6-4baa-869c-07b1503ff72a", "comment": "Malware payload (Dridex)", "value": "a8409f329233899cee5bf11c906f73b61b2070f7446d2ccf4975320c1e728fed", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656434, "uuid": "783e703e-1883-477e-ad6d-14b2b4aa098d", "comment": "Malware payload (Dridex)", "value": "224054845a86383435bcfa6c0a5a2b34e790ff33", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656434, "uuid": "b364941a-2d70-42db-995d-bbc0e47d5270", "comment": "Malware payload (Dridex)", "value": "774882028aad17fbaea73a94b1d156fd37e0b33deecdf1734fbecd1bab47098264840bc5acf3a5ce201209ac6a944ef1", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656434, "uuid": "e5e74019-3684-43dc-9e61-5e89afca8206", "value": "A0F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656434, "uuid": "aa9ac3b8-f4ef-43d8-9ed9-556e2b9fd827", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656434, "uuid": "a8a74e69-3707-45ee-b1b3-f35e96414f44", "value": "3072:Alpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Alo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618656434, "uuid": "acf04aff-5530-4a94-95e2-80662e0456d3", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618656434, "uuid": "d5a0ddf3-4d20-4f7c-9491-54f3ff3459f8", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656434, "uuid": "25f6af10-52ca-4fe6-97ff-bbba8bef4d88", "value": "a8409f329233899cee5bf11c906f73b61b2070f7446d2ccf4975320c1e728fed", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "793331e1-9fa1-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618680143, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680143, "uuid": "c2357857-0b62-442d-be76-005f4e934a7a", "comment": "Malware payload", "value": "e3bfbb8bddd7eb577af23697ab7eff61", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680143, "uuid": "9e334208-c32a-4319-a267-dcf62ea740a3", "comment": "Malware payload", "value": "a86d345e1a5e974abf6cfec572de49d885fbdc43ae62378f52daa6f175e125ed", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680143, "uuid": "26d47e35-e29a-4dfc-8ffe-276769b4a17f", "comment": "Malware payload", "value": "a9f6b87777ee78c4c81f39fbb3c019aaec2baea0", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680143, "uuid": "3511ff50-94b1-4b76-b2fa-c080cf881d94", "comment": "Malware payload", "value": "e4fd566b7ae653a163868fa17d51a44848a7fd19fd50e05d8e6216dbcb6dbeb520d79b1a3044b44cd53b41abe728870a", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680143, "uuid": "5f544406-5d37-4c8c-ab23-046f770ee672", "value": "64F3D088CBB3E4E6EFB3D37866F85E1B561574551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680143, "uuid": "d08ffb6e-d6cc-4405-bc9d-6441195941df", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680143, "uuid": "61aae30b-36c5-4f25-b413-df9cf2ad8bfe", "value": "3072:vmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:uLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618680143, "uuid": "7c27f17e-99ca-4541-9bff-891e646debc2", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618680143, "uuid": "ebbfe159-3535-4751-9a44-f7639476fb58", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680143, "uuid": "60f33612-d01f-4ea2-b43b-7b71bb745de0", "value": "a86d345e1a5e974abf6cfec572de49d885fbdc43ae62378f52daa6f175e125ed", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c1f013a-9f2f-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618631024, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618631024, "uuid": "5ee8a74c-2437-438d-8e7c-f46c9bf00b06", "comment": "Malware payload (Dridex)", "value": "41710f9a5ad99aa15bef6fae4096025e", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618631024, "uuid": "c6354741-20cb-416f-b9a4-18c92f1fc142", "comment": "Malware payload (Dridex)", "value": "a8ae93e9ce7a7204d463b8d3423ca31fa1065a62c4ccaba5e4d7d48916a3b73b", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618631024, "uuid": "17a7efa2-7e16-4358-b5c9-61a538751ef8", "comment": "Malware payload (Dridex)", "value": "fd6373a8c235fb77965c2675dfd6decb1a464475", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618631024, "uuid": "4fd7c56f-82f2-479c-bffb-b1742bf007c9", "comment": "Malware payload (Dridex)", "value": "480fb7cddb8ed4eb7304a19646cd48a4fc9bd26cb75002114316795ac07b4ca0b00932fd4b5ebf28829fc2a33bc94eb8", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618631024, "uuid": "438a0577-bcfe-4f46-96d1-e5ae90d97567", "value": "7CF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618631024, "uuid": "44cd2d26-6835-4161-83f1-1188951bda17", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618631024, "uuid": "afbf45df-3da6-4a2e-ad7b-07eeb13ae143", "value": "3072:QmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:5Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618631024, "uuid": "1606e671-0373-4aec-99a7-afa8f2089893", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618631024, "uuid": "5fb53785-825a-4569-93b1-31ac195ffd71", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618631024, "uuid": "5a49cd22-ad70-480a-ac06-8f49d5103489", "value": "a8ae93e9ce7a7204d463b8d3423ca31fa1065a62c4ccaba5e4d7d48916a3b73b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a124ad49-9f7c-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618664319, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618664319, "uuid": "97a7e812-e811-4a66-9311-9467c699b878", "comment": "Malware payload", "value": "069c70cfdfb355238ff4ea7349ce8dc0", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618664319, "uuid": "9a0349e0-106c-44fb-8d44-d9d3e67f086a", "comment": "Malware payload", "value": "a8d8224a24cc204a231efe8c919d2c8e9d6cfc124a10b97b5faf7199ae05ffee", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618664319, "uuid": "22e4de8d-d760-4f26-9c3d-38ddf02b06fa", "comment": "Malware payload", "value": "c0c30b51bce6766731afb59527420376a2bfb71f", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618664319, "uuid": "44af4638-b16d-49f7-9029-91ad4ff2a1c6", "comment": "Malware payload", "value": "9c9801ed1ca2ccc0cdbe97ea45bfd7fa48cf587d88df078d0ff330013cd9bcc8a0176654af636d9c99b86549321a39bf", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618664319, "uuid": "a2b239d0-f57b-4d16-a186-a6c9b503216b", "value": "BDF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618664319, "uuid": "a248ab65-a3ba-4cc5-9269-ef6d5730e7c2", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618664319, "uuid": "72935c79-75c6-4829-9708-fa26796f07f3", "value": "3072:XmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:2Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618664319, "uuid": "f0516620-a469-4e78-9fc9-85126abab9be", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618664319, "uuid": "e8c30e5c-6fba-4d00-9c06-8ba539af32f5", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618664319, "uuid": "ad17ebd8-4c82-468c-9c55-011cdb74eb8a", "value": "a8d8224a24cc204a231efe8c919d2c8e9d6cfc124a10b97b5faf7199ae05ffee", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "328e6a7e-9f47-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618641370, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641370, "uuid": "9dd44edb-9f52-4f67-ad78-0b6b449da082", "comment": "Malware payload (Dridex)", "value": "1479bb2b466709beedd00c7f4d6c8f24", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641370, "uuid": "eea21736-d270-4b8a-b32b-f7d72ae83c9b", "comment": "Malware payload (Dridex)", "value": "a939c5762a139de20a19ee5b07549c874f2475136788fbf8a93e1fded4a2cc39", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641370, "uuid": "f1a4928a-dcfd-4fc8-9dc6-23d74807f071", "comment": "Malware payload (Dridex)", "value": "c9b73cf60942b6a6e7066548c75811d4b5c3f3b0", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641370, "uuid": "ed2cbc0b-d893-432c-a91a-9ab1e443e21e", "comment": "Malware payload (Dridex)", "value": "289d0faabfa0055659bb84544c8b59e2ff9b3c433f92a00ba935f93b487bcf91d911bee38ca7bd67734efc09657b5997", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641370, "uuid": "eab88de3-e4d1-4f8e-9287-4fe2644fc6a1", "value": "7BF3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641370, "uuid": "c506b379-06e3-4f41-8bd4-38f607ebf0e7", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641370, "uuid": "01483b1b-64cd-4904-9d76-92a944876aa2", "value": "3072:tmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:MLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618641370, "uuid": "8706d206-2588-4435-98d5-de93e97d13b0", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618641370, "uuid": "48566e73-1539-4062-8f7d-b865289ad4f6", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641370, "uuid": "57ec07e5-c141-494d-8783-5224a38930d7", "value": "a939c5762a139de20a19ee5b07549c874f2475136788fbf8a93e1fded4a2cc39", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90b0b20c-9f2e-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618630790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630790, "uuid": "d5f6702a-6a37-46df-ae0c-a04f0293a291", "comment": "Malware payload (Dridex)", "value": "adb1946692c5f39a1d75c1a04ef7a0e6", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630790, "uuid": "8a9b9721-93e0-411f-ae3f-c58a90398975", "comment": "Malware payload (Dridex)", "value": "a95e948a2e484f82d0d9b42d703814aadb0d390363c455e783481ee0f305c120", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630790, "uuid": "90d98650-7fb4-4ab5-8fa8-0d9ee315b9a8", "comment": "Malware payload (Dridex)", "value": "06e29214d5f1699098edcd0d148e468423401697", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630790, "uuid": "583b817a-6940-4ddf-8ff9-89d3da71890f", "comment": "Malware payload (Dridex)", "value": "85d5aaf0ab06886d8f2f40a0e9536cf3c645bcb229585f1a79497ef9f2dc394e72ea3db6cd91ad317c9fd1f24f150fc9", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630790, "uuid": "454d703c-424b-4e38-9b3b-b29f3f60d44d", "value": "F3F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630790, "uuid": "d6b7083c-24c5-406d-964c-b836ce11d882", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630790, "uuid": "f52fe20a-f449-4f85-8792-7eef0e88bf59", "value": "3072:SmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:DLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618630790, "uuid": "13f933ae-7c06-452c-b647-28812c0f7369", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618630790, "uuid": "b9062361-7229-4a31-881c-8f328f3c042a", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630790, "uuid": "43dfb7ab-8850-436e-8145-8679ffacc86b", "value": "a95e948a2e484f82d0d9b42d703814aadb0d390363c455e783481ee0f305c120", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e511dea-9f14-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618619512, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619512, "uuid": "cf3f1189-d812-4de8-a51e-e613058f1085", "comment": "Malware payload (Dridex)", "value": "aa727b1bd5f1ece5c7854b9dd9a940a4", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619512, "uuid": "b4269553-69a7-4226-b02d-b0e221661ff3", "comment": "Malware payload (Dridex)", "value": "a9fc48d5c5b21b70fc224f7200b45508df6e68eb656131d0b1c08200492d1f0f", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619512, "uuid": "20296e85-7a2b-4814-9877-cdd7952f8363", "comment": "Malware payload (Dridex)", "value": "819dee087e546bc463a951f7c3b116e3fcccd34e", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619512, "uuid": "d9db8659-bb09-4c72-b47c-794de51e17d7", "comment": "Malware payload (Dridex)", "value": "c0427a3525d5f37857be8f11888add8283acac6b5b0ed5d1e1e70c0151bd34358a26261cd9e7f174a684be5f989f7425", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619512, "uuid": "de50227f-46a0-42c2-bffe-554c7689d8e1", "value": "F7F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619512, "uuid": "b1dbb0e3-4a73-4087-aff7-f506ff72e5ab", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619512, "uuid": "0cec665d-6976-4869-99ea-c12e5ef29c9f", "value": "3072:Blpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Blo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618619512, "uuid": "e708c9d0-7eba-4fca-9b64-338a02fe5288", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618619512, "uuid": "02ee0bda-1387-4eaa-8af5-370573928b10", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619512, "uuid": "a464d98a-3c1c-486e-886a-71d9efa3475a", "value": "a9fc48d5c5b21b70fc224f7200b45508df6e68eb656131d0b1c08200492d1f0f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "719cb8d8-9f93-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618674118, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674118, "uuid": "4d81953d-1308-4679-8b05-7625c041bbcc", "comment": "Malware payload", "value": "690c6ab570657bdc18b6c0e346e79f05", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674118, "uuid": "ad5a82d7-5723-4f47-950f-e3f1219f0636", "comment": "Malware payload", "value": "ab2235c012a59df51e5553eb54f8ee496f9776c6de001e1770589a896acf6fe9", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674118, "uuid": "7b5f3c3d-2907-4dd4-a865-f3417054fec0", "comment": "Malware payload", "value": "d7bd02e0d07952270a097b226c904dc991f2b981", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674118, "uuid": "03401e2d-511f-403a-a6fd-cbee1cd4307b", "comment": "Malware payload", "value": "ddacf32ac1c744fa74d005d38010a4ceb1327eebf25ba1666d4ffa809c311d77fde3c7a16d0b09816338310a80fdaa28", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674118, "uuid": "bee48a25-63bb-401e-bac6-40dd8fe33977", "value": "F1F3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B496B1FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674118, "uuid": "f07e4139-1f68-4cdf-88c8-946aeeddd0aa", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674118, "uuid": "7652d85d-3ca1-46a0-9768-7b3641f678ee", "value": "3072:fA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:f3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618674118, "uuid": "7f6675fc-834e-48c7-bbb2-2578babe6e1d", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618674118, "uuid": "8696b9f9-b333-4af2-9665-e131d11e00a0", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674118, "uuid": "2fa1fc94-a7a7-47ac-855d-3d5f0e94887e", "value": "ab2235c012a59df51e5553eb54f8ee496f9776c6de001e1770589a896acf6fe9", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d5322c4-9f5c-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618650354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618650354, "uuid": "7f971642-6c11-4bb5-99ae-b2489be9fda2", "comment": "Malware payload (Dridex)", "value": "c0f4fcadbdaee5770e5a4b4032290d87", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618650354, "uuid": "ff8bfeff-9b81-41fc-a180-1056d7663037", "comment": "Malware payload (Dridex)", "value": "acb87990b3f535caaef9cb13792b85d1b886a672008ba2ae7edc32db3b2a4f59", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618650354, "uuid": "ebb716f4-b6dc-44e8-ac41-44a90604ec5d", "comment": "Malware payload (Dridex)", "value": "cb053def824644177d54633365afb29bdc298b32", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618650354, "uuid": "a6f6b08e-e2ae-4495-bd9a-4664723caaf8", "comment": "Malware payload (Dridex)", "value": "682d540ef0cdf911c84dbb1b79fb4acff5eb1ab083662a3ce0d8f0632f92358b4918f64b7b7e289ec94dbc3d82a32d9f", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618650354, "uuid": "37720fa2-1adb-4c1a-8ee5-c7be2de9c032", "value": "E5F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618650354, "uuid": "6835656f-893b-454a-ab17-ab847b3c17a2", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618650354, "uuid": "5eec3d3f-e7a3-4c1e-ad97-3d199e18c94b", "value": "3072:+mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:PLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618650354, "uuid": "d3cf0773-fb7a-482b-91d7-467f71c3a623", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618650354, "uuid": "7e22b5e2-f272-44b8-a778-34e82ac81454", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618650354, "uuid": "be68c075-f0b0-4c2f-98ce-4eba56ffe3ab", "value": "acb87990b3f535caaef9cb13792b85d1b886a672008ba2ae7edc32db3b2a4f59", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9c5c6c2-9f79-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618663152, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618663152, "uuid": "b7422365-6f3b-4c3e-a6cf-a2ffe762e560", "comment": "Malware payload", "value": "cb1b5b4f5d0d79baa5970f3fe7850eb0", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618663152, "uuid": "7a9c8bad-a63e-46a2-a783-b98926ac6b1f", "comment": "Malware payload", "value": "acc8202e89d6b58d8241dc9342230a718b0ea9d433ca3558a793a042fb85cdf3", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618663152, "uuid": "2d0e79b9-e864-4862-899c-d873ab935792", "comment": "Malware payload", "value": "aab023a4c241e1dde438c96178aba97a40985b62", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618663152, "uuid": "97690856-8360-46d2-b5df-a4591b009e6d", "comment": "Malware payload", "value": "b8fca0acbb886d89a3a81f9b4e91c58dca012774bd2a341b3344e7f46fcb3f7990387badf505fa5b4b2d0d34c64779b5", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618663152, "uuid": "1329ef72-4c8e-491a-a770-ac8db354f0ce", "value": "26F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618663152, "uuid": "4db028f7-1b51-49ae-bf95-82ed7147f89d", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618663152, "uuid": "a83bf09b-bacd-41d1-8ae8-e2e635da0840", "value": "3072:ulpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:ulo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618663152, "uuid": "7ed65f2c-1123-49cb-912b-46c2835f7065", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618663152, "uuid": "a933d18c-0674-4ece-bb6d-602f7296ed33", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618663152, "uuid": "3706559d-d4ac-475d-9751-73b0dfea011e", "value": "acc8202e89d6b58d8241dc9342230a718b0ea9d433ca3558a793a042fb85cdf3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "021c4c6f-9fc5-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618695405, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695405, "uuid": "ce7ab3db-7dc2-4ec0-bf0f-a661de607834", "comment": "Malware payload", "value": "a79d7a91ad3c8b383cacafbcfaa8fa14", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695405, "uuid": "e1331029-507a-43a2-a47b-0bbae6afa0e9", "comment": "Malware payload", "value": "ad1b479447cc527c7381db5f0a97da77c15c86c2dcf7252cea07c92530dc10f2", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695405, "uuid": "cdd52b74-1b85-4991-bb6f-d772953924ad", "comment": "Malware payload", "value": "d729d73a7b9c6b48eee080d941ddbc0fbcaf7913", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695405, "uuid": "916d9c94-26e1-4815-a281-d77c3755ba47", "comment": "Malware payload", "value": "bc39ee8947e94cea0f42face6a24a70c000e26392bbbc1624a25bb42826b4cd1fe989cc01dd9998a9e77323f0e55165d", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695405, "uuid": "fb908bda-1dbc-4dfd-8afa-e21eed8d16a9", "value": "EAF3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695405, "uuid": "645125ca-cc83-42eb-a131-98641076a8f2", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695405, "uuid": "c367ea45-4b0f-49f2-b9c0-e1cdf125ce24", "value": "3072:yiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:xeAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618695405, "uuid": "8a779009-46e3-492f-af4d-8b4dee2d48c3", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618695405, "uuid": "a59ccafa-6d17-4de8-9518-2c4273669e39", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695405, "uuid": "560cdb38-215f-4581-9fc0-8967eaab8579", "value": "ad1b479447cc527c7381db5f0a97da77c15c86c2dcf7252cea07c92530dc10f2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fcf86715-9fbf-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618693249, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618693249, "uuid": "2805cf83-918e-46f8-a572-976cb160a471", "comment": "Malware payload", "value": "8f5567b83d573904bdd41b3e9e2d1a22", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618693249, "uuid": "5fef985c-57e4-43f2-aca8-815ebb7e9a8b", "comment": "Malware payload", "value": "ade12d7594844e7e695ba9663174355109f1546d832ed6bcb30dae468a3ffd3a", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618693249, "uuid": "1c13d83f-380e-41e9-947a-4b247af730b3", "comment": "Malware payload", "value": "769c917d0baa78172a5fd446fbd3e7929076b4e0", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618693249, "uuid": "acaa4a66-1d13-497f-a40b-029333c59177", "comment": "Malware payload", "value": "55d2a639899fdb9c91580ee335c97214092b2470d6075085e08cf4dab67d30e0e7d596f75df7afbb11cc8f8e17d38a44", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618693249, "uuid": "009fce60-3f73-41ab-b64b-c306a6258629", "value": "F7F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618693249, "uuid": "4d285d89-28a0-4fef-a8a3-4dee112dceea", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618693249, "uuid": "d8128a16-d38c-4a1b-a21d-c8bc5c2b4c6c", "value": "3072:KmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:bLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618693249, "uuid": "830e1e80-8a54-4a12-8bf5-ff772023fae0", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618693249, "uuid": "488736f4-e4ff-4a65-9c29-a9278c6d0417", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618693249, "uuid": "b147fcb9-750c-4a4d-a039-4399a251b5c2", "value": "ade12d7594844e7e695ba9663174355109f1546d832ed6bcb30dae468a3ffd3a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "905ffe1b-9fd5-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618702516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702516, "uuid": "3345b64b-ce23-43e8-9780-1730ae636a40", "comment": "Malware payload", "value": "ea856e4c3a74fd29ad401e8fada4c91e", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702516, "uuid": "e22bf4b5-fe5a-45c3-b0a6-f7ead1dff8aa", "comment": "Malware payload", "value": "adfbaac9bd7b881ad8be68db0290061b1ded964a7da0fd925af0bbe3de232ab5", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702516, "uuid": "7630e1b2-04fc-43ae-8432-f22a944512cb", "comment": "Malware payload", "value": "a54eef0f749dd2845d7f254e0e7e38c52c0b4979", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702516, "uuid": "c08fed23-dd5b-49d8-a159-00b5a90f75a6", "comment": "Malware payload", "value": "428d0cf80c81b1c64f9d3b98e1e3f06919f6476e323db52c57271aebc498a3e822c16dc7910fc684cad60ecb6ae9dcd0", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702516, "uuid": "e28df83c-9adf-4101-999b-ca510ad0eb79", "value": "C6F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702516, "uuid": "ddb080a2-618d-410c-bbc1-02aefe9e96c5", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702516, "uuid": "31543ee7-4f9d-4e01-a85e-c986a741bd6a", "value": "3072:3lpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:3lo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618702516, "uuid": "51683d5d-0457-41ad-b89b-4488ab21140d", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618702516, "uuid": "01384706-8a27-4a50-8f3c-1497905b429b", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702516, "uuid": "8a4378d3-fb19-4b72-bdfa-119592a2da8c", "value": "adfbaac9bd7b881ad8be68db0290061b1ded964a7da0fd925af0bbe3de232ab5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18f6d3ce-9f1c-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618622859, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622859, "uuid": "77012587-3efd-40ff-acf6-73cd44454375", "comment": "Malware payload (Dridex)", "value": "86fd7bb01ed52be20d944f36ec0de420", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622859, "uuid": "4c67371a-6dca-4751-b62a-0638adf8ce4b", "comment": "Malware payload (Dridex)", "value": "ae0c13dbaaf1935e4728c02de220180f812a14da03b2f3dfa48a936654f352a1", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622859, "uuid": "0f9476d8-32cc-4d73-8c50-fb25b2704dbe", "comment": "Malware payload (Dridex)", "value": "699eb99929e2ecc7f38ac802f35578ac27880d09", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622859, "uuid": "ebf15eeb-326b-48fc-a0ac-35aba6f4c3d1", "comment": "Malware payload (Dridex)", "value": "06f01c0663f6abf10215187989597c49f495bb3c7c844623586e9a445f58861d4d89c73bde6dafd088ae77f232ebcb06", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622859, "uuid": "44bb0c99-e581-4ef2-aff4-0dc6d436d93d", "value": "00F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622859, "uuid": "ddb3d430-ec3c-4b27-851e-72f41e0c7f87", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622859, "uuid": "151ab0ff-a271-4689-94b2-f779eeb1ec3a", "value": "3072:pmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:4Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618622859, "uuid": "fc0d87f3-8afc-4eb7-b9e1-8304663c9311", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618622859, "uuid": "62ee83ca-5158-42e5-80db-46d7645389c7", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622859, "uuid": "3bf628f8-4d31-484e-b20a-bae655341141", "value": "ae0c13dbaaf1935e4728c02de220180f812a14da03b2f3dfa48a936654f352a1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb86cd5b-9f2e-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618630862, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630862, "uuid": "ec243a2b-6de4-4755-aca2-ee630f288de6", "comment": "Malware payload (Dridex)", "value": "40c6b8898ce03d82ff11457f8a49b541", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630862, "uuid": "0a0f955e-f91e-47d6-bc14-3eedfd379d02", "comment": "Malware payload (Dridex)", "value": "ae2bca8e001c5a3c4465d7920b8c1138ffc8d619e031ae360d968aea700b6a5a", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630862, "uuid": "0660a071-ed3d-4ae5-aa3b-1e456d677eaa", "comment": "Malware payload (Dridex)", "value": "8de0bc1c182a8f30191f6c3998306fb764dcad24", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630862, "uuid": "b5f17735-1ad5-4165-acbb-635780288400", "comment": "Malware payload (Dridex)", "value": "6dcd21242c5d015666e96a3e7afc1beec266d010d2665930b016e99359574aaa585d8115898de7f22b19e5ed4b1f27b5", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630862, "uuid": "a3e6c651-545f-4c84-8e3c-f7fbe8ce8a2c", "value": "AAF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630862, "uuid": "ae72a20a-56fb-4781-98ee-0a0d3e2d4768", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630862, "uuid": "5d8cb57c-960c-4fd6-a6ea-e3920f063958", "value": "3072:FmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ELc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618630862, "uuid": "bf9d0f8e-948d-45aa-ba9e-588860157ed8", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618630862, "uuid": "aedad2ad-1c32-46c2-8819-b3df102eab42", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630862, "uuid": "1187ca0d-8a33-406f-9776-3a66ab8fa195", "value": "ae2bca8e001c5a3c4465d7920b8c1138ffc8d619e031ae360d968aea700b6a5a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c988256-9f89-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618669868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669868, "uuid": "acd95ac1-9e46-4f88-8ba2-6fcb1df89d33", "comment": "Malware payload", "value": "c52a8c86162e1b902637bcc9f1be73ad", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669868, "uuid": "41743b59-8f81-4915-8187-5f865fcb6fc6", "comment": "Malware payload", "value": "ae2ff19a29a4871bcb8854cda71a3051428e50c087ece9affe7a962eb09d78d2", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669868, "uuid": "3a4736bc-3786-4898-9929-6d79cf6f6eeb", "comment": "Malware payload", "value": "84ead66ce6109cfbba598ad44b986b515e9f8d29", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669868, "uuid": "93fb681b-42fe-4248-bd38-992c0737e02a", "comment": "Malware payload", "value": "20a31ce560bc7225aeaa749122e3831b31481bb4dd79997eae63d2d1f41ec38f1fac0113cc5cfd31904e74585207e421", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669868, "uuid": "aafbe8a9-fb67-4ab8-bd49-37fa77a7de0d", "value": "B1F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669868, "uuid": "0b61be3a-4137-473a-9a31-c26f452a14af", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669868, "uuid": "e5652047-396c-4f73-83ad-fd62863da603", "value": "3072:qmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:7Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618669868, "uuid": "b2241e42-54fb-4fc8-9396-5c80ac6b50e8", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618669868, "uuid": "6697da12-5e6e-4295-8a63-cc195d645f4e", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669868, "uuid": "b0bfa6ad-3a75-4ca3-b915-9601578b6eff", "value": "ae2ff19a29a4871bcb8854cda71a3051428e50c087ece9affe7a962eb09d78d2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f559201-9f12-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618618655, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618655, "uuid": "3bda7db0-32af-48f0-ba81-26cb746f040d", "comment": "Malware payload (Dridex)", "value": "397c8d5a58ee133b6560b8a632bc6cdd", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618655, "uuid": "383467af-30c9-4a62-a3bb-f483ca0020a2", "comment": "Malware payload (Dridex)", "value": "ae35309531dcdac57e29e273adbd8c7307321d0e22f38c5523d07708ad312d4e", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618655, "uuid": "d1f43117-e54a-43b4-ba5b-cc8cbb7fadd9", "comment": "Malware payload (Dridex)", "value": "e67eb29f16ea304f3e3c0ae5d599f5d3694c1ea4", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618655, "uuid": "6a4d1460-b98f-48c6-bf65-bd61ce5833d8", "comment": "Malware payload (Dridex)", "value": "2a80210f04f8994ce211520965e0338157749468d944c34499ac358a91b6c16e31ac23f47e45da19892aa4cbe6ee3cf3", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618655, "uuid": "9ea304e0-2603-4cf0-bf60-345ecd281dc0", "value": "D9F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618655, "uuid": "85cdf799-f138-4a79-8c5b-6caa65550ea7", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618655, "uuid": "30731ab8-8c24-4ae5-9e8f-432d453cb525", "value": "3072:3mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:WLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618618655, "uuid": "e73000d5-cca2-4e1b-8a75-b927cb4aa464", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618618655, "uuid": "369aa561-7880-4b7b-a65d-8cc7b641ab85", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618655, "uuid": "cef8cf8c-0dc5-4f91-a5a8-57d35ae5d046", "value": "ae35309531dcdac57e29e273adbd8c7307321d0e22f38c5523d07708ad312d4e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e7eb1899-9f5d-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618651123, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618651123, "uuid": "a9dbb6c0-0e91-4b08-91a1-80e1e33061f8", "comment": "Malware payload (Dridex)", "value": "6eee01ec90bfba029fa4f9f4e5f0cdfb", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618651123, "uuid": "e2274bd1-2437-4d8c-92ca-30de930cbef9", "comment": "Malware payload (Dridex)", "value": "ae85267e2509acecb2c60cc3c525f86f84a6ad253bfadb906e3994f33191de29", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618651123, "uuid": "2446eb7f-7d41-46c1-8140-ba42e7da7a94", "comment": "Malware payload (Dridex)", "value": "230aa339816b834a489a302d4c0276efdb5635be", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618651123, "uuid": "f77edf67-3142-48e8-aac1-e3b76e21aa25", "comment": "Malware payload (Dridex)", "value": "92a30e424c5bd26af6666bbef91adc286a3256dab6ad7e556651232a7ed392cbab8b939327f3f632fb31aac3839399a8", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618651123, "uuid": "ef5a2d2f-fcd9-4fdf-802b-1afc05d3c3d1", "value": "11F3D088CBB3E4E6EFB3D37866F85E1B561174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618651123, "uuid": "f258ff6c-3bb5-4ec4-b87f-bd39dd66ef3a", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618651123, "uuid": "e2259808-4079-4fef-8e93-b67600cf8ce5", "value": "3072:NmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:sLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618651123, "uuid": "aa7af1ac-7806-4d60-8b58-91b2a0eb2fc6", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618651123, "uuid": "aa05f604-5411-4c00-8235-a75989fd514b", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618651123, "uuid": "b44bfcdb-b03b-4eea-9604-7edece372c13", "value": "ae85267e2509acecb2c60cc3c525f86f84a6ad253bfadb906e3994f33191de29", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d7f817d-9f9f-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618679238, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618679238, "uuid": "d44e09e1-76b1-44f4-ae46-198d8beb66d8", "comment": "Malware payload", "value": "e24d42edc1d6ba6a7d1d5b27722ae0b7", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618679238, "uuid": "8137b3bb-16a8-44c1-b656-3db8f794eed7", "comment": "Malware payload", "value": "af433e0d2219d79121a265ab20c808a1dc05b0bc29e4e3bed391fbd8f6ac01c2", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618679238, "uuid": "2b97bcfd-5b08-42fa-b299-e6238f76d7f3", "comment": "Malware payload", "value": "9b6582fdb3e8982ade83e0dd3d87b4ca33e0cc23", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618679238, "uuid": "5c0df7dc-82d4-44c5-94d1-2d754afab859", "comment": "Malware payload", "value": "679e4a431ff3751d5f5517f5dc4cc821b730ebe435e2b9b56a2f8455d6586a419473431f354a70852d116d6b0b6e5c7f", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618679238, "uuid": "a6cbab83-debe-4446-bf45-6b676eee1494", "value": "C8F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618679238, "uuid": "66272e57-1005-4944-b9c8-1d6cfba1c3ee", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618679238, "uuid": "a388e7a6-a0f6-4f6a-b52c-45a9b3ec02e0", "value": "3072:Vlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Vlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618679238, "uuid": "b8923a48-bfa0-498d-bb3d-b17f7022308f", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618679238, "uuid": "9927cd1a-c216-4473-9f18-6ed03bad7ca6", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618679238, "uuid": "5905d993-badf-4a48-9739-2906a5c6c53c", "value": "af433e0d2219d79121a265ab20c808a1dc05b0bc29e4e3bed391fbd8f6ac01c2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5167ea7-9f3d-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618637375, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637375, "uuid": "73369ad1-6170-4785-bb2d-0e94f411bfb4", "comment": "Malware payload (Dridex)", "value": "6abec7ea99256e575f85674372e5bcd8", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637375, "uuid": "e37d64fd-4e65-4019-9ee4-59509c5c6827", "comment": "Malware payload (Dridex)", "value": "afe158508802d1709de9ed51b3ec474eec238db1d36a951b095cb90f3542e726", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637375, "uuid": "2cabd43b-e7ff-43e0-aa88-91a8c8448789", "comment": "Malware payload (Dridex)", "value": "de137b7a9f45a1d4ded94579586353dd69e29c6e", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637375, "uuid": "6b3e2bd3-4b67-4062-9947-8f9cdacc3baf", "comment": "Malware payload (Dridex)", "value": "4d9bf028c8552eae0840dd28aefad4343fd26866ecc9dc249d3efd356731699af9ff6229be083431fa6888e7ec244200", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637375, "uuid": "6286f4a2-ed35-45f8-94cb-ca327ba931d6", "value": "0DF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637375, "uuid": "26fce553-bc3c-4b13-9f4e-e0a60bd76175", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637375, "uuid": "af97a5f8-5693-4272-93c7-6454fbf71f5a", "value": "3072:7mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:qLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618637375, "uuid": "a160684c-ca1d-4e26-be7a-8107c7f6ea78", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618637375, "uuid": "c0a3d10d-d198-492e-b479-601cfbc7dd46", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637375, "uuid": "f15c4448-4003-468a-9c9a-00faa5232b8b", "value": "afe158508802d1709de9ed51b3ec474eec238db1d36a951b095cb90f3542e726", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4bfcc9f4-9f7d-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618664605, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618664605, "uuid": "db5587d4-8487-4dcc-a67e-adb1be29caba", "comment": "Malware payload", "value": "fe6e1d53f2de518479e42102bdedc604", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618664605, "uuid": "52ec3caa-f175-4d49-aaee-9c6c14589509", "comment": "Malware payload", "value": "b017c55a9718f773fe386ecc0d4406c871500a75052ea6e5d5cc303a933a46fc", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618664605, "uuid": "186a012f-4b13-4cf3-9166-6d51fd5dfd56", "comment": "Malware payload", "value": "9b3ffbbd2a1ede03db51e49cf1f264d897b361dd", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618664605, "uuid": "a0f40e18-55e9-4a0f-8f5b-6e5b8df6b621", "comment": "Malware payload", "value": "a3485a1ba1058c422e09f836bcd4e4ed2e7bc045831a71d484650694fbca4fc09313b77d8d41a87bb1402b95f6032cc0", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618664605, "uuid": "3b6821a0-d163-4a1d-9e30-6b1956107122", "value": "92F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618664605, "uuid": "4eaff50d-6586-4853-aa42-890a786cee0e", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618664605, "uuid": "9ab98e21-7134-4fce-b54e-1491434f4170", "value": "3072:6mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:rLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618664605, "uuid": "5e5e06dc-1227-4733-9ff0-2b46b22e8780", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618664605, "uuid": "9c80e832-8ac4-4b11-a77c-deafdc12543f", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618664605, "uuid": "cf64cf15-c05c-4ac8-8d9c-50d6772e535c", "value": "b017c55a9718f773fe386ecc0d4406c871500a75052ea6e5d5cc303a933a46fc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab21eccc-9f50-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618645438, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618645438, "uuid": "f6a0c403-ead2-48f8-87c1-c8e6fb5c844b", "comment": "Malware payload (Dridex)", "value": "821b875ee430418200f9ceccc369e110", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618645438, "uuid": "881299ec-caed-4711-8adb-542285dc75f5", "comment": "Malware payload (Dridex)", "value": "b03c304f804471965262cda906c1bc81ba629899fbc35260a8fc62785d8eb9d3", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618645438, "uuid": "dc03e5b6-341a-4244-8408-6c36bb10f376", "comment": "Malware payload (Dridex)", "value": "a1dab9692bae7bf3d4605959a0ea44ba92067c39", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618645438, "uuid": "6f189a55-c86b-4a40-ac62-25cb9e336f51", "comment": "Malware payload (Dridex)", "value": "9aaba337db95c8525920b8842f93c3f1a42db821c10ee0ebe18cf50e53b2ac42d2c07fac461de956650f5a4583674d0c", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618645438, "uuid": "2c96f7c5-7938-4c9b-82f2-8a777f14da62", "value": "DDF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618645438, "uuid": "7a5fd1b1-6108-48ea-a183-a13684a1113a", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618645438, "uuid": "085c9d3f-cf6e-44ed-9d59-c3287a0b17d2", "value": "3072:Rlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Rlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618645438, "uuid": "9d7d6d07-7702-4e57-a19c-18316e508660", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618645438, "uuid": "af110985-092b-42da-8821-c9174b6c7ff9", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618645438, "uuid": "d6a16544-90ba-4b03-bc6d-0752dd31b00d", "value": "b03c304f804471965262cda906c1bc81ba629899fbc35260a8fc62785d8eb9d3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe98fc08-9fce-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618699694, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618699694, "uuid": "cfa800a8-7c53-49db-a107-13b3ec11d848", "comment": "Malware payload", "value": "90685565ecd1fcfbb3da35316697267e", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618699694, "uuid": "86541561-0335-4e48-8f2d-0ae02d458e66", "comment": "Malware payload", "value": "b07f1b08d1f89bcb3c12e9922328d5d2a4ff5906a89942808f6d464d3294d1cd", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618699694, "uuid": "5065463f-c23e-4096-b846-eca6070bed31", "comment": "Malware payload", "value": "574db02db99da1e0e9c3f8cc55dc3564f43bf21d", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618699694, "uuid": "392d288d-db6e-4b5d-a3e8-26ccc2a21cfb", "comment": "Malware payload", "value": "0e16591449056d7e0210795aed9499114e2d5b76c3ff528bb95f74d22726c9b5c2d0d75f78ccfd842bb7803033110b62", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618699694, "uuid": "3083d34b-7a7f-4392-a0dd-5afaaea19cb7", "value": "24F3D088CBB3E4E6EFB3D37866F85E1B461174551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618699694, "uuid": "5a509ee3-6a7d-47a3-9ad3-10ed14df4b19", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618699694, "uuid": "bceced10-bab6-46d2-a225-f8192aa9b4c3", "value": "3072:kmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:tLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618699694, "uuid": "bdfd28a5-d7bb-46af-8b15-06b7508763df", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618699694, "uuid": "03df73ea-f92c-4b01-b995-e830027f5965", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618699694, "uuid": "4fd8c88b-82f0-47ac-a4e0-060a8666be03", "value": "b07f1b08d1f89bcb3c12e9922328d5d2a4ff5906a89942808f6d464d3294d1cd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89852d7e-9f34-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618633355, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633355, "uuid": "557e9d6a-96d9-4ea6-8658-1a0e33169f79", "comment": "Malware payload (Dridex)", "value": "a290189513352d7daecbe9ad44437589", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633355, "uuid": "f97f05d6-3e40-4fac-bb24-379d2f053097", "comment": "Malware payload (Dridex)", "value": "b1628a85e131cf82b4295c5c60940da6b09ec2b9c496fdf66c10a2f27967c544", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633355, "uuid": "c492c94c-0164-4680-a5ef-8c979b1c65d1", "comment": "Malware payload (Dridex)", "value": "626e7bbc699512184effa02105baad103ffb2e2c", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633355, "uuid": "8ce137f5-120d-4aee-a545-89750ff9d65a", "comment": "Malware payload (Dridex)", "value": "5bd2cb95cb4b6236e0b7e34c0a8ffcdef4851515ef7ad6c69624d3a959481e3a84505bb856fc16fc01b26565c9f74f2f", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633355, "uuid": "20ad2b4a-8bf7-4395-b253-0bec858685d1", "value": "C4F3D088CBB3E4E6EFB3D37866F85E1B461574551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633355, "uuid": "740ae8ee-7fa7-4e16-b013-2b396db9599d", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633355, "uuid": "b95a3a7d-81e9-447d-968d-a922e1acc05b", "value": "3072:8mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:lLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618633355, "uuid": "e1b4c9ca-7260-402c-98f7-4f501cbb0fc4", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618633355, "uuid": "b1df2b2e-96eb-49ba-8315-a2537c057553", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633355, "uuid": "03c20812-5f17-4886-806a-5ae03ef34442", "value": "b1628a85e131cf82b4295c5c60940da6b09ec2b9c496fdf66c10a2f27967c544", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6bae913f-9f53-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618646620, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618646620, "uuid": "fdec99ce-e7d9-485d-914c-317e45c21276", "comment": "Malware payload (Dridex)", "value": "f8c0024c28e4dd4c1181740358528e98", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618646620, "uuid": "fd75ddc1-960c-42cf-946f-5eef909a0065", "comment": "Malware payload (Dridex)", "value": "b1eb8195c7977b20f298f085b6b46cc5e3c7d86b513c673dc02c960826e74a43", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618646620, "uuid": "d6eb5f66-0ea0-4677-b6ba-36bb392410eb", "comment": "Malware payload (Dridex)", "value": "ae003a9384133e01d05853cce39924ddb11fc547", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618646620, "uuid": "cd822136-1d14-48cd-9827-7413257521a3", "comment": "Malware payload (Dridex)", "value": "e43290c90f8b260ebf19941cfcbb55f0cb6e76ebabed79a33aaa4e4f1b75187f410d86655f6dc31b30d6155c68677990", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618646620, "uuid": "5a00e981-5ace-4b8b-83a9-4895abc42f72", "value": "2EF3D088CBB3E4E6EFB3D37866F85E1B461174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618646620, "uuid": "11fd58e1-8ba2-4ab0-bb6b-83a3bb8066d0", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618646620, "uuid": "c99ab08d-86fe-4d59-ad11-caba3b2a24ea", "value": "3072:BmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:wLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618646620, "uuid": "81a4b69d-2be3-422a-8b80-06c425cb4668", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618646620, "uuid": "b8df5a76-0a24-4c1d-aa66-0f3a954c1502", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618646620, "uuid": "b6d2a3e1-125e-4495-889b-0644b43994ed", "value": "b1eb8195c7977b20f298f085b6b46cc5e3c7d86b513c673dc02c960826e74a43", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c1f49e7-9f74-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618660848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618660848, "uuid": "adc6d67c-e018-4691-839d-78292e7887c1", "comment": "Malware payload (Dridex)", "value": "eb21c561074d1ea5b926af3d48ce6465", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618660848, "uuid": "743c6099-ad42-4939-9558-1ec57ae690a0", "comment": "Malware payload (Dridex)", "value": "b21c618cbca359a86cb65c854ef87231f8b55e631bd764d4fb13e57dc019c475", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618660848, "uuid": "09cd2465-e63b-47e2-ad24-98405a2d4458", "comment": "Malware payload (Dridex)", "value": "0c0aa58c3a8dbacd0b21e5ab30df417099c268e1", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618660848, "uuid": "93ac7cab-7bd1-4666-b32b-80d6d1925c0c", "comment": "Malware payload (Dridex)", "value": "deb2f01fa8639dd8c28c1009dc5d774417d3d37aa484a7274a50273bf93343d790f5adac9aa4b80dd6173c52f993daf8", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618660848, "uuid": "9a4a51ba-e40c-4c5c-8210-1d28980a7eea", "value": "AEF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618660848, "uuid": "6adc7593-9956-48cf-a7c1-f11368b4dc2e", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618660848, "uuid": "20ffed46-bbaa-4ab6-a0df-defac684d317", "value": "3072:UmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:9Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618660848, "uuid": "9c7bc42b-b369-4ee9-8304-62e04415a487", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618660848, "uuid": "cfbd6540-0f29-49a3-8713-e34f876dc390", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618660848, "uuid": "6c77b267-44f0-482c-ae47-f4929a68b117", "value": "b21c618cbca359a86cb65c854ef87231f8b55e631bd764d4fb13e57dc019c475", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "033388d4-9fbd-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618691971, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691971, "uuid": "6219148b-237c-4db8-9201-d4efbd589efa", "comment": "Malware payload", "value": "881b79a57e5ade394c573f4d7d3aaaf6", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691971, "uuid": "661c39e2-17bc-49db-8558-39e4fe2a9376", "comment": "Malware payload", "value": "b2ba4a30068597f916e23a0ba9e8aaec255a30fab143fc1018d8ad1101dad531", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691971, "uuid": "10eb019c-4418-4c6c-a8aa-8a9e070f4c78", "comment": "Malware payload", "value": "5a544e672309e4f49268265145277d47f9797fe6", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691971, "uuid": "ea4e314b-9d5c-4e29-a76c-3a809d80a67f", "comment": "Malware payload", "value": "15a776938205b32c538f8a79142683021450971f0e1214ac9cce51d1237dc67d137fdc202496ff92b6d88690038d3b66", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691971, "uuid": "647ff7c0-b1f0-4009-b862-38462a96ca3e", "value": "A2F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691971, "uuid": "63c2d1ca-6017-4930-87f0-1729d7cc30da", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691971, "uuid": "ccb32596-2f9f-47e4-b2ce-ca3a90ab3cde", "value": "3072:bmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:KLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618691971, "uuid": "3dea13a2-fd80-4280-b130-41f4c492f351", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618691971, "uuid": "6d2ad879-1cfa-48b6-ad79-0ded98f5297b", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691971, "uuid": "6d130a27-e21d-4c89-912e-0f79dae7adee", "value": "b2ba4a30068597f916e23a0ba9e8aaec255a30fab143fc1018d8ad1101dad531", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c31b589-9fb4-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618688309, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688309, "uuid": "8f831f7a-9710-49ec-9e99-74989c8f173d", "comment": "Malware payload", "value": "a752ffd7b3fb39797e1efe7c6b569835", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688309, "uuid": "3356018f-ab4b-44ee-96c4-c92d3dfa3743", "comment": "Malware payload", "value": "b3dd759fb97a2ae8461b720f5b411defa6cc5e439dc77538434d14ef3b7ea54c", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688309, "uuid": "cebd1334-1dbb-4e75-891e-3e7eb241ce48", "comment": "Malware payload", "value": "e511b9b97287ae85f596456324e3cbb2aec710e8", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688309, "uuid": "740ffe99-9d5b-4114-90d3-ce132896dc39", "comment": "Malware payload", "value": "113d87e9515220cdf4ff57eb22464248f257767ef74430745c3a863633a66e9a6b51f9c6b0335cfd926eae9ffb9ce10d", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688309, "uuid": "6faef3b1-e26a-4bd2-bc59-bfad597d64bc", "value": "38F3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B496B1FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688309, "uuid": "6c8e59a7-11aa-4fec-a89b-4cb1c0c5aec2", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688309, "uuid": "3170b75d-c4c7-4e3b-87e0-ca67195df990", "value": "3072:wA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:w3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618688309, "uuid": "314e1290-3e5c-4818-97ae-f491d44601f6", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618688309, "uuid": "d318d61c-02b4-4d0f-a794-72ae9655e7dd", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688309, "uuid": "15ecc03c-7dfc-4b25-8ca1-d7bca6644cb6", "value": "b3dd759fb97a2ae8461b720f5b411defa6cc5e439dc77538434d14ef3b7ea54c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf4edff0-9f31-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618632157, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618632157, "uuid": "9c6c5a9d-9fde-4e84-98fc-8ee626312777", "comment": "Malware payload (Dridex)", "value": "ce12b9d71f39d12491908367a3e1a197", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618632157, "uuid": "5bb192e5-2d04-4665-8659-2ad9de9c4299", "comment": "Malware payload (Dridex)", "value": "b45b3860ff33740cd887077c2e729200736ba428586eac6ebd6a7bf608b3e133", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618632157, "uuid": "cbfe5e93-0272-4bbe-acc0-5758763355ca", "comment": "Malware payload (Dridex)", "value": "b71336e640183d5879725d52b8aa25bdaff9def9", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618632157, "uuid": "a6babb5d-58a4-405b-b7d5-fa0639a9e017", "comment": "Malware payload (Dridex)", "value": "44d40eacfdfde4b6a9af54d654ff3ce7d140779b3dd63c6884fd26034eac122a53a26116004f297bc3e3ac458a8b1e67", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618632157, "uuid": "8cb44ba5-6a4d-434c-8a3a-4b680cb2aae8", "value": "EFF3D088CBB3E4E6EFB3D37866F85E1B461574551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618632157, "uuid": "9b432b39-8981-4a53-a555-589d72ccde1c", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618632157, "uuid": "99cce287-e1f3-4934-95ca-2598ed7bdc47", "value": "3072:GmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:XLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618632157, "uuid": "3f748573-8f31-4bb1-a365-15838d26b8f5", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618632157, "uuid": "d84737aa-a477-4eb7-8194-cb75a343f425", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618632157, "uuid": "90c13283-5979-4172-b41c-dda3cf7c2406", "value": "b45b3860ff33740cd887077c2e729200736ba428586eac6ebd6a7bf608b3e133", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8e37dd5-9f64-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618654024, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618654024, "uuid": "ec0f5758-be3d-4891-9c91-4fa3b248e3fd", "comment": "Malware payload (Dridex)", "value": "4bb42dfbe820741a2164d6bb162faea2", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618654024, "uuid": "28fbfee7-f6dd-4447-87c6-13dff7467bf6", "comment": "Malware payload (Dridex)", "value": "b52b64c2e03936b87604cb3b5232180ffd2beca6111d15d7cc0a0456904b57b3", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618654024, "uuid": "e8f85c6d-4a3f-47e4-8233-47197f6ed15a", "comment": "Malware payload (Dridex)", "value": "9af2c9cd8de0ce09ad1bd035ebc096610a3fb661", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618654024, "uuid": "e4eb20aa-0d38-47de-83d2-2f4c50041ada", "comment": "Malware payload (Dridex)", "value": "0a7cde90a248b195a7dfca0645c20d11fae01374c112e62ea2ec88a1b95d19a21a209fda6decf04cc52ef408e8af1560", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618654024, "uuid": "d4fe8df0-eeb9-4ca5-8ae4-ad8dfdc85c42", "value": "3CF3D088CBB3E4E6EFB3D37866F85E1B461174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618654024, "uuid": "1eb355e2-b746-4b1f-8917-263b58c26bbd", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618654024, "uuid": "1d98b50f-76a6-427d-8268-f411846cb5e5", "value": "3072:8mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:lLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618654024, "uuid": "1fd5b013-7ab2-4e89-899e-d67157b1ff18", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618654024, "uuid": "27c8f2b3-8b73-49bd-beab-89b809e4b221", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618654024, "uuid": "38e35a18-12eb-4e77-b6b6-67c8cd0d5f96", "value": "b52b64c2e03936b87604cb3b5232180ffd2beca6111d15d7cc0a0456904b57b3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9e6680d-9f5f-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618651905, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618651905, "uuid": "5ec6ff08-6665-4522-ae67-c7498e9e4d08", "comment": "Malware payload (Dridex)", "value": "971ad24d45dc7cb6c98ea1b241e4d8f0", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618651905, "uuid": "c27b330f-79fb-477f-acc8-37e1f2adc6c3", "comment": "Malware payload (Dridex)", "value": "b58f189a51bda202aea1d3cb5a6cf0e8411fe67f53867f330d2b213c790f8dc4", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618651905, "uuid": "d4570251-41a7-420a-8662-38039d6a316a", "comment": "Malware payload (Dridex)", "value": "c5859a758ad408257af78af84548afb1c7d30c71", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618651905, "uuid": "048853c6-81f2-419b-b8ae-23bee00f9896", "comment": "Malware payload (Dridex)", "value": "c5432b7d1815a195c5bae47aec51bfe174b612f38448e0eb73c4699844768a16bcec1e7195b366e836a0efd8e08b1b67", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618651905, "uuid": "565d9168-1066-40ef-8a1e-39f2edc0098b", "value": "E7F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618651905, "uuid": "b662f0f3-67ea-4800-a1ba-a93a5fe644f1", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618651905, "uuid": "2bf2a33c-8862-4889-b663-a3512e24d60f", "value": "3072:xlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:xlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618651905, "uuid": "45813d60-93e4-4771-b00d-69acad65a016", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618651905, "uuid": "cb1c14fc-f9b5-47ee-8f6f-3cfdb6ae82ed", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618651905, "uuid": "34c01e61-0bfa-43b8-9b04-badc1a90d4ed", "value": "b58f189a51bda202aea1d3cb5a6cf0e8411fe67f53867f330d2b213c790f8dc4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76d4cf82-9fa7-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618682716, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618682716, "uuid": "8f372df1-01e1-4f34-9242-8ed63552ec87", "comment": "Malware payload", "value": "2e7c85a1d7bada90a1db4db8c949e110", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618682716, "uuid": "08d6d000-b898-41f9-a46d-cca66cdc1b7d", "comment": "Malware payload", "value": "b5bfd1a3720ced8fa37838f2d62ad897399a1e30ca46a7e9325356b8f26bfb2f", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618682716, "uuid": "48624e45-3155-4242-8ddb-9d91a55f64af", "comment": "Malware payload", "value": "2b73f1e5bd035c9c5ccca251e2caf7dbc93be381", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618682716, "uuid": "2eeec236-b169-4a94-be84-86001a18fe28", "comment": "Malware payload", "value": "45d16caee0abde60661a644b372e00c823ce20045285cdde9eb4a51b7295a48117ff3b52b82384b6c7a6546132090e38", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618682716, "uuid": "dcd9c0e5-8cef-40bb-813a-43b686f9f809", "value": "BFF3D088CBB3E4E6EFB3D37866F85E1B461174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618682716, "uuid": "d2a4ffb2-3107-4def-93ca-0a115afa77f8", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618682716, "uuid": "d75cb7b0-a058-48c6-8520-ce8d250cbb9c", "value": "3072:XmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:2Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618682716, "uuid": "ad3d322e-7627-4384-8518-3705d4a72a46", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618682716, "uuid": "39ac97b0-31df-437a-86b1-4241ca788945", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618682716, "uuid": "c8b3d922-e48b-4933-ae50-b80d3a1de8b1", "value": "b5bfd1a3720ced8fa37838f2d62ad897399a1e30ca46a7e9325356b8f26bfb2f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa324472-9f33-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618632981, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618632981, "uuid": "cda2c2fe-3279-4168-a08f-1051e287f059", "comment": "Malware payload (Dridex)", "value": "dbf9cdbe1e3ef658845ab0839819ccf9", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618632981, "uuid": "eaa3adcc-5646-4484-bf78-feaebd6f191e", "comment": "Malware payload (Dridex)", "value": "b5e79cd3d4498d1ea1d688b72c4ecf8eb4493245faefc4bfb7449f4cfbccff61", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618632981, "uuid": "dad9d31b-e51b-41f0-981b-740e52314fac", "comment": "Malware payload (Dridex)", "value": "b25b391532303ec97ff31b1a34e6ea0dc6843aa1", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618632981, "uuid": "5e17a28e-2af3-43aa-9b42-52145d59dbb2", "comment": "Malware payload (Dridex)", "value": "ff01cb38ca3ba2f99bd139511318a0c5403164bc1b2cdb80e084c6f4d3ff886a8b70eb7aaaa832dec68539dfddd1f14b", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618632981, "uuid": "0fecf97d-9d37-441d-a5c4-deaea0615054", "value": "9BF3C088CBB3E4E6EFB3937966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618632981, "uuid": "3b9b0ab6-1b7c-43d4-9f11-eee1c2482b67", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618632981, "uuid": "3c779d27-7bb3-4e0a-b2c0-1fd6798322f9", "value": "3072:JmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:YLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618632981, "uuid": "56a711f5-e373-48b5-8e86-aa49c4658bac", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618632981, "uuid": "157c92e8-9095-41e2-ada1-6706109edcca", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618632981, "uuid": "aef18ab5-09b7-4186-bbce-b1bcb40fe811", "value": "b5e79cd3d4498d1ea1d688b72c4ecf8eb4493245faefc4bfb7449f4cfbccff61", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba50817b-9f89-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618669945, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669945, "uuid": "cdd43bcc-fd42-4c5f-8c0f-ca9474b43632", "comment": "Malware payload", "value": "f11096127bce2af1f04a5d5992ff636e", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669945, "uuid": "6b0aedfc-77e3-4b80-812c-5f18d4d124bb", "comment": "Malware payload", "value": "b65f6d9926b55ff93fc4a1bcb87f6fad04cec74de93e5c6caeb638cc6c591f79", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669945, "uuid": "d5df12f5-c6fe-4235-9e5a-3d8f3830157c", "comment": "Malware payload", "value": "f087fe139093ed58ce67a68f2d6dff84dddef6f9", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669945, "uuid": "51da9a02-274c-4d11-8593-d3be87e36364", "comment": "Malware payload", "value": "f883d7ce9a3cfeb6037a3978539f70bbb1bcf968041a4d45700f734dac716ac38dc4aba65922cfabecdfed1f2d296af5", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669945, "uuid": "d990c496-8374-4ab4-8a0d-8df0de821e47", "value": "09F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669945, "uuid": "e3abf30d-01f7-49c8-9566-2e81fdb39347", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669945, "uuid": "449d5435-c0b1-48c3-90a0-4d828e28f2a7", "value": "3072:TmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:iLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618669945, "uuid": "8781b198-751f-4f0f-bfbf-8b868a3fa3ec", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618669945, "uuid": "9a120f56-73e0-4e7b-a2e5-aafc27959ee8", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669945, "uuid": "75523f25-1e0e-4df9-b7e2-bf909b455afb", "value": "b65f6d9926b55ff93fc4a1bcb87f6fad04cec74de93e5c6caeb638cc6c591f79", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1cfc379-9f1e-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618623947, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618623947, "uuid": "b02ac6a2-2708-4c59-9b56-ce3045f59fa0", "comment": "Malware payload (Dridex)", "value": "a0e5e98a2cce8cdf7563ff1eedd3b15b", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618623947, "uuid": "4dd8c8dc-e383-4883-a733-0e189ad46444", "comment": "Malware payload (Dridex)", "value": "b6979daea10dccf5f560c726cf4ae57e9771917878bad51cc21a4934d1f720e5", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618623947, "uuid": "d6299e53-a7fc-4566-9c9b-779dc841309e", "comment": "Malware payload (Dridex)", "value": "29a9e62e53ab988b48298e9ffc3c51d4357b173c", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618623947, "uuid": "3b54c25d-907e-48a5-b95d-21c9f83f58fb", "comment": "Malware payload (Dridex)", "value": "db01c6b51b42b50c155a6453f29881567a8f92c767b5a331bc8067cbf817bda2f5cab73b2f7a56374102213bc62b6194", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618623947, "uuid": "91d0cead-286a-4b80-90f2-939ab50d0142", "value": "71F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618623947, "uuid": "5410f8f2-cba3-41cf-9b6d-89f8dd53f9ff", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618623947, "uuid": "b9f7ab9f-6865-4c96-b0ce-e62b6bed418c", "value": "3072:jmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:SLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618623947, "uuid": "c171e09c-5d73-4525-894b-9a75b6cb57d0", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618623947, "uuid": "ed719fd3-b3ec-4b8e-b169-e679f655d3ef", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618623947, "uuid": "a437e277-2a13-4ab4-b8f6-1eaa5001648c", "value": "b6979daea10dccf5f560c726cf4ae57e9771917878bad51cc21a4934d1f720e5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "55455609-9f62-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618653025, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618653025, "uuid": "c2cc48a2-c31d-4324-8d20-46b1b6cbecab", "comment": "Malware payload (Dridex)", "value": "dda6cf916658f5a5ab9a94c1a6d99f23", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618653025, "uuid": "cc500a0b-9842-4b80-b18f-05dcb81cead2", "comment": "Malware payload (Dridex)", "value": "b6eb90d7bb5134896f60262966ed7ec89ccc3810780aad9189a4344f73db159a", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618653025, "uuid": "7309913a-9459-4dd6-8bc4-2fff5312ef43", "comment": "Malware payload (Dridex)", "value": "54e06b1395aee7c9990d10d8c177171ea53f90c9", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618653025, "uuid": "5c1affc6-3bdf-4497-ab5d-54cee651ecf7", "comment": "Malware payload (Dridex)", "value": "f211e8ec176c49e127772d8b8087816b57d17d3786e5b456958ec8d04988e7dee6bf049257bfb0d2fad919627d6024d3", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618653025, "uuid": "33c3098c-c2d9-47f7-9342-1a15ca0573ee", "value": "D3F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618653025, "uuid": "722bff0e-0b16-456f-9c3c-c643869a0791", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618653025, "uuid": "f971ad37-54f3-4cac-bf42-4142b5bf3500", "value": "3072:vmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:uLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618653025, "uuid": "3f7c858a-688d-4065-a903-6a3a54267346", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618653025, "uuid": "3a6cd610-6b76-4217-8432-c503a1b5dcdc", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618653025, "uuid": "efd57b79-a2c0-46c1-8607-74aa37741001", "value": "b6eb90d7bb5134896f60262966ed7ec89ccc3810780aad9189a4344f73db159a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a0ebeb3-9f4f-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618644980, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644980, "uuid": "ce645b78-1fd4-4a29-a572-043ff125d564", "comment": "Malware payload (Dridex)", "value": "05dc773ff9401e8f5adde6323e656453", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644980, "uuid": "44294a4e-9f76-4a59-a8f0-476864257011", "comment": "Malware payload (Dridex)", "value": "b718246c321da2d67841205848c02660ad512ba84f84439755d4fc857fc9621f", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644980, "uuid": "710ca0d2-2b38-4ebc-83e4-e09b49dc19f3", "comment": "Malware payload (Dridex)", "value": "ea3f4c24c68464f35cc38ad64e82e2daa566547d", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644980, "uuid": "c4f9e4b7-c5f7-4143-8a5b-ce4c5adcdb97", "comment": "Malware payload (Dridex)", "value": "cdbdc541b92648383b1a5a0c2cabf4aec26a28415411a2ade7ed343f9e96a88b99063bc1aa64eac70e77c6be8d4c8fde", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644980, "uuid": "1f16f794-a52c-4658-9155-7fba6ec36703", "value": "95F3C088CBB3E4E6EFB3D37966F85E1B4A1574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644980, "uuid": "c3878135-dd34-45fe-9d62-b26b32a5a31c", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644980, "uuid": "673c293d-ae6e-44c1-ad4d-f420b8213e06", "value": "3072:wmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ZLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618644980, "uuid": "e4543cd1-cc69-400f-8a40-fdfeb298a68d", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618644980, "uuid": "3dbb0975-99b1-4235-b84b-100b23d51a03", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644980, "uuid": "58638f57-f822-45c6-b897-f74e6492b0b9", "value": "b718246c321da2d67841205848c02660ad512ba84f84439755d4fc857fc9621f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42f3d929-9f83-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618667167, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618667167, "uuid": "40bc287e-a05f-4e16-9e4f-7449d5232875", "comment": "Malware payload", "value": "fd88478c8e899cb1e4839749d630bb89", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618667167, "uuid": "59bd6def-7138-4d0e-a6b7-91aee4dc3da7", "comment": "Malware payload", "value": "b889e248e0c6136e11b0c0959da0951ce53cb93af0c0887803acc75c2c2e8757", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618667167, "uuid": "14d96bc2-9dd0-41df-bc53-fa8fe45c27ba", "comment": "Malware payload", "value": "2af725327753633eebfc6d47e499459ebd1a9ac4", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618667167, "uuid": "b6034978-6452-4a6a-838b-782cb000729c", "comment": "Malware payload", "value": "6bb856a65ff1e1eddee76412457444734e01316880bbbe7855b09e56f5095c5c431c5ff1fb4d90d991f6d29033256560", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618667167, "uuid": "b97c8f4d-f20d-4bc7-af34-5d68d584467f", "value": "2EF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618667167, "uuid": "b48c76da-9ae0-49d4-8118-6abc082c979d", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618667167, "uuid": "97f85eb9-e2b7-4fa0-b9bb-ffb558bf44a5", "value": "3072:pmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:4Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618667167, "uuid": "d7c7dc96-18f3-460f-bce1-7d37c2851a24", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618667167, "uuid": "f2769331-170d-4951-813a-68f03975a0f2", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618667167, "uuid": "06fe6b49-d601-4383-86a2-98d7c1bfb1f3", "value": "b889e248e0c6136e11b0c0959da0951ce53cb93af0c0887803acc75c2c2e8757", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "734e5f05-9f73-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618660376, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618660376, "uuid": "d860ee95-9138-426a-a715-2bc1413f98c7", "comment": "Malware payload (Dridex)", "value": "9de0f024a952bd7b64bbdd575a491ae0", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618660376, "uuid": "2c789bdc-7375-433e-8644-2a626952a195", "comment": "Malware payload (Dridex)", "value": "b898079aa29fe4350ad726edc44b48263e70b1dea4211efebef3bf7dc60b5766", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618660376, "uuid": "b5ad891f-eac8-42ed-94c6-9d3a4452ccdd", "comment": "Malware payload (Dridex)", "value": "5dd8c157a87ccd7e770928bb3d808ccaa8051782", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618660376, "uuid": "7b1d74e8-f471-4406-abf9-7fade8dca706", "comment": "Malware payload (Dridex)", "value": "5ce07e398ca26be8c5d4070a578792d6f37b4a8fef93ce8f3cad9535859d5d4827abc17227d705dfa0f6b44a07c8ddd5", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618660376, "uuid": "c15a8b74-eaf0-42f5-b1b9-0c9288e18688", "value": "78F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618660376, "uuid": "9a25fda6-be21-4c39-a24e-c17d6623ae20", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618660376, "uuid": "5380b26b-ee57-449d-9326-9964726a0d68", "value": "3072:Wlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Wlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618660376, "uuid": "d5325094-3761-434b-b321-8866f7d6bfb2", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618660376, "uuid": "e0e5c4fc-849b-49d3-937e-2a7b741430f2", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618660376, "uuid": "a5da716e-b9c8-4d67-b246-2f4120e6328c", "value": "b898079aa29fe4350ad726edc44b48263e70b1dea4211efebef3bf7dc60b5766", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ddb7622e-9f12-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618618894, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618894, "uuid": "b102abe9-403a-4a08-81c4-efceca741a61", "comment": "Malware payload (Dridex)", "value": "ce78eedbd3dd97f092a8e119c37a1afe", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618894, "uuid": "41cfe34d-97da-4a3a-a429-2029161f7671", "comment": "Malware payload (Dridex)", "value": "b9154fa3e9bd3da3a12d51f799ef9e170860555481efd08502cb56e38456a658", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618894, "uuid": "273873ac-a76d-4048-bb93-05c16549f84a", "comment": "Malware payload (Dridex)", "value": "d7afdba68b2149b86ae4ffad617cdecd9b076cc3", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618894, "uuid": "7047ec4a-4303-4f72-9805-6fc0eb825990", "comment": "Malware payload (Dridex)", "value": "90736d1a140dfd73b13a33b44620cb6aa24f4630e0698cf2d48d59bd3455030833b0e8089f7b1393ac2084e80e9fd3c7", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618894, "uuid": "6e0ed4bc-c76d-482d-93db-1fdafb2f76f1", "value": "38F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618894, "uuid": "cd1872c7-990a-4265-a1d5-4535b64092f3", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618894, "uuid": "6dbd2423-f812-4cc1-b298-f4594b6ef9f5", "value": "3072:jmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:SLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618618894, "uuid": "a9c7f1a7-a089-4cbe-976c-f947b85e3b16", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618618894, "uuid": "26ad9b2e-508e-4139-918c-a1b681fb9e4b", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618894, "uuid": "63973693-8b0b-4053-bbcb-dacf18061930", "value": "b9154fa3e9bd3da3a12d51f799ef9e170860555481efd08502cb56e38456a658", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e46dabe-9f25-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618626733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626733, "uuid": "0b8cc21a-ee94-41f0-8c5b-e90bffdca1df", "comment": "Malware payload (Dridex)", "value": "dbb5b0bc381238d0cbbaa0a1069b46c1", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626733, "uuid": "e1ca8b7b-a038-4df4-ab3f-70eadffbe82c", "comment": "Malware payload (Dridex)", "value": "b92df4fe3565612d9bc56b01ef582d3073a6e5f13be5013f8a809532bb59eef9", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626733, "uuid": "8e25201a-ace3-4830-a069-293e7ef8d5bb", "comment": "Malware payload (Dridex)", "value": "41a107f3f31b22c601bff4179bc68ff1f9d318a4", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626733, "uuid": "9e5f4c40-8045-4e78-b293-5f12851e2186", "comment": "Malware payload (Dridex)", "value": "e5977cc9205cee9c79bb7dd700367f1b6785da9026ea441bc63606eb4bae4212efaae60a58914f882ae2ea7d5ce9edda", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626733, "uuid": "d77912d2-5961-4aaf-805f-16f6aedc32be", "value": "3EF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626733, "uuid": "d2daa33e-bda9-4ff9-8e72-4d014366f16c", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626733, "uuid": "651e8151-aff3-45d7-82c5-410f4bcc7a06", "value": "3072:mmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:3Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618626733, "uuid": "556ae0b9-2411-4d50-b955-ac92690931c6", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618626733, "uuid": "d9aaee43-125b-4d72-ba89-24ea784467f2", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626733, "uuid": "b8d77ade-7427-46c0-92cd-bc3b85bf880e", "value": "b92df4fe3565612d9bc56b01ef582d3073a6e5f13be5013f8a809532bb59eef9", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "49df38f2-9f2f-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618631101, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618631101, "uuid": "61227750-127d-4915-bdd3-91b45ec34f54", "comment": "Malware payload (Dridex)", "value": "eaf336d52d239917d00d2c1c1b657bd5", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618631101, "uuid": "570db025-89b6-4ff5-b410-9a03f1949661", "comment": "Malware payload (Dridex)", "value": "b934d2b531546171bdc0673def49fac472500f890382df36d74d1114aa6ff314", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618631101, "uuid": "9fe6dbc4-b729-4a33-bd71-113770a94953", "comment": "Malware payload (Dridex)", "value": "0baa4372d886ae0bea7226027ee7c6312cbfa254", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618631101, "uuid": "114e435e-3b18-4c39-8b87-b73ff9e5696e", "comment": "Malware payload (Dridex)", "value": "b6a940feb3bb46f57627fea9d780fdbd232b2ef26a2208eee44c94b97808faba4740d5f68ea60fd8f316825dfd854b89", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618631101, "uuid": "3ccea3b3-d27c-4064-9276-1ada6356f4bf", "value": "94F3D088CBB3E4E6EFB3D37866F85E1B461174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618631101, "uuid": "463a2382-d133-401d-9a17-691d0e6eaba0", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618631101, "uuid": "bc6cf69d-71c2-4f91-a128-6ca324418775", "value": "3072:tmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:MLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618631101, "uuid": "e094dfe5-b866-499a-96e6-152f7e4fe662", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618631101, "uuid": "393a395d-37fe-4960-b6ac-71b53de91b49", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618631101, "uuid": "dedcd61c-61b3-4fa7-842d-77078bc8fd75", "value": "b934d2b531546171bdc0673def49fac472500f890382df36d74d1114aa6ff314", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e301eba1-9f20-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618624916, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618624916, "uuid": "aabf434f-8c78-4479-ad61-d6774ca12a5c", "comment": "Malware payload (Dridex)", "value": "12ab65d8c2d6371245fd7fb15e9a5243", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618624916, "uuid": "a31191ee-d1d7-49a6-82bf-5f5688f77100", "comment": "Malware payload (Dridex)", "value": "b9c73c5f129ca45a1afef51d26512247d3d3abad3585cd80fbe85ef2071f7ea8", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618624916, "uuid": "da1498e1-5c5b-4a02-b10a-7156c9111008", "comment": "Malware payload (Dridex)", "value": "31c532af3837bc856861ff09c8f0fa803288f314", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618624916, "uuid": "0eafc1b3-8e89-4b19-8846-b5a4e7848a48", "comment": "Malware payload (Dridex)", "value": "d4afc035784bcc60bbbb7fe21dd564a750441d8d4c07758f0954314b59bffd833a49e0b0c07aaef77538a36bc3aa3ec1", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618624916, "uuid": "9ee9d13d-a16e-4e36-9da0-be87928bd317", "value": "C7F3D088CBB3E4E6EFB3D37866F85E1B461174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618624916, "uuid": "0da9923e-b371-43cf-9012-7ba2c0a201e7", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618624916, "uuid": "3cf80f6b-25df-44ac-bf04-fa8b4356fbcb", "value": "3072:DmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:yLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618624916, "uuid": "8ffab569-ae39-4b33-b423-d82bf98fafcb", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618624916, "uuid": "fba69ef1-eeb7-4acc-91f5-6f2d7bbe0f37", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618624916, "uuid": "196e22e8-1340-430a-8acc-cbd181f9178e", "value": "b9c73c5f129ca45a1afef51d26512247d3d3abad3585cd80fbe85ef2071f7ea8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13ec3519-9fb3-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618687704, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687704, "uuid": "f285638d-fd2a-4893-8a3e-b9aa8285542c", "comment": "Malware payload", "value": "7efca0b77499293d2acc79844bb866aa", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687704, "uuid": "209929a4-8d07-4bfd-b722-beaa3ce82799", "comment": "Malware payload", "value": "ba12dea4a4b7978b2a3e5299799fee36eb81d3ea7c7ccaf80edf9272fe10ff1f", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687704, "uuid": "3a42a9f5-b2c3-4ba7-96cd-f1733287c91a", "comment": "Malware payload", "value": "969114349fb83b2049845885237bff9869982f7f", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687704, "uuid": "8732f570-88fa-481b-8d77-ee47ea12d0b1", "comment": "Malware payload", "value": "8c3ec981d6cbfdf5cb20570929b0e642c55ff1cc6a58d83a36655b96872638fa98824e0550e4ae40123ae2b9284ffe4b", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687704, "uuid": "30ce8bbd-4ccb-4c50-8228-3ea6bd8ed4e1", "value": "DDF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687704, "uuid": "9c3dc1a5-249f-4400-b503-700864dcfe15", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687704, "uuid": "81b92373-e7bc-4e07-ad79-841494960675", "value": "3072:fmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:+Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618687704, "uuid": "f5a654c7-d782-4525-8637-d33e0c3125b5", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618687704, "uuid": "b5423092-c523-47c5-9f21-fb1b45237eea", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687704, "uuid": "d6aa29f0-3166-4781-9c0b-45ea53d50df0", "value": "ba12dea4a4b7978b2a3e5299799fee36eb81d3ea7c7ccaf80edf9272fe10ff1f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc390d97-9f2a-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618629172, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629172, "uuid": "2f6f8fd4-a742-489a-b874-3bbdb17f45cb", "comment": "Malware payload (Dridex)", "value": "47b1731a92de7f68375aa1d5989e231a", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629172, "uuid": "824bdb39-5af9-4658-8f35-61cf4dd62985", "comment": "Malware payload (Dridex)", "value": "bb4b1cf46a2db62ce117b03a73c8d5304f4c5a067c86d2f6631f923bb3dda4a8", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629172, "uuid": "ecf52b9a-1425-4dca-8652-6f3203fe5bff", "comment": "Malware payload (Dridex)", "value": "2ad4404e3db1ca5c4ba4e73829c46645f2e26be5", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629172, "uuid": "c89dd7e6-de87-4dda-814f-cd32ac6cfe2b", "comment": "Malware payload (Dridex)", "value": "6ca6b500f376d05934d7bd114c6d791f95c674ef74e69c4ab2eb3c752150e63941eb22864ac3adcad44039dfd626ba0c", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629172, "uuid": "661ab42b-a7cc-4a16-9b6f-6930c066bff2", "value": "1BF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629172, "uuid": "b7392824-86ec-462d-8b0a-0729205d1303", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629172, "uuid": "bb954cb5-1422-4d3a-95db-b159ea1beb04", "value": "3072:ZmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ILc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618629172, "uuid": "64124cd0-90a0-4ef2-8ebe-82ed3259babd", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618629172, "uuid": "6e217b14-d579-40b1-8b62-6cf0d7fd8961", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629172, "uuid": "68318d91-d850-4bba-843a-959d2fc726a0", "value": "bb4b1cf46a2db62ce117b03a73c8d5304f4c5a067c86d2f6631f923bb3dda4a8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c50f3632-9fb5-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618688860, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688860, "uuid": "d211eec0-3e19-4ba8-90d5-60e1a6935c2a", "comment": "Malware payload", "value": "cc02ff49d266276a1763d2118f65640d", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688860, "uuid": "66a33d69-ba3a-4b1b-8647-59ed1bcf4cab", "comment": "Malware payload", "value": "bb7eb1f1dd10e4acdb06e1ad77959591a331c0a49d03bcd24abdcf02638ec46c", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688860, "uuid": "f9b46f2b-9ace-46d7-b6a1-4d0f95d8868d", "comment": "Malware payload", "value": "4e236d3907a2516c5c65e1a1f286bf80f60d6765", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688860, "uuid": "4d875098-08f6-42ca-837b-bc2548eb9fcb", "comment": "Malware payload", "value": "755e2debb76abf4ed61f7db449865a85a3b88fdf6b17e5d4e506dc1646bcd2cafb7d3670119be4b37e5779954a721a09", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688860, "uuid": "ac84c796-d390-490a-83c9-68172f804960", "value": "63F3D088CBB3E4E6EFB3D37866F85E1B461174551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688860, "uuid": "37c351d9-3553-4697-86f0-c168b7601801", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688860, "uuid": "87f0ef74-58fc-4e69-917a-d2e5f5a9d93d", "value": "3072:tmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:MLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618688860, "uuid": "41edfd71-9140-4f11-8c21-507d9e9a3670", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618688860, "uuid": "30a5fd09-29d6-49d2-8b08-60fd788feea8", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688860, "uuid": "fbfd8f2e-f9b4-4b30-8f4e-51a1a52b5bf3", "value": "bb7eb1f1dd10e4acdb06e1ad77959591a331c0a49d03bcd24abdcf02638ec46c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74341f6b-9f1d-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618623441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618623441, "uuid": "5b23b64c-c403-4625-bcfa-be2aa862c742", "comment": "Malware payload (Dridex)", "value": "dca88540f5ea0557fe83ab5e8d6f300c", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618623441, "uuid": "2701d5b5-5cea-468e-b5bb-c206e67c9afc", "comment": "Malware payload (Dridex)", "value": "bb96fc5bcbfd5f06af38958619c54d1fe0327bb61946b8a8ef4ff02e1333ab0c", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618623441, "uuid": "653031ce-2c34-467e-a969-b7960c122785", "comment": "Malware payload (Dridex)", "value": "902dacdaca5395ba624f98f6c9610412aa8d2f01", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618623441, "uuid": "8f86772f-7a58-453d-88ab-947beb7ae33d", "comment": "Malware payload (Dridex)", "value": "3d9ec5f66f29bdc403e3c4d66ffd5048686d04044e3ec7e2fd7eefd0c88991cd54762e36815a1b113b8a2ccc74affcb2", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618623441, "uuid": "839226c8-bec0-400b-a7e4-0dfe83670808", "value": "E9F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618623441, "uuid": "efdd7ad9-92b7-4be6-b0ec-46a8dfb3ea30", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618623441, "uuid": "2c68fb5f-388f-4196-90cf-6a786d7efd0a", "value": "3072:OmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:/Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618623441, "uuid": "e4ce140c-0db4-4271-8812-4e978bdb624c", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618623441, "uuid": "6a8ea889-8d40-4cd4-bffb-e7afa23719b5", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618623441, "uuid": "2986290d-bec1-4c0f-8f7a-ef758eae62f6", "value": "bb96fc5bcbfd5f06af38958619c54d1fe0327bb61946b8a8ef4ff02e1333ab0c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73e63281-9fd1-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618700750, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618700750, "uuid": "1805c858-991b-4de2-8231-5e46a96f89f0", "comment": "Malware payload", "value": "dc116ceb669fc75f11c4a64c8b3abc94", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618700750, "uuid": "922501a1-6e61-420d-adab-319c32640f6c", "comment": "Malware payload", "value": "bbeb8786104288b35a8ecb86375574a1218362735b295e19d4af496f47d3b13d", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618700750, "uuid": "298ef9e0-a00c-41bc-aa59-6240d6ccf0ed", "comment": "Malware payload", "value": "f329a88edd43ccdd583b5f4b22fe627a4a748a6f", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618700750, "uuid": "05ab8ea2-1eb7-43d4-9c5e-5909bca1736f", "comment": "Malware payload", "value": "eb2a5b18df7bb2f97a86268cd9e36541c0d5293db2e2f733e150ffd40d05e24ffd55bba8ca3783768045a890be76b6de", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618700750, "uuid": "57d25334-db63-4108-8c45-fe46f92a96a6", "value": "80F3D088CBB3E4E6EFB3D37866F85E1B461174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618700750, "uuid": "19bd9281-a53b-486d-bc4d-5c05a54e6605", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618700750, "uuid": "2c83f1db-2aa8-46ea-9216-f79a1de5a666", "value": "3072:vmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:uLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618700750, "uuid": "139c2a58-b901-4860-b2c1-08ccf3da417e", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618700750, "uuid": "74c9ebf2-9967-4162-b47b-6b757b8b11e6", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618700750, "uuid": "5a649712-83be-4f27-9f66-8f4ecf3fa4e9", "value": "bbeb8786104288b35a8ecb86375574a1218362735b295e19d4af496f47d3b13d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b82f592f-9f89-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618669941, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669941, "uuid": "bbdfdaa7-37b9-4d94-86a8-ca4e83e416b9", "comment": "Malware payload", "value": "7433c000a339b12a3e43254e39cc54fd", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669941, "uuid": "76864cdd-cc0c-4816-8913-23ca38262637", "comment": "Malware payload", "value": "bc42b9706abcae4b9e09f4c23764db2da74cfcd80cb142d8950171ff4594a450", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669941, "uuid": "2ce2d341-b5ec-4fea-a367-a7a4a99a06a8", "comment": "Malware payload", "value": "a10a4d81aff738d2dfe31e5ffe7f6b376a6ee489", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669941, "uuid": "533b6036-f496-41c1-bd4a-a44f42e7dd0e", "comment": "Malware payload", "value": "e2a20e3dbaf6b5749ea6e122444744012ea1b772b6be0bce800ab510c2ce88680d03e59ea75fb8d63001c3c8465d80fa", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669941, "uuid": "d66ec2c0-b3d1-4439-9d0e-ee209d52dde0", "value": "32F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669941, "uuid": "8bd2971d-8b75-4bd1-a032-e6165271ebcb", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669941, "uuid": "8ed85f96-7c87-4c34-be54-43c47f6b5ce5", "value": "3072:gmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:pLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618669941, "uuid": "09bd24b1-4cd9-4549-ae9b-f5478f23a957", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618669941, "uuid": "4a62be3c-4a78-4a48-b286-75292772c4cb", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669941, "uuid": "d52d28eb-a5ab-4a71-b472-3db2e674d1fc", "value": "bc42b9706abcae4b9e09f4c23764db2da74cfcd80cb142d8950171ff4594a450", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3238991-9fbb-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618691461, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691461, "uuid": "d61a5b57-3f0e-41dd-844c-e70af2d78529", "comment": "Malware payload", "value": "a06a4fd1c32918ab544fcd11ac302a43", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691461, "uuid": "6d11712b-37ae-403f-a803-71fdaef43e8b", "comment": "Malware payload", "value": "bca5f4605c5a2698fdda581c5806afb7ba0239a789d4605a74c0a334af34c008", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691461, "uuid": "59bbeaba-4a7d-435e-956c-d309ddff3d67", "comment": "Malware payload", "value": "fa2a4e93c80f3c080f14cd0b522b2a2f27dba860", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691461, "uuid": "682a22a6-22ad-48e5-833c-065309323172", "comment": "Malware payload", "value": "7e7aeba181261500ab720dbc7400d79acb9aa263ff4d191695ad83d640922fa6be26245e6a4e23828a5b88c1771b72b1", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691461, "uuid": "d2cce545-e0e1-4004-94a6-c32ef9114f97", "value": "7CF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691461, "uuid": "9b769b12-f85c-44ca-9244-29645740ea64", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691461, "uuid": "6e0a226e-a4bf-412c-b8d6-7d888cb50990", "value": "3072:LmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:aLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618691461, "uuid": "df4a6283-a13d-4b7a-a0e3-cce75eee274e", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618691461, "uuid": "03a69b60-5543-431a-8e35-eed9377cf52f", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691461, "uuid": "39b4ad98-d914-4243-9692-1cdf2837c266", "value": "bca5f4605c5a2698fdda581c5806afb7ba0239a789d4605a74c0a334af34c008", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da049383-9f13-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618619317, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619317, "uuid": "37a6676b-0d83-4539-85a1-a22b09ccee65", "comment": "Malware payload (Dridex)", "value": "f971a7cf1f27106ec648018e34fd1d48", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619317, "uuid": "6472d6ed-de1b-4df2-9623-184169519e6d", "comment": "Malware payload (Dridex)", "value": "bcfe0b707ab552fd5c81740a4dbea092cac4aca3570a341dc0f20c06fd591854", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619317, "uuid": "eebdaba9-387c-49c4-802e-be6cbf592330", "comment": "Malware payload (Dridex)", "value": "2691fcb189f374d8e37a91564d1a31ec0ecba7ac", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619317, "uuid": "4407779a-d714-4221-ba82-e97538d3953a", "comment": "Malware payload (Dridex)", "value": "75b71c795c0aa9e7a2d6fd7b5b4794b5b7c4a941f0a9f5713f44fa40e45430fee8b40977d00adeadacb2d9b0545b8c11", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619317, "uuid": "1a8f7606-c4dd-413d-94ea-b06e20b372c1", "value": "EDF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619317, "uuid": "1e477bee-d6c2-40f6-a39e-a72994bc00bc", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619317, "uuid": "37d73dcb-ecf0-4411-b77e-dbe8836869fa", "value": "3072:XmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:2Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618619317, "uuid": "2074ecc0-8b33-4978-9590-c930b9a8741c", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618619317, "uuid": "fe4877d4-c758-4356-9d9d-9957df9439d3", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619317, "uuid": "1c110a22-acf9-4825-86c7-05b34fc497b5", "value": "bcfe0b707ab552fd5c81740a4dbea092cac4aca3570a341dc0f20c06fd591854", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97fc31c5-9f68-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618655714, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618655714, "uuid": "f211cb1c-5a61-4622-9348-9837b19e03a9", "comment": "Malware payload (Dridex)", "value": "c76420d27960abd9da858d1128ab419a", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618655714, "uuid": "61366057-6ecc-4460-bead-71f950f6e37b", "comment": "Malware payload (Dridex)", "value": "bdaf6c283aa8adcc88a05c6d063b55e8a03b0d09ff6410eef485b8fee67e4b23", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618655714, "uuid": "3c79a48e-98fe-4567-88ee-9257d161a900", "comment": "Malware payload (Dridex)", "value": "45ea3445fa86da9f01a9c11c19d86b3dcf77f070", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618655714, "uuid": "64e05ac4-d4e5-428c-905d-ef4c62bdcb60", "comment": "Malware payload (Dridex)", "value": "da0e77c51c1fd504b67b40a6125951382f73516a4db797f6a2e3b52c9c39cd3f135fefceeeff0f1cba490130a4c0f8dc", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618655714, "uuid": "16af2c7b-0066-4d30-ab00-dd9db81c6606", "value": "92F3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618655714, "uuid": "7d1ac3ac-586e-4267-824c-43753210554b", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618655714, "uuid": "b1fe337a-0e92-4506-b956-48a26a99a6e1", "value": "3072:qiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:peAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618655714, "uuid": "9ad4642d-0a01-4cd2-a68e-cd9308b1003a", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618655714, "uuid": "50f4b4ef-8e90-4624-aa30-a4b1963d5491", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618655714, "uuid": "81df7251-0eba-46b2-951c-1aaddb9d6cc5", "value": "bdaf6c283aa8adcc88a05c6d063b55e8a03b0d09ff6410eef485b8fee67e4b23", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed2f58a5-9f46-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618641254, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641254, "uuid": "29febfdf-abff-4f19-b839-3f783dd74a99", "comment": "Malware payload (Dridex)", "value": "0107d4023f6949e0cbcd02e377c13909", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641254, "uuid": "98cab945-97b8-4943-ad24-ed19f337f8dc", "comment": "Malware payload (Dridex)", "value": "bdcea6f405628033c313e0a5edff4644758231af39f2e81b126139f80776a7e7", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641254, "uuid": "5a8ad9d4-fe3d-425d-9503-82bd2162fdf9", "comment": "Malware payload (Dridex)", "value": "23fde9b0d14f5ca21b31b6c0ec9dd964be801b29", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641254, "uuid": "1b62555e-ee70-42aa-bffe-1f90d39a1556", "comment": "Malware payload (Dridex)", "value": "4fc531e9a71b7b6c84398fe461c1d17cdb3dffee123cb804c21c4ca2d720da8e6c4b2e90305637fb6d6ad4d165779d80", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641254, "uuid": "a11d32a7-d1e6-4d10-bfec-38119c1258e0", "value": "37F3E00AED9FE988E84C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641254, "uuid": "e90222d0-1bb8-4f8e-8823-4c910aa3c54b", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641254, "uuid": "6cc909cc-da21-45a9-bf63-4c64a5fb7aad", "value": "3072:wiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:beAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618641254, "uuid": "7c6cff78-bcfd-4065-b2de-68f0d99c901a", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618641254, "uuid": "fde99a33-8fde-44ca-a0bf-90ae4fc42618", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641254, "uuid": "78eaf2be-1759-41d1-8a46-68266e4007f5", "value": "bdcea6f405628033c313e0a5edff4644758231af39f2e81b126139f80776a7e7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2f59211-9fbd-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618692320, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618692320, "uuid": "9aee878c-355f-46bd-9ce4-e9ea1bf8cb17", "comment": "Malware payload", "value": "cdf0569831822566c42f9012ccab0f95", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618692320, "uuid": "f98424b4-62d5-4595-890e-566fb0755e37", "comment": "Malware payload", "value": "be57fdfb08fad65811f38a73d4242e288d6de6e0fa2fb0f3ccc68f88bc584599", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618692320, "uuid": "84146467-e033-4b20-b357-d5e6d8bff2da", "comment": "Malware payload", "value": "722670f6682dd88e5cb21d73e8e8dd5e21a77e64", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618692320, "uuid": "42059d99-e098-49e9-9b0a-76afe3e7d01e", "comment": "Malware payload", "value": "53e8e2aeed310a14e1d9c18d28ad9f85c1d42edcda93bd8eee5cc5d785fb9f6ccccd7ebf8066d6ea01163acc2bc2f3c4", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618692320, "uuid": "4e35a01b-e59b-4fed-ae05-37b5d6f1ee76", "value": "38F3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B49671FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618692320, "uuid": "3c4052ac-6b72-4f30-b819-b956b8204f0d", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618692320, "uuid": "adde58e3-3bc2-452b-9801-af9cbac19252", "value": "3072:ZA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:Z3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618692320, "uuid": "80e1546b-49a7-46b3-9a3d-1c1359eec91f", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618692320, "uuid": "e6436374-f9d6-484e-b452-6e0f537b0213", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618692320, "uuid": "2446541f-f6ac-4fd4-b961-a37486ac9c51", "value": "be57fdfb08fad65811f38a73d4242e288d6de6e0fa2fb0f3ccc68f88bc584599", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee99d1e6-9f3c-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618636961, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636961, "uuid": "b9075f39-7006-4dd9-b805-a9d3978b9538", "comment": "Malware payload (Dridex)", "value": "a090670e1e116eb33c2337b835c3bdb0", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636961, "uuid": "9f498038-5af8-4472-bc8c-7706ce1767b5", "comment": "Malware payload (Dridex)", "value": "beb94ff86a86935b4cbf63ccf9a7b05ab458ee9e5a650ff44498384d343fb3a3", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636961, "uuid": "ff9725ad-f922-4fd2-acdd-8a58cab6a8de", "comment": "Malware payload (Dridex)", "value": "eabe0be671975c836ae29dbad2b28bd5b691fe61", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636961, "uuid": "6f48f887-2e84-4a3c-9370-4fd3f848a4c4", "comment": "Malware payload (Dridex)", "value": "b6c71ca4373879d10af463ede24ae19e9e658ce3ff5c4cd668aa6d795703c0c4a4606b17834511552b56a8e8a29751f8", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636961, "uuid": "94b8c5cb-1f34-49e6-9df0-692d0596d9d3", "value": "34F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636961, "uuid": "d491bd72-840e-4132-9b7a-5016f9e94fcc", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636961, "uuid": "41d5e20c-cbd5-4fb2-be43-c7940c9e1359", "value": "3072:nmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:mLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618636961, "uuid": "fe2418a3-008f-4f4d-b3f2-9d1ea639745b", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618636961, "uuid": "71b5d567-861c-4318-b51f-13193984def6", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636961, "uuid": "ec582075-2e2d-42d3-a16d-46322ea49563", "value": "beb94ff86a86935b4cbf63ccf9a7b05ab458ee9e5a650ff44498384d343fb3a3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce885394-9f6a-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618656664, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656664, "uuid": "d209d932-fed7-482c-b1d2-5e50b642a724", "comment": "Malware payload (Dridex)", "value": "e2645efc32c4822ef4f8f351c26e4c83", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656664, "uuid": "c974da3b-0f07-411a-9b7b-0eff19a5c0d9", "comment": "Malware payload (Dridex)", "value": "bec0001ff61b3396e1aeaed3dc85a85637ba3581b25cf3471f6a012315aaf483", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656664, "uuid": "92e11ec6-2531-4ad0-a05f-e0f7c4e60152", "comment": "Malware payload (Dridex)", "value": "9c226788fe80e1e8105ddd93a8fc50c7bf65b4d7", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656664, "uuid": "1a986051-225e-4b22-8071-6cd2e30ed394", "comment": "Malware payload (Dridex)", "value": "1e0e24d9f0562525fe87efbd269f6d7c2bc78bcbee38521643702d485335d86bd766059e016bf06c2766d88f86f3cc47", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656664, "uuid": "7dc666a6-d9ca-4320-b473-91f523169237", "value": "F4F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656664, "uuid": "f33e82b5-0f48-4e11-9d59-077484ab7dab", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656664, "uuid": "36cc43e5-1301-4467-8cf4-4b33e0f20e40", "value": "3072:smNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:1Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618656664, "uuid": "f3589ca0-8e4e-4ae1-978d-10c455774282", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618656664, "uuid": "53ec85f8-85fc-49fe-a113-b76f1e8b87f3", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656664, "uuid": "d3217ad1-97ee-4b86-8e4a-2c96facf1c52", "value": "bec0001ff61b3396e1aeaed3dc85a85637ba3581b25cf3471f6a012315aaf483", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e590ef83-9f2c-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618630074, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630074, "uuid": "da8446c5-e642-4b8c-889c-1f5d47cad50b", "comment": "Malware payload (Dridex)", "value": "aad0ceae8c30246ea98531cabfa48827", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630074, "uuid": "8d90daef-38d4-41d4-975a-090591cfc3d6", "comment": "Malware payload (Dridex)", "value": "becffe967ce7000e63c7e2fcb5bb53acd9456074d05827f7dc055b8ef5daad69", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630074, "uuid": "af0d00e0-fe88-4197-aeb9-9fac883c9457", "comment": "Malware payload (Dridex)", "value": "5a876492e724c5a386006d0021cbe8510d86b16f", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630074, "uuid": "b4d2eb54-7705-4e9b-8b2a-c6149c0c478d", "comment": "Malware payload (Dridex)", "value": "cdff6a49cfa51025ba16a09671e65b29ad6e2579ef80f6b0bafc00ed54c1266480cae45b9d71f35dc806f154dbffd8c5", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630074, "uuid": "914d8e85-d32a-4c7c-9027-02bfd83eae68", "value": "02F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630074, "uuid": "a3ee09fe-f071-43f9-b127-570130bff794", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630074, "uuid": "939a4e59-e46f-4bd0-8e32-2c8938209f77", "value": "3072:omNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:xLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618630074, "uuid": "e577fb85-a8af-47f1-97d3-500bf510d125", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618630074, "uuid": "4fb9d095-a540-42bc-b795-26db8fd2b295", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630074, "uuid": "78075057-8696-49b6-a289-4d8cbd6fa5a6", "value": "becffe967ce7000e63c7e2fcb5bb53acd9456074d05827f7dc055b8ef5daad69", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa083f1d-9fa9-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618683795, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683795, "uuid": "bf93e1d3-46a4-40e2-aeb5-6d3a27ad69cd", "comment": "Malware payload", "value": "61857effda7db336eb84a765d40bba50", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683795, "uuid": "747faff4-029a-48d2-922b-ad86909184b5", "comment": "Malware payload", "value": "bed0e27269d017bffb3f8d1b8e95f81ea53a1618f9663eeef68bcdfbf87141c8", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683795, "uuid": "1739f56f-8378-451e-b348-5f9f8979cd29", "comment": "Malware payload", "value": "4c168e020b5506222ee6f7c09b6877fb44d94a38", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683795, "uuid": "8b9f84fa-624b-48e9-ad02-0d70d0978a4e", "comment": "Malware payload", "value": "defbae97624f592d2837b1a778c1b129500d9739a4984b2b5bd91c341d05c6fd854874893a7da097ecc66bc31105b716", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683795, "uuid": "83bc1936-b607-48ed-a8a1-4f0484047839", "value": "98F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683795, "uuid": "81583c75-4406-4252-81c9-b1269d90d636", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683795, "uuid": "fce27fa3-38aa-4eae-903f-f28385b878a8", "value": "3072:qmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:7Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618683795, "uuid": "0538664d-484b-4e26-95cd-6e292ee7272d", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618683795, "uuid": "4a0a6f5d-d9b2-45fa-9e65-8c4460a295cc", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683795, "uuid": "0029d1ea-be6d-4aa4-a29d-60e54c4b1e66", "value": "bed0e27269d017bffb3f8d1b8e95f81ea53a1618f9663eeef68bcdfbf87141c8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd668d6b-9fb2-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618687666, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687666, "uuid": "8c33282b-d365-4b1a-a3e3-6624db3400a2", "comment": "Malware payload", "value": "9a204eeba42048408248aa4a9c53ecb4", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687666, "uuid": "aa865193-88c2-4f66-846e-7ac8690f10f1", "comment": "Malware payload", "value": "bf488c819dced44763c24e3bf446827e6131a513448507140f4b991d4db72c28", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687666, "uuid": "7a859155-8d9b-47bc-877e-62bb0c2a2ad1", "comment": "Malware payload", "value": "91645570f3297bb360be0dee66edea9125a8bb5b", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687666, "uuid": "eb5d20df-7ee6-472e-ba3a-e9b2d3b24565", "comment": "Malware payload", "value": "eb3c6b160863387a7117af645f9503ed78e73189de04cb34c444e3e4218d30243be9519dc7124be2a3d65d1c0cc7128a", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687666, "uuid": "70a4380e-17be-4af6-9041-7d19b2028dc0", "value": "77F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687666, "uuid": "d0222616-5c6b-40f4-b75f-86f6430fb1b4", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687666, "uuid": "2f5be933-bd9b-4b98-93c7-110f91b8bb1d", "value": "3072:zmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:CLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618687666, "uuid": "18f555c3-5bb0-4914-9b1a-651ca1b8e20e", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618687666, "uuid": "9e601053-b4ef-49a4-8720-5f8f807edaa6", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687666, "uuid": "96eb7f9f-2e06-4dec-9ef7-6ee0ff7e3f8d", "value": "bf488c819dced44763c24e3bf446827e6131a513448507140f4b991d4db72c28", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a4157c03-9f6c-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618657452, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657452, "uuid": "eb494f8e-306b-4ba0-9a69-0e4a06a16769", "comment": "Malware payload (Dridex)", "value": "ce09f0bca79986bd12ebcc4429a4460d", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657452, "uuid": "269f6ebb-ee11-41da-b632-78243531607d", "comment": "Malware payload (Dridex)", "value": "bfba98d7fba90720ff318ecb8c749de1fbc3da5bd7496b80977e59263b421653", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657452, "uuid": "9da100fe-f9d4-4116-8ce2-d2e7e8ebdfea", "comment": "Malware payload (Dridex)", "value": "532412e565a9ed328cfea4af35c6efa39fc130a7", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657452, "uuid": "d41f3c11-9c51-4fc0-b885-cb8918838394", "comment": "Malware payload (Dridex)", "value": "87b7ab4c0967ee8dac10a3a6f2b246e47df6cc753e67b3a98e42d207821a3b5f29b7b7fdf814d17a860ef72937be065b", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657452, "uuid": "914d095a-77e5-4a3c-ad18-38badb2973bf", "value": "C0F3D088CBB3E4E6EFB3937866F85E1B561174551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657452, "uuid": "4e161ccf-bb69-40c8-90bf-c1cc433ee34c", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657452, "uuid": "c08475ca-72e2-44b1-a97f-aac7153d25f1", "value": "3072:fmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:+Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618657452, "uuid": "5847f0fb-026f-4a9d-a783-3faed2ea57be", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618657452, "uuid": "0f1b8742-c709-422b-bcd4-857dd49c2b19", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657452, "uuid": "ec4c4624-5692-4768-8c45-bcbe478628da", "value": "bfba98d7fba90720ff318ecb8c749de1fbc3da5bd7496b80977e59263b421653", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "156113d7-9fb4-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618688136, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688136, "uuid": "12c7a517-7c3c-4cf4-a355-579d98e84dd2", "comment": "Malware payload", "value": "3aa73b23fafac0f41200d2322f653d58", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688136, "uuid": "d0b64813-c238-45c4-b929-ef0ed7e12cd0", "comment": "Malware payload", "value": "bfe2b385ecbe7d487e57899b3120d0f56912eee99d3ec675a86d3329ccd385c6", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688136, "uuid": "ec16c915-db35-4052-898e-54ea826758d1", "comment": "Malware payload", "value": "16856a067ef64c2cb669a5c6f4a787b5cd999dda", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688136, "uuid": "41740d10-bad8-404c-99e9-1ada14c8c7f1", "comment": "Malware payload", "value": "f0c2efed8fbcc19aff5c24b159bbcd84f0a286af855ede9b96de697a724f336fb2c942973b9ff2565c8f2e188290cebe", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688136, "uuid": "e3012fd2-3a9c-42f2-9b42-ed37370bdd0b", "value": "6CF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688136, "uuid": "6ce71911-1d41-4de2-8b75-070b3b566da8", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688136, "uuid": "ae62225a-0cb5-480f-a6d7-9ff1e7b46e19", "value": "3072:smNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:1Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618688136, "uuid": "c76450be-9504-408c-bd60-d4e657015645", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618688136, "uuid": "7d068e59-8d46-46ba-995a-cf90ebed4fe2", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688136, "uuid": "769b3656-a0f4-4d9e-aca7-60926d6d8cde", "value": "bfe2b385ecbe7d487e57899b3120d0f56912eee99d3ec675a86d3329ccd385c6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62008b30-9fd4-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618702009, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702009, "uuid": "365cc5f5-1365-4427-97d3-6c2ebeb0bae1", "comment": "Malware payload", "value": "95353bbf7bd2589e55d2c3551bead7e6", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702009, "uuid": "efa77a0e-8c74-4928-8b3a-0647a615300d", "comment": "Malware payload", "value": "bfe84f5885daf9486eaf94c624443f7736a1594a9920511a5ff839b4adde7edd", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702009, "uuid": "a28b08cf-024e-46aa-b754-6c0d465edba5", "comment": "Malware payload", "value": "8081bed087869823d671d5124b5c67cb56a75bc4", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702009, "uuid": "c2797028-8ca9-4575-b4ca-46e8cced70d5", "comment": "Malware payload", "value": "b3727b41bdf1b1eec6eea5bd13d221b4ee391a239a84ff1ffb94d32b6d96265a1959a032696a2efbb68c93919caf385a", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702009, "uuid": "729b170a-042c-47ca-9cdc-93235091b8ba", "value": "E0F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702009, "uuid": "89ea6a08-5472-4ff3-98b8-4f9954cc6f10", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702009, "uuid": "e86ffaa4-88c6-49e1-89b1-e07e47621a4f", "value": "3072:fmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:+Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618702009, "uuid": "20a013e7-d913-44e4-90ab-c3719f8838eb", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618702009, "uuid": "fcff24a9-3b27-4610-acc8-1069df6fbf9c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702009, "uuid": "45868f78-599f-44de-93a3-4112e418775e", "value": "bfe84f5885daf9486eaf94c624443f7736a1594a9920511a5ff839b4adde7edd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "523e3052-9fa7-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618682655, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618682655, "uuid": "c6141f0e-4d76-4e41-9968-033bd5ec7cdc", "comment": "Malware payload", "value": "f45a2abb117905bfc9acefef6887e643", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618682655, "uuid": "8633eea9-c3fe-4518-a6c5-0bff9a64ca5f", "comment": "Malware payload", "value": "c07aba12b7b3f1c6c7f4dac3680f09b6ff5f6ab062bbefedf9c29acdd9428b1e", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618682655, "uuid": "240c3ff7-e4fe-46c6-9486-32174bbe04d3", "comment": "Malware payload", "value": "30ab2d9bcf79d09e51153288d83be25c9c741dc1", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618682655, "uuid": "696548f1-42bb-4da4-a1ea-f54897c91588", "comment": "Malware payload", "value": "ee83a114454dedc4dd0c7050aa2b0e2ded0a9c7e2c11edda8eeb379b75ac9a3d2cd4bcdcb0f38387e955e30fe364c5a7", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618682655, "uuid": "126654af-0bbe-414c-ae19-82fadc77c8fe", "value": "41F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618682655, "uuid": "f2d691be-5e49-4966-b76b-cf1a46718e35", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618682655, "uuid": "430618df-35e5-402c-ac4a-b8d961459a24", "value": "3072:alpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:alo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618682655, "uuid": "06a1cfad-c6f2-45da-b1bc-927a89858a4c", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618682655, "uuid": "6c777f25-8a8f-4e34-a81e-c2105503bb30", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618682655, "uuid": "8f7da2e2-9e14-4f82-996b-4404b5f19a38", "value": "c07aba12b7b3f1c6c7f4dac3680f09b6ff5f6ab062bbefedf9c29acdd9428b1e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74fb2ae7-9fba-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618690874, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618690874, "uuid": "e4a98813-5cca-4a93-961d-dfe640021cf9", "comment": "Malware payload", "value": "0322b1ea41873a18bcf0587dc8d51f31", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618690874, "uuid": "b550b55d-eb7e-416b-8bfd-9e777bc42207", "comment": "Malware payload", "value": "c0b562227be6feb4c7612f3f51689f5965f3d7b60219892e83ea2160a518a874", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618690874, "uuid": "6c25bdad-3907-4956-b46d-87edeb277365", "comment": "Malware payload", "value": "d949a54c6f67a8372ee7d625a5a94edf569783b1", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618690874, "uuid": "f5dda349-4ed8-4e8f-9010-7e2f623d6b52", "comment": "Malware payload", "value": "a14a4e9ebab79eba643169c0830c5e009f637e926290ce032e00e77f96d4524919a5da2b70c55076b5a3168571ce1329", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618690874, "uuid": "572f89f6-f347-4733-953b-e8108137b3b7", "value": "08F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618690874, "uuid": "89c8bf34-a845-4955-a4ca-e548b3e354fa", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618690874, "uuid": "7d9297a8-b593-41a2-929b-9faa8f95fa51", "value": "3072:ylpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:ylo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618690874, "uuid": "9884a488-6a81-496c-8c41-a77d1c172f57", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618690874, "uuid": "d413b795-4f53-438d-b3b9-82edcca919fe", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618690874, "uuid": "d42aaca4-ecee-4706-ae60-07f946952492", "value": "c0b562227be6feb4c7612f3f51689f5965f3d7b60219892e83ea2160a518a874", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35a65eca-9fab-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618684325, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618684325, "uuid": "fd812153-6b58-4fa9-a864-2cba9292c710", "comment": "Malware payload", "value": "236feaf45247e0a8147dea9b0c6f07da", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618684325, "uuid": "1fe90929-c6ce-4ed9-bd9f-cd5f7381e15b", "comment": "Malware payload", "value": "c1359452de75ced2a4758a05aab468073215e498ae726a0e1c269eb168098604", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618684325, "uuid": "14dc9c70-a1d9-4b35-ab7d-d90c9d8cbf30", "comment": "Malware payload", "value": "c6fe25667b29e56ac75a910bab837f65ce9a382f", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618684325, "uuid": "f4ad8fe9-c5ff-4825-8a0f-25fcab12e7c2", "comment": "Malware payload", "value": "915b9de00baed80c9cccc21f9ec11084a05459d146fe02a3c08d0a96c6bdf88d48696b5156bfa5b6ef06cb6e98366085", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618684325, "uuid": "b955a69f-6dac-4b8d-bd78-469e3a93234e", "value": "3CF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618684325, "uuid": "5994db74-d221-4ede-ba44-9e1c11e308bf", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618684325, "uuid": "d924138d-a101-4b05-ae50-3df6e142ae53", "value": "3072:UmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:9Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618684325, "uuid": "7d136a37-dba9-4c57-9b56-8c1e2feaf181", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618684325, "uuid": "ad5319e0-0c28-46db-9e6d-e4eac0c35008", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618684325, "uuid": "2a9a3e44-fdea-427f-a3cd-cb191d9dba49", "value": "c1359452de75ced2a4758a05aab468073215e498ae726a0e1c269eb168098604", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8bf9fa36-9f23-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618626058, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626058, "uuid": "741a70bd-7ecb-426c-9bf3-6fb422bbbd89", "comment": "Malware payload (Dridex)", "value": "dc56c0a76a413a1f19cfcf0f32576b4f", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626058, "uuid": "e15c403b-6dfe-466d-8043-c5826d621de0", "comment": "Malware payload (Dridex)", "value": "c1de72550a9fca90948e28e7ced05746fa6fe9cd8989185a874e796932197829", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626058, "uuid": "0bef1027-b342-4c62-af2a-cc2948971c93", "comment": "Malware payload (Dridex)", "value": "de03d49e2e3fd59b6f3a84abf9a4952ba1063792", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626058, "uuid": "05a95a0a-c148-4c7e-ae05-58c7427ad84b", "comment": "Malware payload (Dridex)", "value": "5fd46044aa9735e7b02de24769d705443e67358cdd01f049bdc746810f81be6e6dcac19a4999593e40312b24a6ea6ade", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626058, "uuid": "5ada10df-4272-4a91-b5e7-2fd77ec37ab0", "value": "3CF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626058, "uuid": "20dff03b-8795-468e-9872-86615af94ae5", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626058, "uuid": "acff424f-4b75-49e9-966b-e43504a58c00", "value": "3072:zlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:zlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618626058, "uuid": "10b56f5b-8170-4454-9721-78d284bb1376", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618626058, "uuid": "e5e2ffc9-b49e-4899-b503-763aaaccf3a5", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626058, "uuid": "db194ab4-eccf-444c-96b8-add86ffe1073", "value": "c1de72550a9fca90948e28e7ced05746fa6fe9cd8989185a874e796932197829", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b215ece-9f61-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618652498, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652498, "uuid": "6909adfc-5cf9-42cd-b120-30df8c48f197", "comment": "Malware payload (Dridex)", "value": "693ab437ce1315fa853ce6c0e0da5343", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652498, "uuid": "765085e0-a81c-4c99-a1e1-7d65511a8199", "comment": "Malware payload (Dridex)", "value": "c1fb6145a1c7cc0b3cb8a03f12a63c886ac256c357a03aa30cc84c3a7441bdf0", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652498, "uuid": "e56b542c-279c-4b89-82f7-666baa4c89f4", "comment": "Malware payload (Dridex)", "value": "b78e8433bfdf18f0a1e1628984b24562924bc4c6", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618652498, "uuid": "e1e43422-76a6-4b34-9a6f-cc8a2db7d00a", "comment": "Malware payload (Dridex)", "value": "a8422b0bec0665b9ee742d54e2c21e2012075b6a191ab2cda1d4fd192fcde9079212f8bfb88dea775c1d2b35d18c0622", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652498, "uuid": "dbc39056-6433-47c6-8adc-96219fc9294d", "value": "EBF3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652498, "uuid": "00b9b8bf-4b40-4dce-a5af-f8b426c70ab2", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652498, "uuid": "9e7b55f7-e525-4b27-84c8-8631abd48c7f", "value": "3072:FmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ELc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618652498, "uuid": "3506c0fe-8102-4a0e-9352-187b4579965e", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618652498, "uuid": "d7ca0e54-1c99-4dab-8459-38d85c8c826d", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618652498, "uuid": "5afa37f9-6871-44c1-9bf1-df0a22bca8c2", "value": "c1fb6145a1c7cc0b3cb8a03f12a63c886ac256c357a03aa30cc84c3a7441bdf0", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c115d2e-9f81-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618666243, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618666243, "uuid": "a2d8c2c8-e9df-405c-99c7-9fbfa71b0060", "comment": "Malware payload", "value": "c4a1282c6bbd5d94587c03d0a23b524e", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618666243, "uuid": "7b0f3855-db1f-4136-a136-4ef37a04dae0", "comment": "Malware payload", "value": "c207d838b25e7fb1a024d927182bb9a40b760d87c7e8f165fcb1a6c18b03cc03", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618666243, "uuid": "d229b975-2eef-43cc-82be-ec24f9279ab4", "comment": "Malware payload", "value": "ea49eb7c9948a08a5888c72d746de657bd3a172f", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618666243, "uuid": "1d6c72e6-4c67-4b07-9b34-01f0f371fac8", "comment": "Malware payload", "value": "bd341b99ce1ba0fe4821e91e68c9b14275a7632350d2dcef762bd0229ab87841ac4fbac5b23b45c6db7204ad6abb2077", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618666243, "uuid": "5ed436ea-c9c4-450a-85f8-0a9182bb9c66", "value": "D8F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618666243, "uuid": "9d4f5bed-4df1-4551-b3eb-2e3baecfbd0c", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618666243, "uuid": "b12d0d23-9bb8-4f17-8c4d-2aedaffdf9a6", "value": "3072:VmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:0Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618666243, "uuid": "b8136be7-db98-4988-86c0-e903d0c3b288", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618666243, "uuid": "d456a62c-7e09-458c-8e72-9467e99ea54c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618666243, "uuid": "45135945-e4c9-405b-952f-6ab9db8ad3eb", "value": "c207d838b25e7fb1a024d927182bb9a40b760d87c7e8f165fcb1a6c18b03cc03", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "26fd6ea7-9f39-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618635338, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618635338, "uuid": "4a662a89-b996-4764-a229-c4293ce23891", "comment": "Malware payload (Dridex)", "value": "4096519e7fe010a594edf264146a66f7", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618635338, "uuid": "2fd0eefd-1e5f-4eb9-af38-21ee6220ff83", "comment": "Malware payload (Dridex)", "value": "c283337e48551c6b63a2fef765903798d58a64628ee24b2dc663c557f4b4530a", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618635338, "uuid": "c28ef5d5-8a83-481b-81ab-0cd0a91b2925", "comment": "Malware payload (Dridex)", "value": "1dda1311d793e1d0ffccfe974c91897eb2bbf75b", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618635338, "uuid": "0bca7c31-d928-4ac9-ac27-0a93a6aaa43e", "comment": "Malware payload (Dridex)", "value": "4a433401e89acef2f49653d1fe18809faf22d8a343dc2b419ea195368ad79aaeda6883cd6191d210d31bf3180c4e761a", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618635338, "uuid": "4951d72d-8498-4c06-b29e-abc728f20c0c", "value": "5CF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618635338, "uuid": "2caa0f8a-4d63-437c-9b77-408be1f997d2", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618635338, "uuid": "47e0923c-f210-4943-bcf2-e149fe97cf76", "value": "3072:PmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:OLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618635338, "uuid": "9be0b4b2-2cf3-49fa-bfb8-aabe50d4be54", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618635338, "uuid": "dce1536a-1814-4e90-961b-8f0bb56b5142", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618635338, "uuid": "d06f50ef-2ba5-4d54-82f8-3b4d8d3f1911", "value": "c283337e48551c6b63a2fef765903798d58a64628ee24b2dc663c557f4b4530a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9131cec7-9f50-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618645394, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618645394, "uuid": "454a78e7-ea49-4ea2-bdd7-4a24f52792a9", "comment": "Malware payload (Dridex)", "value": "66e129414c818b44d612d6a983d7d926", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618645394, "uuid": "f4f87d7a-265f-411c-8cb5-c0e96a5c562d", "comment": "Malware payload (Dridex)", "value": "c2bdb8d751011d1a98ffe0b0679c6f208d9db65f8e58e8f8513f83ede5286adc", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618645394, "uuid": "bdca49af-45d1-465e-9215-4cdc54b3dd4e", "comment": "Malware payload (Dridex)", "value": "97cb7023006e63830738bd7e941fb76888087e9c", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618645394, "uuid": "ee18c009-1315-4ad8-b9bf-e72eaa459039", "comment": "Malware payload (Dridex)", "value": "cf15604d175267aacddf8af677a3b806bb1266fe3d3e6d72e9c95886933c007b0f8911d4474f1579b5c99f96ffc954bd", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618645394, "uuid": "382cc4b2-518c-4c7c-a936-320e19ab0f66", "value": "6CF3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B49671FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618645394, "uuid": "df2f128a-9fcd-45fd-9a40-17668012895b", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618645394, "uuid": "097364e2-3d39-45a3-8f8d-58b56957680d", "value": "3072:DA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:D3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618645394, "uuid": "f2ba75be-35e6-4817-a52b-68d57e4a81cf", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618645394, "uuid": "f54b9e37-baa7-4709-a991-ec706e6a5540", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618645394, "uuid": "0bdc44d0-c4ad-4182-b7c6-16d11c1a6907", "value": "c2bdb8d751011d1a98ffe0b0679c6f208d9db65f8e58e8f8513f83ede5286adc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4b749d4-9fa2-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618680726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680726, "uuid": "fa67fa03-f54c-42da-906c-0ed0292558e1", "comment": "Malware payload", "value": "b4808c223a95ee31961fa1659a39a94f", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680726, "uuid": "d1561bd7-136b-4485-94ec-c116706a45e6", "comment": "Malware payload", "value": "c30893ea4e8249ea0649c7af938ce75ee1776898c4fced8b719e79dee395cf99", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680726, "uuid": "fc8d97ea-c1cf-479a-bde1-df04c885bf81", "comment": "Malware payload", "value": "7af7d6c6f9be656b24399e5b65f07ceda4bdacec", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680726, "uuid": "927704cf-653e-4ace-b93f-c1aaf13c781a", "comment": "Malware payload", "value": "a564419235b5351239793a1f4101d4eea6793a6b1df71aa01c8146df9fee820317ea2aed684a51f400a4720ea4cd6bee", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680726, "uuid": "e1fc59d9-a6c7-4fc2-8515-f5bb76475e2e", "value": "02F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680726, "uuid": "c316472e-5bee-4b04-a862-db02e2cf99b2", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680726, "uuid": "3b7d76ee-717b-4ef4-9e89-4310fc8127b5", "value": "3072:GmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:XLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618680726, "uuid": "4e32b5eb-1f09-400e-9f41-aa70b477432d", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618680726, "uuid": "f2e726f9-e0be-4d18-a021-257a4151e1ad", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680726, "uuid": "8b2713eb-54a5-44a6-8db1-0b492fcdfc66", "value": "c30893ea4e8249ea0649c7af938ce75ee1776898c4fced8b719e79dee395cf99", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dddab0a0-9f83-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618667427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618667427, "uuid": "e0b3b6b0-f487-4c68-a0b6-1f8065807226", "comment": "Malware payload", "value": "485d539710c267ccefeac2dec74fbf3b", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618667427, "uuid": "aa3e0def-d98b-4b32-840e-e1f177c33298", "comment": "Malware payload", "value": "c39cfb33b9e93c709973bd17288feeebcf5820793c88d421580a7f7ac0415070", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618667427, "uuid": "441c56e0-3f3e-452f-8757-2a99a84842b5", "comment": "Malware payload", "value": "9ee49377288df916e1a8987b0716fc3c8dc4706f", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618667427, "uuid": "1248c51f-04ac-4f98-baf3-5f0c8796102c", "comment": "Malware payload", "value": "4e9d04e1d01a0822dbd8a6e66188d95838d5771eb027b8e0b439a1e29cb7e19fd02e0057a6348799e5da668b281f00a3", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618667427, "uuid": "1920aa55-3f8c-4c96-b5f4-84f87d63ec67", "value": "DBF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618667427, "uuid": "5c63d4bd-6a13-42af-b079-4c4a598f0ad2", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618667427, "uuid": "e64cfb25-18ed-4a94-91b7-d03360a4f3af", "value": "3072:9mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:8Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618667427, "uuid": "aedc3665-7c2c-4a3a-b0a8-93310be6d00d", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618667427, "uuid": "e8c92b29-22e8-4089-ab0f-a64348a3a4e5", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618667427, "uuid": "979966a2-2c96-4805-a0ed-56cbe3f74659", "value": "c39cfb33b9e93c709973bd17288feeebcf5820793c88d421580a7f7ac0415070", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bf98428-9f81-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618666243, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618666243, "uuid": "398bbdcb-ab3e-4963-9433-90d2cd117257", "comment": "Malware payload", "value": "e59a810e37a5c110c8bc1e2003701ce1", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618666243, "uuid": "92bb624a-3502-49fa-a35b-8df29115e7a3", "comment": "Malware payload", "value": "c416bcad3969043cc4c86db978de34a2881cc60f11433ed6de00fcaace0d0a75", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618666243, "uuid": "7128168c-afab-4b68-9ab0-7dcb88a07ce1", "comment": "Malware payload", "value": "fcddadfc5fd9bb4c0407a24270137f34e9f59435", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618666243, "uuid": "6974ce12-835d-45af-b4d8-90623f576dca", "comment": "Malware payload", "value": "46cb668a864192092d087407531427936950911df07f22c21b9d227f161009dfc5f04d9251d9c511ad1d3d2488ee633d", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618666243, "uuid": "49c28c47-c22a-43d1-bd1c-402ddd6cdb7c", "value": "7CF3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618666243, "uuid": "5af170cb-341e-4db3-b2c0-57630a332092", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618666243, "uuid": "2f1dddd4-a4bc-4c5d-81d9-0e6fd7f32ccb", "value": "3072:iiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:heAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618666243, "uuid": "b2bb73d1-c827-4780-afee-1bc30a691951", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618666243, "uuid": "9548a234-2b75-4b83-bac7-cf1b0c5f444c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618666243, "uuid": "b018d8cd-4602-4873-8f65-899e7ed50c5b", "value": "c416bcad3969043cc4c86db978de34a2881cc60f11433ed6de00fcaace0d0a75", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "167b7056-9fc2-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618694151, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694151, "uuid": "6006305f-8de9-4825-ae36-f88d82f7e7bf", "comment": "Malware payload", "value": "50beeaef7a77d3f21880dfe297debdc8", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694151, "uuid": "32fe4ef5-e9a0-4366-9328-4e6be9691176", "comment": "Malware payload", "value": "c4c138aac7eca14478758243fcf15ae67ce03fe85031597e860b0bfa06056626", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694151, "uuid": "7b710064-8eb8-4c99-99fa-9d5e1bfe6719", "comment": "Malware payload", "value": "7a027cb6802fc0e754063943863e27ccd24e5752", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694151, "uuid": "9ec1a9ef-1e25-4a2b-8e3e-aedca97206b6", "comment": "Malware payload", "value": "9afba51d0c2a8434ab64c41f79549ee897e4e41f7703def26c599c2cdf57960322986bd863cf00e0342e1d701674cfa8", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694151, "uuid": "52db7431-d1d5-4a26-a48e-348e63ecdd08", "value": "6BF3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694151, "uuid": "d201d446-8222-4314-b326-7ece530520cf", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694151, "uuid": "370728b5-f5d2-442a-8af2-0a8eb05cd9b5", "value": "3072:YiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:jeAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618694151, "uuid": "8ade0db2-b1b7-4729-813c-e43488203179", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618694151, "uuid": "990a1992-c2b6-4fd9-871f-e0b121a86156", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694151, "uuid": "d6ad350c-5bb7-4b7a-8d93-24b6a5c632b9", "value": "c4c138aac7eca14478758243fcf15ae67ce03fe85031597e860b0bfa06056626", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37217bda-9f3c-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618636653, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636653, "uuid": "7cfa8548-022a-47e0-a758-bf316b066d0b", "comment": "Malware payload (Dridex)", "value": "529158a68b00635a9660320b905311ad", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636653, "uuid": "f8091f77-fd32-4f3f-aac6-02d9747dfb77", "comment": "Malware payload (Dridex)", "value": "c4e7ca2ab74b5333ab4d2a2b3ff201a22e1bedbbf2d8f54b572c2beb3cbb1b75", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636653, "uuid": "fecf9077-d753-43b0-9a72-b61d2c6076dc", "comment": "Malware payload (Dridex)", "value": "b923a60fb590c8ef270969d55678e9299dc310eb", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636653, "uuid": "2ee44a68-cc31-4af1-9362-93234e78f625", "comment": "Malware payload (Dridex)", "value": "e58e181afbdf3751a85924cb1dac5dc4d67bdc16d4ee9fbff56159a4762469a25d0479915e8ad14fd5eafcb2724b97e6", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636653, "uuid": "5284f62e-33cb-4f61-92a4-e0571fbf5dff", "value": "F9F3D088CBB3E4E6EFB3D37866F85E1B561174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636653, "uuid": "e04098e2-56cf-4bb2-8a51-a793952d1fda", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636653, "uuid": "4e594036-d7e2-43dc-902d-04abed4670b9", "value": "3072:0mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:dLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618636653, "uuid": "1512dea2-d559-4501-8699-57193a263fcc", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618636653, "uuid": "a74b2447-fe1f-4369-98eb-69d15fd26d0a", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636653, "uuid": "7920df39-8515-490b-8f44-6d01a9362f63", "value": "c4e7ca2ab74b5333ab4d2a2b3ff201a22e1bedbbf2d8f54b572c2beb3cbb1b75", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2823ebd7-9f2c-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618629756, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629756, "uuid": "985ec8ca-76b9-4c61-ae0a-a689469cede7", "comment": "Malware payload (Dridex)", "value": "b023aead1a268e07aa71db8e62bc705c", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629756, "uuid": "20c6ee23-d73e-4a69-b96e-e37cc2e6db5b", "comment": "Malware payload (Dridex)", "value": "c53aaf4cc96c843636bcaa1dfd8b0442bdb5d7592410f48ac5be405764facb8b", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629756, "uuid": "f4403bc2-fb61-4b60-b328-7317a5f41a6c", "comment": "Malware payload (Dridex)", "value": "322527e24bfd0cdd9fbad54b250698e4504c404a", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629756, "uuid": "136be76e-de6a-428c-b1e6-7df9e5585052", "comment": "Malware payload (Dridex)", "value": "0dcb47b71b8d1d1f21af260e0a67a820df5ce0c312dc68fbe926f2dc7422a2c486e12d42d70eddb896bdd5a58606b65e", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629756, "uuid": "477cc210-fbca-4fc4-bfe8-b7b2c807f527", "value": "F4F3D088CBB3E4E6EFB3D37866F85E1B461174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629756, "uuid": "cd0f4ae6-93ca-4461-ba5a-1aa3613a5c5e", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629756, "uuid": "80663b6b-58ee-41dd-9061-45547d2e9747", "value": "3072:DmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:yLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618629756, "uuid": "0ecca8af-e448-4f08-9085-b41172ed351a", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618629756, "uuid": "6b5543ec-70da-4307-8c04-851133c87e5d", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629756, "uuid": "9efbf576-3c78-407c-9d48-2e3cf6f9940e", "value": "c53aaf4cc96c843636bcaa1dfd8b0442bdb5d7592410f48ac5be405764facb8b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "03cf51eb-9f4b-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618643010, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618643010, "uuid": "0fd1c140-7000-4286-81de-f1e952de9aaa", "comment": "Malware payload (Dridex)", "value": "a2ee983b4a97efc589bb499e71b4f173", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618643010, "uuid": "af3469cd-7886-4aa9-aa5b-15eb06b7bc3a", "comment": "Malware payload (Dridex)", "value": "c58a36fecbb5f35bbf7f1f3bd32c7e6bba327523456b418dc370550ab2eea348", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618643010, "uuid": "090b0e3a-36af-4d09-8a14-e88e015da141", "comment": "Malware payload (Dridex)", "value": "41fff57c07925e5982dcf4fb95a11b62a5d9051c", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618643010, "uuid": "f3dd9a87-8e64-4984-89fd-9e56288429aa", "comment": "Malware payload (Dridex)", "value": "f79e63bebcf89736348a33e758b3ef1f083c8378ef3a82edd418a7a0b8ba871c63922b719bfa64b80f820d86b0e375a5", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618643010, "uuid": "18c9a211-9aa3-4ae2-902f-842f826fc57f", "value": "BBF3D088CBB3E4E6EFB3D37866F85E1B461574551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618643010, "uuid": "02676067-9073-4bcb-b31c-a978d839e4c4", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618643010, "uuid": "8aae7631-8d30-4c32-9eda-ede6a2d5f46b", "value": "3072:pmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:4Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618643010, "uuid": "c95ec2b0-4336-4420-8ead-4ff33d999032", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618643010, "uuid": "c72801fa-ca75-4ba6-9932-fa4f9b98632d", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618643010, "uuid": "b0586165-531c-42b0-9f60-947621f75345", "value": "c58a36fecbb5f35bbf7f1f3bd32c7e6bba327523456b418dc370550ab2eea348", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "525a3cd0-9fce-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618699405, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618699405, "uuid": "e484e0fd-96fa-4d30-a3d2-3cb11db6914b", "comment": "Malware payload", "value": "81a1f92479cfadda8cb32e1e844320b9", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618699405, "uuid": "7017ec6b-d7fc-47d1-923a-86e6f9ceee6a", "comment": "Malware payload", "value": "c5b09470e89bd478e0e5c2e5dc7a88b1d91bc1034a239b374ece5cfb3890e0e3", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618699405, "uuid": "efba8749-1525-4c74-8c63-cb5eb8672417", "comment": "Malware payload", "value": "db9e2dea3d0d3484e6a1668350db663d20c03bc6", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618699405, "uuid": "aa82c14a-8bc1-4adb-9b07-92c51097cd6a", "comment": "Malware payload", "value": "132747b9ef5a6973d221b770f7f8f9a3d25eb6873f493534594a4303c7ae2b591dfd2dc8e7b7c02703f98ad603c74a9b", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618699405, "uuid": "0550d5e8-5418-453c-9df5-6bdd5ec679b6", "value": "27F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618699405, "uuid": "225c7ddf-136c-4bef-bcfe-20c517984428", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618699405, "uuid": "14111906-1b1b-486d-ba1d-6c8b787c2a9a", "value": "3072:CmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:TLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618699405, "uuid": "2bb92566-1722-40c9-b1ce-57f76d659712", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618699405, "uuid": "21b31109-6af1-4c1f-a51e-d880e8a64386", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618699405, "uuid": "76c25242-0437-4202-b925-6057005a08ce", "value": "c5b09470e89bd478e0e5c2e5dc7a88b1d91bc1034a239b374ece5cfb3890e0e3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86e2b09c-9f88-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618669429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669429, "uuid": "71d00c45-6707-4f74-be0b-cf34dfe576c0", "comment": "Malware payload", "value": "2c3897949e3e8470179fde6046aa9994", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669429, "uuid": "78a57b07-b7f9-49bd-9b6a-72eee54e2d14", "comment": "Malware payload", "value": "c5b6792b5be7c05487f6fb8603f1b79b8cbdd3c4fcdc5da20c45eb1910d054df", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669429, "uuid": "382c92df-1329-47f5-b5be-2be466f7d5e0", "comment": "Malware payload", "value": "87be02ade122d3a09a8e1d528742028c1b031a7a", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669429, "uuid": "35bfaf06-e15c-477f-80fd-5ec7711dfca4", "comment": "Malware payload", "value": "3843e454fdf44ebd29e7f51b1b8e26ea8b8b214e7a453f31ebebbab57be945f532dae7c7196a68d043656a13607f5a86", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669429, "uuid": "c2be27a2-81f7-4998-b468-2473647d289e", "value": "8AF3D088CBB3E4E6EFB3D37866F85E1B461174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669429, "uuid": "6b28d6f4-8071-42fe-80a9-35fa4bfbace5", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669429, "uuid": "7ab1b5da-26dd-440c-bdb3-4c2fbfa16af3", "value": "3072:qmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:7Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618669429, "uuid": "cfe208b8-87ab-462e-9cac-0881a14e933d", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618669429, "uuid": "25b5d1e1-b71e-4715-b7ab-869344eef5e3", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669429, "uuid": "1e1dd1b3-b30e-4f41-b6a0-f6760ef5b2f8", "value": "c5b6792b5be7c05487f6fb8603f1b79b8cbdd3c4fcdc5da20c45eb1910d054df", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67e12da6-9fcb-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618698153, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698153, "uuid": "00115c54-9f1f-4544-a6ac-9873677f4674", "comment": "Malware payload", "value": "111d2a861bf5ad1abd6a94de54b87d5a", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698153, "uuid": "6cd2fece-add8-47e9-91c5-28f929138e57", "comment": "Malware payload", "value": "c5cd578c23cf477581bec86fb55364813e1c4a14e785fae1f1611e152b09bf9f", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698153, "uuid": "42ba2bd6-b1fa-4d47-b758-3aa8c1b57b49", "comment": "Malware payload", "value": "8bfc349006f9932bf712cb753fdc9b21ba4668a8", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618698153, "uuid": "de91eda4-cdf3-4d9c-b68a-d766813d954c", "comment": "Malware payload", "value": "cdd63189d8e43b9b3aa3436c787efb4dfa7d7b4042d98e32382af3a791fa3507ba7c4b8ad841ad7cd184bd242c209cbb", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698153, "uuid": "cec18565-661b-4339-bb3d-a1b167bcd6e5", "value": "F1F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698153, "uuid": "d2c66a83-5e48-4b54-acfa-aec2186e74d3", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698153, "uuid": "eb0d009b-cff8-4cfe-a005-9fe31b258611", "value": "3072:xlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:xlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618698153, "uuid": "0bc924d4-682d-492f-b2d0-bfa34302bbb7", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618698153, "uuid": "e68e3ed9-3c43-46d5-8243-fbb680588cde", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618698153, "uuid": "ee5ddada-d4bf-4b02-8c97-e0af152304ee", "value": "c5cd578c23cf477581bec86fb55364813e1c4a14e785fae1f1611e152b09bf9f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63676023-9fd3-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618701581, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618701581, "uuid": "2ee8ab8b-62cb-4127-a17a-e4b4a2976b5c", "comment": "Malware payload", "value": "b0f2e2f9ffaf6c6b417dc470c76ee9d7", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618701581, "uuid": "35df38cd-e752-4a7c-a133-750f6e45f92d", "comment": "Malware payload", "value": "c5cdc3829da5ba15f97d9742ddf1802529df20f964535156063168525d88bb81", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618701581, "uuid": "027ad2a4-becf-4c59-b068-8e6432ffec5e", "comment": "Malware payload", "value": "49f86458dce7cc701e5ce24f31aaa7d0ca40f214", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618701581, "uuid": "86d42b55-5bfa-4538-ac55-76608bbd9553", "comment": "Malware payload", "value": "f40c0ed0199bbaa750eaa3825d0aab149e79bda42bb4cbfd71fee331db8737694b043348f115257ad2c0e360419b4ef5", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618701581, "uuid": "aacf3523-4a20-4621-9abb-4494b8f7694c", "value": "59F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618701581, "uuid": "6d453d72-41b3-46a7-8d2e-f7192a9a971f", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618701581, "uuid": "9c2deaad-40a3-4060-9192-6fa95f0fe742", "value": "3072:Tlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Tlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618701581, "uuid": "ee7ecfe7-1482-431d-9dac-cbbb717bbd22", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618701581, "uuid": "db926023-a2b8-4dfa-ac81-c12672b0ddd4", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618701581, "uuid": "40cd828b-eec9-4013-8dd0-b03536685ec4", "value": "c5cdc3829da5ba15f97d9742ddf1802529df20f964535156063168525d88bb81", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ebc77d1d-9f7c-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618664444, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618664444, "uuid": "c716e30e-0e85-4cc3-ad6d-56f1c941eeb3", "comment": "Malware payload", "value": "b0ffe4022024d072e10e99f8e6872031", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618664444, "uuid": "4492be5e-6b22-4452-a471-604d140a60fc", "comment": "Malware payload", "value": "c5e9f8e6e6f6a58cdb2f76fc2063982850b51a020e85b6e8cc44632225c1dd99", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618664444, "uuid": "0e1da16b-acb7-45e2-8c74-d161def52ae8", "comment": "Malware payload", "value": "88e036acc3a6b5aa63f754e63478c125885bbc14", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618664444, "uuid": "34d0f022-2c84-460a-bdb9-8752b9c6e2cd", "comment": "Malware payload", "value": "184ea46ca03cd37a4199bd9325fc54150ac41edcf9ca708f071febdd5fd573d2cea24b828cd072d3eab59275513c049c", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618664444, "uuid": "94101bdf-1ea8-4383-8b39-02fa4a6e6301", "value": "AAF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618664444, "uuid": "4fba7a19-a0a0-47bb-ae75-5ca4fe88f6de", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618664444, "uuid": "681d2c91-b0af-424d-8b44-2c833d675494", "value": "3072:qlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:qlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618664444, "uuid": "7216b739-50d3-43fb-855c-ab1565599729", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618664444, "uuid": "4961c44d-5919-4355-8e20-84856a273789", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618664444, "uuid": "f7f0b8f1-7f6a-46fa-a1ec-994358cf3419", "value": "c5e9f8e6e6f6a58cdb2f76fc2063982850b51a020e85b6e8cc44632225c1dd99", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2154dd0f-9f12-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618618578, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618578, "uuid": "09964f12-0f7d-49d8-8e85-614319d95adc", "comment": "Malware payload (Dridex)", "value": "e5daf1de4acd6d0aab7d0a27b544ed66", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618578, "uuid": "bc6aaa68-1028-4a49-95d2-4714a9ff0514", "comment": "Malware payload (Dridex)", "value": "c67bc037b54effd8c0bcbd23c67c6c1b86c33329a87776f0a493ea7e1c1ca06b", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618578, "uuid": "ed1a2ca0-9d2c-4512-bd4a-89d7ac37180e", "comment": "Malware payload (Dridex)", "value": "7d869c175c05312ffb56702f4f6952e722a106f2", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618578, "uuid": "c29aeb68-2198-4728-811a-276facae77ac", "comment": "Malware payload (Dridex)", "value": "51e5ad7d8a31066d015effc60b2964f262c729bdb60cf89ccb2ff22e68e35ceca0fb11473351bcde6b89a507f5b7d501", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618578, "uuid": "e7b8b6fa-e22f-4b94-8b4b-f70bf188b146", "value": "66F3D088CBB3E4E6EFB3D37866F85E1B561174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618578, "uuid": "461f139e-e2a0-4a40-a257-9b52298f2d71", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618578, "uuid": "54fd1c82-9b3a-4fcb-a004-2afb4f881b61", "value": "3072:mmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:3Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618618578, "uuid": "f1427a21-84c4-4092-8dea-c53794796bfd", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618618578, "uuid": "deda428e-aba5-407d-9415-bef11fcec5b0", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618578, "uuid": "9fab4131-69ef-4a91-b3c6-cd1c1b2582a3", "value": "c67bc037b54effd8c0bcbd23c67c6c1b86c33329a87776f0a493ea7e1c1ca06b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4036beea-9f40-11eb-abe1-42010a9c0039", "comment": "Malware payload (Formbook)", "timestamp": 1618638386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618638386, "uuid": "9b462ce9-948d-4588-a412-87bbafe42046", "comment": "Malware payload (Formbook)", "value": "697803065bf1f58c903e8dbf996d5a35", "object_relation": "md5", "Tag": [ { "name": "gz", "colour": "#97C949", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618638386, "uuid": "4c42e7de-050f-48cf-83c7-9462b43aeafa", "comment": "Malware payload (Formbook)", "value": "c68389599677f233b8e8b91d43c6b0351f669cac560ee13cbe9ac755b116228c", "object_relation": "sha256", "Tag": [ { "name": "gz", "colour": "#97C949", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618638386, "uuid": "b830b35d-daf2-4524-b9c2-6a8f255553ee", "comment": "Malware payload (Formbook)", "value": "b23fcadbc48fab5bd883b6f3c59b7d2d06c775f9", "object_relation": "sha1", "Tag": [ { "name": "gz", "colour": "#97C949", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618638386, "uuid": "6d0e5954-3fcd-4b5d-b421-bcd695c8169d", "comment": "Malware payload (Formbook)", "value": "fb19bea386efd4bb5836823f5d1d3de4b0e4158324bd55d812023c40e3f00dad88f7be3c70e726c4c71e607ce5ca7b35", "object_relation": "sha3-384", "Tag": [ { "name": "gz", "colour": "#97C949", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618638386, "uuid": "961f42e3-df8e-43d9-b89d-dbbe87661f88", "value": "852423AADDCCD4C3622CB3455496730AA7A195B9A64FFAE48E021D8047393F4F9173CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618638386, "uuid": "0a1af7a4-750c-4d27-b0ad-17f835f3cb7c", "value": "6144:e0eMLaiCaEOwtxHHlmSBQk9Zd7nHT8KfxCa9miI:exiCaEvHlmSBHdnY0xe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618638386, "uuid": "00023a25-97f3-4432-9c9b-c7d0f9699c95", "value": 219079, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618638386, "uuid": "fd1b0550-79b8-454f-8fcf-9d748778cd17", "value": "application/x-rar", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618638386, "uuid": "7e0042fd-6cc9-4e4d-a135-41d111078f5d", "value": "PI (1).gz", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a98e89b4-9f88-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618669487, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669487, "uuid": "b854e890-7c01-41a2-b931-a548eb44d95b", "comment": "Malware payload", "value": "2edf972bda50b0e0fbac8b6dea977ac9", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669487, "uuid": "35f8612f-caa1-41f1-aeb9-000d2e11edda", "comment": "Malware payload", "value": "c6d94a4b1b00980d4377abe2e6bcfa604ea751e4e0b7216002c240bb5a3c04f8", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669487, "uuid": "d3b3ed40-83b8-493c-9544-3818ceb1149b", "comment": "Malware payload", "value": "daeefcfde3c876aef6611ed6e0e7bc66b9a3cf23", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669487, "uuid": "ed314578-1292-4af9-97ae-078234d44362", "comment": "Malware payload", "value": "46f5d8f5acf704a766afbfc5f71a7d88a5e863dc56b9524e5f7ae4a39027580fb0460ce8f7940e2fd224099569baac57", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669487, "uuid": "502aecf4-a12b-4340-ba80-9d7595371a92", "value": "C8F3D088CBB3E4E6EFB3D37866F85E1B461574551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669487, "uuid": "9e5a15f8-aaa9-463b-96d2-17e03f2358c4", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669487, "uuid": "595e7d09-f80e-42f2-af06-7fb8507fb953", "value": "3072:ZmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ILc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618669487, "uuid": "d3f03e8a-5b21-4808-8ac9-af94a400c87d", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618669487, "uuid": "21e2c852-f4b0-4011-a995-97bce39af94f", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669487, "uuid": "14671f0d-4d5c-45eb-ad94-d5f1b4b75801", "value": "c6d94a4b1b00980d4377abe2e6bcfa604ea751e4e0b7216002c240bb5a3c04f8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0fbb24c3-9f2d-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618630145, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630145, "uuid": "3cb6da4a-4a0e-4f83-864b-a103c11dc97f", "comment": "Malware payload (Dridex)", "value": "c396a686b83a8b234f747c1b5913ae64", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630145, "uuid": "eee1e190-d769-433c-aa24-2e053783e888", "comment": "Malware payload (Dridex)", "value": "c6e6b2aa621cdcc25747432c7c01e7e68c53af635bb21f42f36425327e6b5dfb", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630145, "uuid": "f7bafd86-5c7a-4eb1-aab1-1dddb5854b61", "comment": "Malware payload (Dridex)", "value": "1f54b733426db9ddac48243f2a36e757de8ab158", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630145, "uuid": "488d2602-d26f-449c-a549-d668da320263", "comment": "Malware payload (Dridex)", "value": "b3f60d665e8efe6038104241d04c8d9828760d65b4f070b63f796c2ad819eef9502835db3bdcc91e71ff432af422eed0", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630145, "uuid": "786fd72d-9c0d-42d5-81f6-9a6288b9c917", "value": "6BF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630145, "uuid": "da25082a-407a-4ad1-a423-c7f3e435d057", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630145, "uuid": "a9484c70-da85-47e4-adc3-1d9a869cceca", "value": "3072:Blpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Blo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618630145, "uuid": "9b486e90-e0f8-42ed-846e-fd29d62a3ae9", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618630145, "uuid": "f3d4d29c-ea3e-451e-bc9c-fbc85bf70b86", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630145, "uuid": "c2ca3310-c089-4dcc-80d5-91c741e0bd7a", "value": "c6e6b2aa621cdcc25747432c7c01e7e68c53af635bb21f42f36425327e6b5dfb", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50e1f56e-9fd6-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618702839, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702839, "uuid": "f8352dce-c539-4424-8eeb-ceda828b1480", "comment": "Malware payload", "value": "67ca3b7da96b2c3996c8cc60b969bda6", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702839, "uuid": "f1f12d92-6fb7-4923-a118-6bdba647d1da", "comment": "Malware payload", "value": "c7df61460152e861a947934e2d813fc6f29e7a7f6a6a9e273a90448a813586ee", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702839, "uuid": "59612b9c-b5da-43ba-9f3e-7f6a33f41eff", "comment": "Malware payload", "value": "b1cb3cacddee857d95decd1458b1d7d3fcd65010", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702839, "uuid": "6b7e1a6b-a91b-4493-a410-8a75690d2b3e", "comment": "Malware payload", "value": "aca62bc9f3cff08f545f8c9b24b5806db64710672c25920de5396a946515dffb3442fc027e0b37e82f11771e7f5f8515", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702839, "uuid": "ca63d482-46d0-457e-9503-0b551e44edaf", "value": "DFF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702839, "uuid": "5dcd4156-d869-401a-a8f6-a60f2b14df33", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702839, "uuid": "e757a5ed-e83a-4f77-bb24-92a9955fba5e", "value": "3072:OmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:/Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618702839, "uuid": "39b746ed-8edf-479b-a443-e6cff826a986", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618702839, "uuid": "3920c2b4-5e9c-451c-aec7-ba966d2ce63c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702839, "uuid": "498e2d3c-e887-49bb-9bc2-b515fe2e7149", "value": "c7df61460152e861a947934e2d813fc6f29e7a7f6a6a9e273a90448a813586ee", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93d105c5-9fbe-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618692643, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618692643, "uuid": "070056ac-af55-4490-9765-cad2b1e342f0", "comment": "Malware payload", "value": "899c60d0a1140fd3ffc7f8d90ded2cf1", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618692643, "uuid": "c82c44a2-d6f7-4c33-a90b-215cc180689b", "comment": "Malware payload", "value": "c8057ee3f21ec68128bd50828911c6b776a27438c592d2d64e0fbf5fb7745f46", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618692643, "uuid": "68807574-e738-4f73-8970-7d18d293a096", "comment": "Malware payload", "value": "8cc6374c02b153232a6356b99c858beaca39b99d", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618692643, "uuid": "cfe84ff6-ddbc-4e6e-ba14-fca372f403ef", "comment": "Malware payload", "value": "aa23cf9dcb6e33eca13227a92e480df3e35d540f5a3e9a43325a255f33e5eeaf286d18608a89886c884cd78b12e98ad4", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618692643, "uuid": "f94d8310-d59c-4172-aa56-305f9879473f", "value": "37F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618692643, "uuid": "47284bd2-a201-46c9-afe2-f1e42fbc5a12", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618692643, "uuid": "5d64038d-1e91-4c1d-a3d4-a928327a332e", "value": "3072:elpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:elo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618692643, "uuid": "402353c4-322a-42bd-98b4-a79e4534406d", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618692643, "uuid": "36e4090e-882f-42b8-a92a-48da57dc8aa6", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618692643, "uuid": "c59da1e0-d486-4593-8836-2bed1a77d007", "value": "c8057ee3f21ec68128bd50828911c6b776a27438c592d2d64e0fbf5fb7745f46", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78ebdb7d-9f99-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618676707, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676707, "uuid": "1c2c9fd3-df28-4afb-be88-fcb2204b43fe", "comment": "Malware payload", "value": "d1e590ed184c839d800d4b4862044b06", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676707, "uuid": "09c8b0bc-5a3d-4a6d-bf8d-7aa2b9e556bf", "comment": "Malware payload", "value": "c86881a6bdfab7a03e204a1e2e9bc8ab9cf71c82f886a0172ee31da3aa6a3eb3", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676707, "uuid": "d2c249b8-0ac8-460b-a057-91b180354368", "comment": "Malware payload", "value": "e2445d1b05ea6a81b492ad2be201e47fc91cf3f5", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618676707, "uuid": "343dea06-83da-4c03-b0b9-2bba9b4d9682", "comment": "Malware payload", "value": "7f00fcc31c9c62d46bfce5115260246a5b2ad834212bf012491d70fde35cdec8c8d86c3d59b25cfc033fc73c78be7376", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676707, "uuid": "3916b5b7-0bb7-4d11-ae0e-b9b56108e2bc", "value": "0EF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676707, "uuid": "95d0ef21-1cf6-4628-88f7-7f9ca9fc1ce4", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676707, "uuid": "27d58449-0363-4e9d-b861-5c92049670dc", "value": "3072:emNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:vLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618676707, "uuid": "39ee1ef1-9070-4f0f-932c-a9a2ac69f68d", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618676707, "uuid": "bc11b9ac-07a8-4c06-bc2f-c874271daea9", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618676707, "uuid": "c01d5a75-3236-4ba4-ae79-edb0275473f8", "value": "c86881a6bdfab7a03e204a1e2e9bc8ab9cf71c82f886a0172ee31da3aa6a3eb3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd3b8c21-9fa6-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618682405, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618682405, "uuid": "d56b22a5-5aaf-42c7-933b-f9018aa03b43", "comment": "Malware payload", "value": "a217015497b0ab2c5fb346d780dd7a00", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618682405, "uuid": "4985eb79-7ab1-49fe-8e6c-fbc392e9ecdd", "comment": "Malware payload", "value": "c9258afa907d5aa6b474ce5df2d069b1c3f621e03496fb0b1fcd0f6baeb53b28", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618682405, "uuid": "a103caf9-51c1-4927-90a9-43d3a4ecd1c5", "comment": "Malware payload", "value": "b223769444530e8d825fceb89cccd329b795c2dc", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618682405, "uuid": "8abd0e59-38a6-49b8-b4d0-c9f4e4582acf", "comment": "Malware payload", "value": "400ab77600ad563c72206892ac8bba7e1bb118f2c30c558495a88352fc69df62f6bc182778c79b3392e3e57c05221023", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618682405, "uuid": "1d86ee71-bbd6-4bc2-811a-3d7d8b1b846e", "value": "13F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618682405, "uuid": "54504509-c891-48bb-842c-994a93b6f07f", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618682405, "uuid": "49300194-ca3b-4080-9335-7e110224e83e", "value": "3072:EmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:NLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618682405, "uuid": "77af4f40-74a1-4d50-a6ed-911591ac0997", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618682405, "uuid": "f0b5cd4f-cfb4-45f8-919d-8d22933484c6", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618682405, "uuid": "c9940b90-c479-4cfc-95b4-ed1944b7333d", "value": "c9258afa907d5aa6b474ce5df2d069b1c3f621e03496fb0b1fcd0f6baeb53b28", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e267982b-9f17-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618621049, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618621049, "uuid": "21a0f843-e747-436f-809e-665d0afb7922", "comment": "Malware payload (Dridex)", "value": "035f6f0b087c39dee84a2adb0cc0f58c", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618621049, "uuid": "fdf3dbc0-53e6-4004-912f-936e8a4b2d41", "comment": "Malware payload (Dridex)", "value": "c966e7a92ea4ec18ea97158b16afb950f346943ed6eee79c600c6dec1cff4799", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618621049, "uuid": "a0d9555a-9db4-4aba-bd45-02e8a6aaee48", "comment": "Malware payload (Dridex)", "value": "d1976cf5b3836b0ea1e7731113c26286bb1066b7", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618621049, "uuid": "374f486f-a83a-493e-b213-cbd73f8ebf2c", "comment": "Malware payload (Dridex)", "value": "bb2947b23a7e015238b4803dbd0f4b86e682f663b268f93f697505dfa5292bdc228f36c35b9117651f555b9d4d91d9c0", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618621049, "uuid": "26767456-2d4f-4d0b-8d35-d5feccadd791", "value": "5FF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618621049, "uuid": "95caa00d-42c6-478e-a4a2-1262f817e362", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618621049, "uuid": "c3ba39bb-5b48-4586-8b1a-54f551af9163", "value": "3072:Rlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Rlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618621049, "uuid": "4323da5a-e8a3-4dc7-b1ed-63ae4a16439c", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618621049, "uuid": "700ca7cf-396a-4d6f-a60a-cdbf94b04bb2", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618621049, "uuid": "19690b17-a8e8-44e1-a4b4-abfe2f78a159", "value": "c966e7a92ea4ec18ea97158b16afb950f346943ed6eee79c600c6dec1cff4799", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c073d200-9f50-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618645473, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618645473, "uuid": "483e3912-52a2-4844-aae0-2b0940c03979", "comment": "Malware payload (Dridex)", "value": "6c3defd9b08d9f0b1843727680d9d425", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618645473, "uuid": "c38519af-c321-4896-8d1c-dc31b6fe5eca", "comment": "Malware payload (Dridex)", "value": "c9e58a162e87f7c78a285eb8aed9117d42efc765fc0730e8eb4fb4481e52b843", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618645473, "uuid": "2db92262-7356-4f14-9b7a-15a4d93592f4", "comment": "Malware payload (Dridex)", "value": "80577128d1a3294fcb40d8a87ba60878e1846bcf", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618645473, "uuid": "f2d50a6c-5e1d-414b-8407-588f697ccabd", "comment": "Malware payload (Dridex)", "value": "8bc27f1d7bde7c3346dfb274811470c581d06a018c31e11a051e4ed738695afd9c0738e04b5b5e3863a216e3db394523", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618645473, "uuid": "19c2a6f1-d9c5-412e-b64a-c2f3c5f50b5e", "value": "8BF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618645473, "uuid": "9a214edf-8e8d-4ba6-8d08-a9f46792a6d0", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618645473, "uuid": "ab7de63e-2efe-43c5-8fea-b86efec4ebf2", "value": "3072:JmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:YLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618645473, "uuid": "ef25f453-3835-43f6-874c-bdc6abf452f4", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618645473, "uuid": "722b7354-9a6c-42bc-9925-0a7ed10cbb78", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618645473, "uuid": "4a382ff5-d63b-4e2c-86fd-9dc3c55af680", "value": "c9e58a162e87f7c78a285eb8aed9117d42efc765fc0730e8eb4fb4481e52b843", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b48aa787-9f43-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618639870, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618639870, "uuid": "e7a5235a-8a34-4b2a-9293-15e23de1efa3", "comment": "Malware payload (Dridex)", "value": "2870d9aa535d2944ed130e1d7180b579", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618639870, "uuid": "c900e2ff-b12d-4ab0-afb0-e0c977dfdc26", "comment": "Malware payload (Dridex)", "value": "ca949965b50c67a660753954263401a8aa9737716aa84549d2370747fad090e5", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618639870, "uuid": "922320b9-5d82-4f33-bf4a-c7ac1d5cee59", "comment": "Malware payload (Dridex)", "value": "74061bf13f58b597ef29541d4ae8303b0a40c615", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618639870, "uuid": "a3fef24e-015d-4a48-a854-e65188ead0d5", "comment": "Malware payload (Dridex)", "value": "c9c3e78ebe46fd73ca2e348f3031db44065e602452c167bf216fa12513eb84fd0c8686ee37618786e4e0b1453594bc6e", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618639870, "uuid": "c2de9905-6352-4b7f-bb58-a2d6f0669f3e", "value": "84F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618639870, "uuid": "72d23e15-d59e-4611-84e5-e457263b2d4d", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618639870, "uuid": "e401418a-b2ea-4956-8c38-90232c4b9c8f", "value": "3072:dmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:cLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618639870, "uuid": "20d82445-0fc2-4a67-90ac-b01e8a99648c", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618639870, "uuid": "76091f9b-3870-43c9-898f-1596203b6f9b", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618639870, "uuid": "67941bef-6db8-43af-88f3-0a64521964df", "value": "ca949965b50c67a660753954263401a8aa9737716aa84549d2370747fad090e5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e34dd7d-9f46-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618641041, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641041, "uuid": "b05a0f4e-ae6e-45af-b05f-335bf4872333", "comment": "Malware payload (Dridex)", "value": "53829a1705ea2adcfc3b1902657787d7", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641041, "uuid": "3bc42ea4-1e29-4aea-a27c-ba93f0b7fc42", "comment": "Malware payload (Dridex)", "value": "cab0243b058881672c5a710522498eebeb2dd28acda21308cd13d38c96a66819", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641041, "uuid": "0308741d-d681-49d7-9ca6-1debde5c4307", "comment": "Malware payload (Dridex)", "value": "0e2e649a9c9aa866f098f1d03b0fd77af82f1be8", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641041, "uuid": "8efe16e7-8766-4561-94c1-77589b78879c", "comment": "Malware payload (Dridex)", "value": "3f08d60a0d887686dfdf7ac22637feccfff54ba5c3a4c40ea16a109346140399f17658a0bfdf69be57c1859e40dc7038", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641041, "uuid": "c3f2d533-130a-455f-aa6e-90e9ec727555", "value": "4FF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641041, "uuid": "af0040c1-ab18-4865-94f8-651c6c3cc186", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641041, "uuid": "0642d119-310c-413e-9940-821094ce67eb", "value": "3072:Glpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Glo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618641041, "uuid": "d6361697-fa6b-4868-a6e3-e6b7d3ce8aa9", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618641041, "uuid": "8cadc87e-b6ca-428d-a71f-2c8270452827", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641041, "uuid": "76571b84-5806-4ffc-8aed-1b3519bd871f", "value": "cab0243b058881672c5a710522498eebeb2dd28acda21308cd13d38c96a66819", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19a748d3-9f1c-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618622860, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622860, "uuid": "d4ff9df3-c10d-43b4-9fe0-b847412695d0", "comment": "Malware payload (Dridex)", "value": "645b03ac4267247fe29913ecf946c722", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622860, "uuid": "58052fc7-af6b-468c-ab64-e5d3267fde4f", "comment": "Malware payload (Dridex)", "value": "cacb47ecb27e440d2cf7907afc447cdb3e40e5d31fbca15f3a0118d44ae8ce35", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622860, "uuid": "45380a2b-49e7-4a2b-8f8e-6b61fb6c11f8", "comment": "Malware payload (Dridex)", "value": "9bbea60155b053ec2b96fdec78276b51506ab040", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622860, "uuid": "c5317b50-6639-49a8-b605-39ee0b490135", "comment": "Malware payload (Dridex)", "value": "281c345c69e2632570d3f93d1f8b2b34d26ac505f4ed651c3647558a837e73ff4f72aea635cd0ad05a875f581f1ce5f1", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622860, "uuid": "bdf9407a-5b60-4f2f-ab0d-7005825e5658", "value": "CAF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622860, "uuid": "2ac27485-e785-4d4b-8e61-5d6b9a82555d", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622860, "uuid": "9ad35713-8993-400a-940f-a308b9dd11e5", "value": "3072:klpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:klo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618622860, "uuid": "331c03e2-ed19-4c36-b062-ea8ec837cf40", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618622860, "uuid": "a8ba6437-e942-405e-a84c-c02e75ec9b9b", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622860, "uuid": "1ede7e4b-1a3b-4f0b-818f-2ea624210153", "value": "cacb47ecb27e440d2cf7907afc447cdb3e40e5d31fbca15f3a0118d44ae8ce35", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7facfe7d-9f8a-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618670276, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618670276, "uuid": "c4736d11-7c70-4392-aad6-34b0564fefd1", "comment": "Malware payload", "value": "ac4e351d7ecff623cd5c1fe4dd5b6002", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618670276, "uuid": "95026b95-d8dd-4986-85d5-090dd900f1af", "comment": "Malware payload", "value": "cb54379d1b109a1b3d63e49ab56d18b0c33003c0207ef9547f5a027deb22bd75", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618670276, "uuid": "6e04269e-3a19-491b-ba28-d68482ba7d54", "comment": "Malware payload", "value": "5df8ab2c448b1a62660fabbd33dccedd4105dbbc", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618670276, "uuid": "40d40614-bca9-4b79-aacc-362a52b5071c", "comment": "Malware payload", "value": "906e3b52fd2125fbaaecb77ade5d2cb2bd387c1df5d50eddf978831aba5bac9436766d48b75d89a838f694ba98a4ebd2", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618670276, "uuid": "1e383be9-ad60-44cf-a804-70f7011d1105", "value": "9CF3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B496B1FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618670276, "uuid": "7025e077-f8c4-4713-83f3-f86d7f14d724", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618670276, "uuid": "9e38acae-db5b-48a2-af87-aca8793bac58", "value": "3072:oA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:o3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618670276, "uuid": "5eacb369-d0d3-4a1c-b101-4b8ae06aa21f", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618670276, "uuid": "5611ee29-0303-4596-b8e6-59c0785bf8ea", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618670276, "uuid": "3a45244e-f349-4e6a-b647-477bed5ef9e6", "value": "cb54379d1b109a1b3d63e49ab56d18b0c33003c0207ef9547f5a027deb22bd75", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ba1fa84-9fc4-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618695153, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695153, "uuid": "4c8baec6-6a5c-4171-8ccc-2452f4f6904a", "comment": "Malware payload", "value": "d893da804bd5fbecdbe4fc2479cdf1a4", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695153, "uuid": "952c45a3-de2c-4a3a-9a5b-5e4afa0fe46c", "comment": "Malware payload", "value": "cb664842249db8d79b6776f98e6b19a4ca6918910c791deeb44c89aacf967a22", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695153, "uuid": "3daf6be4-919a-42a3-a83b-bbe92cab2423", "comment": "Malware payload", "value": "7f73f6bcfe7be19fd2c4ee1eb53a180627f850f1", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695153, "uuid": "4a83ead3-5583-466c-b475-6a7ecd4d43dc", "comment": "Malware payload", "value": "b9322f85bde14e76a1637dc20eedb3d806ec04718877da2cab3fa70c5035a9dadbce606b6adecc434d4099ba28d337c3", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695153, "uuid": "4696149b-d382-45f5-bac0-2470d18c04b9", "value": "E4F3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695153, "uuid": "eaeb7e2d-32f5-4021-a506-9925fb85aada", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695153, "uuid": "950351e5-4298-4d91-9526-c320009fcfc6", "value": "3072:0iFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:3eAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618695153, "uuid": "efcdf516-6bbb-4651-9aa7-d93932009d21", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618695153, "uuid": "4eb80621-fe96-4670-b3e0-b9d4fc4453b6", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695153, "uuid": "80c68171-db0a-4313-b75e-972dd410a20b", "value": "cb664842249db8d79b6776f98e6b19a4ca6918910c791deeb44c89aacf967a22", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5af58804-9f3b-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618636284, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636284, "uuid": "e53e5d8f-7574-4a9d-b9cf-235001b9cc94", "comment": "Malware payload (Dridex)", "value": "f1c4350d53151d10dc327735cb1f8776", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636284, "uuid": "c5bda1f4-f70f-4c5e-bd90-0060933c3b4c", "comment": "Malware payload (Dridex)", "value": "cb7c41d14d4cdd3b77ac658db1a9d0c6bec0c62aa563370854ffb7654bee019c", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636284, "uuid": "ed37c55a-535f-4798-80c5-1c48e4dcb4d3", "comment": "Malware payload (Dridex)", "value": "4ac8029802e102ba4f810eb92ce53a3019f3817c", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636284, "uuid": "e3c2b7c6-ebf1-4a8a-8894-677927c3da06", "comment": "Malware payload (Dridex)", "value": "e01267eaf7fb025b8b5cee985f2d15264a0ef19ea9bd39fb4ed1f749ea3f0cc597ea4f872f061526f0dc267bc19ec7bd", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636284, "uuid": "e7c8034e-7346-4144-affc-5596ddff2e74", "value": "D8F3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636284, "uuid": "d28285d4-ac2b-459e-b0f8-6fecb2c4ad53", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636284, "uuid": "51a71961-d02f-4d45-ba29-69fb38b3a228", "value": "3072:ViFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:+eAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618636284, "uuid": "389728ef-1136-4fe6-b377-66cbb10f92a3", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618636284, "uuid": "af0ecc8d-0593-43ce-bb2e-7ee739317327", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636284, "uuid": "5d31cdb5-d674-489f-969c-8234485fcbfc", "value": "cb7c41d14d4cdd3b77ac658db1a9d0c6bec0c62aa563370854ffb7654bee019c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62a0baea-9f3e-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618637585, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637585, "uuid": "7aba1f36-8c7f-45ee-9839-2164daa4f12f", "comment": "Malware payload (Dridex)", "value": "1a1cda261233d2a0c59d905be9ffb8b4", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637585, "uuid": "6a5a6067-6a0e-4de4-9ad5-9bd148c72c7d", "comment": "Malware payload (Dridex)", "value": "cbf460969a7edb69e98bebd42a0c0b262cc696136e6909595eb53cda74e50c81", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637585, "uuid": "79c1f8c7-2bbb-4af0-b5c3-85fbc041b012", "comment": "Malware payload (Dridex)", "value": "072b3bd80c0785b7767cf6117f9ea53922e2a3f0", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637585, "uuid": "2cb0b875-b088-4af4-ad31-a05c2a998f2b", "comment": "Malware payload (Dridex)", "value": "0e0f1077fa98c5650a27c458b63841ca38bb028faec14c24e2c05f6fa7cfc246d9ae73c3b1e920695bde89d0344103c8", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637585, "uuid": "78bbaed4-f682-49ea-8e5a-7a9536597d5f", "value": "2CF3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637585, "uuid": "53086620-7947-4975-b67c-7a177aed4d62", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637585, "uuid": "bda73aaf-3095-403b-b19e-21b6d6b4dcdc", "value": "3072:niFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:8eAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618637585, "uuid": "6dc24161-398a-49a7-84ca-26dff906ab23", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618637585, "uuid": "f4da0d95-30f4-46c0-a623-5e25ef4def3d", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637585, "uuid": "7ea46355-2e7e-4a1b-944f-772b240ef3e9", "value": "cbf460969a7edb69e98bebd42a0c0b262cc696136e6909595eb53cda74e50c81", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72cfdfa1-9f72-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618659946, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618659946, "uuid": "5247621d-85d8-4739-9f07-86af0e9cc8fb", "comment": "Malware payload (Dridex)", "value": "e32c2d1697e1bf5b526fcca815efdd6a", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618659946, "uuid": "ebb5d5a7-0465-4c5d-a446-31b601d32948", "comment": "Malware payload (Dridex)", "value": "cc4cadbc077d21fd9798299f31b920bd6d4e6a8d93002c430fcb4cbe60c8e9b3", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618659946, "uuid": "2d1ec54d-79bb-4468-b798-2f113cd664f1", "comment": "Malware payload (Dridex)", "value": "6250232ed5df92109aef30d106299b0ebc7cecfe", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618659946, "uuid": "46de76db-03e3-438f-9ea8-ed5e6f7c4601", "comment": "Malware payload (Dridex)", "value": "c75a6ca067af9311bab5d9a530b1107a2914127cf1f840e79129c7c3513b47ea0224624e493fe495a72d4878961a9d63", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618659946, "uuid": "39a6a0ae-03ec-4e31-8b07-aa96dd193e45", "value": "90F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618659946, "uuid": "6a81750b-531c-411c-9374-6f64a09f624e", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618659946, "uuid": "e7add054-3371-49d3-809d-e798e0abc1e1", "value": "3072:PmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:OLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618659946, "uuid": "175e528d-dc58-4587-a944-8ebf642aa4e4", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618659946, "uuid": "fe61f74f-6e14-46ec-be06-d9a217ee6452", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618659946, "uuid": "ccd25520-6989-49fb-ac72-c3c0dd7ad405", "value": "cc4cadbc077d21fd9798299f31b920bd6d4e6a8d93002c430fcb4cbe60c8e9b3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92b284c7-9f3f-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618638095, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618638095, "uuid": "4f34f422-c267-45e8-bc3d-62053cbd4ad7", "comment": "Malware payload (Dridex)", "value": "d4302499afc2399f6cb67271195222b7", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618638095, "uuid": "387800c3-101a-4240-88c0-8d9d2f2d881c", "comment": "Malware payload (Dridex)", "value": "ccc96c74730e78951bc2086085caad8c2f03aa062848a0e8c298081960d7c010", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618638095, "uuid": "3bf37752-75f6-4b70-a233-1b47caa29163", "comment": "Malware payload (Dridex)", "value": "b64ec06f80b064f635d5a2ecb7cce8acd50b8869", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618638095, "uuid": "6499df8e-f038-493b-9bdf-6a99d52c4909", "comment": "Malware payload (Dridex)", "value": "dbc9a21ca90528b2a6300fe256b4e425201083538ffe0880491d9c2453a9b975053ff2354f235fb10657b58fa6e48400", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618638095, "uuid": "89b42af1-fc4c-4052-85bc-eb16cb47b06b", "value": "E9F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618638095, "uuid": "7c7fe1af-9dda-422a-8d82-34c184bb7407", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618638095, "uuid": "7bdb4a40-3e34-45b2-b747-30e1cd5879d0", "value": "3072:XmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:2Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618638095, "uuid": "23b7bf83-79fd-45de-8fe3-65304aed5a2a", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618638095, "uuid": "ee79911e-4351-4cba-a311-f1af37093cbb", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618638095, "uuid": "60821a57-db1d-44f7-8070-76b3b671c671", "value": "ccc96c74730e78951bc2086085caad8c2f03aa062848a0e8c298081960d7c010", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d0cbd09-9f8e-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618671882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618671882, "uuid": "0e10bb5f-61e3-42ea-a430-3dc2a22c430a", "comment": "Malware payload", "value": "bcf27f6eac0e86a7a77a8214c2237054", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618671882, "uuid": "efca4d9e-5bfd-463e-89cd-a27068a10c1a", "comment": "Malware payload", "value": "ce24719f282d5b89bf8fb3dfaf6a754b76b7a7261eeb26b5bab79eb8474d4e70", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618671882, "uuid": "f840c725-b96b-459b-8210-e3e873cfc031", "comment": "Malware payload", "value": "c69b63ac0ab02e2bb565ce30a4f0192b3e69798d", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618671882, "uuid": "0b5111d6-2587-449c-b30c-effee981af3a", "comment": "Malware payload", "value": "c7a6821f24c279360c5cbbb5c3d1d3fe8de9f8c8d7eec37798592024b54042c6309c2db4020cdab8f9f1db7aef6bb20e", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618671882, "uuid": "1cf97315-5129-45fd-9e69-b261722a6fc0", "value": "B4F3D088CBB3E4E6EFB3D37866F85E1B561174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618671882, "uuid": "a00de0f0-ba9f-44aa-a66e-8dcdffd7d505", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618671882, "uuid": "7280fede-1718-46a2-b36b-af042a57e3be", "value": "3072:BmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:wLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618671882, "uuid": "62f04437-3b8e-4461-b961-08ec8ddf8962", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618671882, "uuid": "cb4d5623-7cdb-4f54-8bb0-3ed8383c62a8", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618671882, "uuid": "c2d84f9b-7f76-40f2-af05-d51d8ecc9bc6", "value": "ce24719f282d5b89bf8fb3dfaf6a754b76b7a7261eeb26b5bab79eb8474d4e70", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8dcdbee7-9f24-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618626491, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626491, "uuid": "8d6bf42b-f375-47ee-8044-197cfc0a7c7c", "comment": "Malware payload (Dridex)", "value": "2d0b5d24c60511c75a06343bbe12683b", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626491, "uuid": "4ea4ed17-17bd-47b2-8e63-bdc04c17537b", "comment": "Malware payload (Dridex)", "value": "d021b924963c0ef2e7413ab0b830d8a722f4cbbe4f3b59c7bf1e5f09060eec08", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626491, "uuid": "eaee116b-5d26-4a61-82ce-7e1434b5a711", "comment": "Malware payload (Dridex)", "value": "7e450bee8509547a470fceab82e184b29c842d81", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626491, "uuid": "34d6b369-ca54-4d8f-8578-14c269a3d5a5", "comment": "Malware payload (Dridex)", "value": "ab91b7d20b12477c18bfe0f754d76366c6fcb968ac22283bd71728df8944cb7ae3987030bb616e5963797392680cd970", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626491, "uuid": "7db1bb6a-a7d1-4197-a7da-b10188fa3646", "value": "5DF3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626491, "uuid": "5d9f3d14-b211-4095-86a8-fda247fd963c", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626491, "uuid": "c35a88dc-773a-4ddc-9be4-dabfd1894f35", "value": "3072:piFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:aeAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618626491, "uuid": "3b789f5b-d3e7-42ee-9bf5-471a9ad9c5bb", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618626491, "uuid": "53f2452b-0a0f-412d-82ae-8c502c3f7925", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626491, "uuid": "6161c504-9a18-40ed-b38a-bca43ad78d70", "value": "d021b924963c0ef2e7413ab0b830d8a722f4cbbe4f3b59c7bf1e5f09060eec08", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8089020-9f79-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618663069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618663069, "uuid": "8fe066ec-46b7-429a-89cf-2d31ba198d2c", "comment": "Malware payload", "value": "f5da7e171fe4c0de190996146440ddf2", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618663069, "uuid": "b1f96c95-32a8-4844-b65f-8db39c30660a", "comment": "Malware payload", "value": "d0ce9e5bac6d63214b855569e4ad95e687b802a95b1584b256602dc40385aa42", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618663069, "uuid": "f788c50e-d08e-4cdb-9913-b8784d80d54e", "comment": "Malware payload", "value": "549820d753e72cac26f79f0c1c6f626357cbb0d7", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618663069, "uuid": "3277e8f5-2513-4a63-931c-3f788a9e7772", "comment": "Malware payload", "value": "7f5070578b94f39269cad8c450c76ebd38a494c2e7d16211e71355a767a674085170f2fae814982babbf4a0f2908e12b", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618663069, "uuid": "2f048d1f-d555-444f-b355-b64b936de41e", "value": "8AF3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618663069, "uuid": "0fc00e16-d817-4205-b067-8cf8bed96493", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618663069, "uuid": "ea3a433a-1058-46df-a88a-8e949d5eb812", "value": "3072:PmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:OLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618663069, "uuid": "c893878a-a579-4df9-ac9b-d21985ebc47e", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618663069, "uuid": "e32934b3-9cf1-4975-9d36-16459b058276", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618663069, "uuid": "c29fbcd8-d5ff-471a-a659-d7ef9a72d43c", "value": "d0ce9e5bac6d63214b855569e4ad95e687b802a95b1584b256602dc40385aa42", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70c2ee95-9f7e-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618665097, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665097, "uuid": "0f273788-4ee1-47a4-b9a0-8c8d0e84c52d", "comment": "Malware payload", "value": "134cec932b7173362aae1527fe567c11", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665097, "uuid": "1a791cf7-dfa2-47d2-9326-0dabfef736b6", "comment": "Malware payload", "value": "d116a06cbcc86b73e4c5dcf36b7d83f0f15a8d8d2e09a1721834aa4a1d8f554f", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665097, "uuid": "d237c3e6-454e-4c1d-8b30-1133d1e958eb", "comment": "Malware payload", "value": "0851cbc75644867999b4bb3749442128668692ba", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618665097, "uuid": "f8f93d96-66e8-4b0e-97c4-7aa305996947", "comment": "Malware payload", "value": "94ec59b1cbff3b6f8a3026ac116afc8d1211650e7ef3fa7434961017fdd87cca14a13b0d52dd2fa7e080563ccf221dd1", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665097, "uuid": "25d3dcc1-7627-43a2-a204-307d3ac81f1a", "value": "48F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665097, "uuid": "b9437ee1-8d32-45a8-8898-b9a48d14a1d1", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665097, "uuid": "1e55a9e4-22f0-405b-9d3a-6a51e7208d36", "value": "3072:zmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:CLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618665097, "uuid": "ab6fb35b-83f8-4b84-bcab-58a93b7fdd06", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618665097, "uuid": "cf4b2a43-745a-4ee2-9822-b9a3b331ee22", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618665097, "uuid": "827edee9-49d8-4992-8847-ff29de2131a9", "value": "d116a06cbcc86b73e4c5dcf36b7d83f0f15a8d8d2e09a1721834aa4a1d8f554f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7bf4d12-9fb2-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618687550, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687550, "uuid": "ef2d3eaf-7376-4308-879f-77a9ac5bf801", "comment": "Malware payload", "value": "a3b8c0a977eecd7e89a3949a8e232aed", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687550, "uuid": "a830d3e4-abf2-437f-8030-17eafc059031", "comment": "Malware payload", "value": "d124e46475e7207a312f9900927f3a5f233aae412ee5d0cbb3936a9b39c08eaa", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687550, "uuid": "c3d39bf6-24cf-499a-8190-cf28841b75f0", "comment": "Malware payload", "value": "80b8ef0d45dab9a6654b2f5b34c2e0908f2920dc", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687550, "uuid": "7b0fcc2d-c57b-4418-8541-2715ea31894f", "comment": "Malware payload", "value": "abfecc582dcb7e1caa86191da0394c38aafc48f98805e79e0cd10294b3f24f7d79032fc30ac3fd3719ee05d30d45a58b", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687550, "uuid": "afe92e74-ae83-43c8-adaa-bebe79404528", "value": "DCF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687550, "uuid": "b5ae5eed-51fc-4935-abbe-cc98377138d7", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687550, "uuid": "64442e92-e62e-4113-a3be-ee4a09597bf5", "value": "3072:ZmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ILc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618687550, "uuid": "973a25a0-f585-42c3-bb41-3573ce54efac", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618687550, "uuid": "52126d91-0767-4930-b603-3cbfd7a8fa4e", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687550, "uuid": "6598bd3c-f7b6-4598-a2dd-0232e080374a", "value": "d124e46475e7207a312f9900927f3a5f233aae412ee5d0cbb3936a9b39c08eaa", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e7f6731-9f13-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618618976, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618976, "uuid": "66252b47-40b5-44ec-8cf7-12e1d6ad251c", "comment": "Malware payload (Dridex)", "value": "4b7a9668f9292965049c5e3d6531593b", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618976, "uuid": "d1e56d3c-7366-4334-8932-2be9c1e9a583", "comment": "Malware payload (Dridex)", "value": "d1709bbe1463d1602f20e53645968e51ddc7880b41667fdeef6436d53a425af4", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618976, "uuid": "194d1eca-10d2-4463-beab-3e1f1f798ff3", "comment": "Malware payload (Dridex)", "value": "2f2436d2a9a07db4ec5f057480d12e85d5d828b6", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618976, "uuid": "632a4014-f055-4780-937d-bf6fec0bd328", "comment": "Malware payload (Dridex)", "value": "576ea218339f42dcb0511343a8518c570fdb1a11b83323c742b4f8aea9447d18fb34131adbc7d7fcd1aeda7296746d33", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618976, "uuid": "d71c6360-c36c-4ce5-84f5-56e0c7ce07d1", "value": "6DF3D088CBB3E4E6EFB3D37966F85E1B461174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618976, "uuid": "ca1263d6-13c1-4aa6-9456-4ab622fbe17b", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618976, "uuid": "645bf05f-4423-4143-96e0-9f69102379cb", "value": "3072:dmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:cLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618618976, "uuid": "c485c051-1d24-495c-aa31-9c721508d2ae", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618618976, "uuid": "d70c48fa-bef5-4c8e-90ed-faa27ef9a74e", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618976, "uuid": "9aa81efd-2ed0-4bab-824f-a46d9423e5fe", "value": "d1709bbe1463d1602f20e53645968e51ddc7880b41667fdeef6436d53a425af4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9477ee19-9f6d-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618657855, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657855, "uuid": "0a386422-bf30-459a-9901-eee9ea34c5cb", "comment": "Malware payload (Dridex)", "value": "ea896bdc78d22eb6fc5d39b0ef38e712", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657855, "uuid": "ccb4e84d-01f4-45cb-b108-942ed409b48e", "comment": "Malware payload (Dridex)", "value": "d1c4f0092a7dcc806edfe50510fb4d91c9526e50198dfed123ad71f5498eb5a0", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657855, "uuid": "30701555-e29b-4a90-8cd2-6616a29006ad", "comment": "Malware payload (Dridex)", "value": "d2959a8efaf9fa6fabe5d7da75c5cb0692df8f4c", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657855, "uuid": "dcd8c6a3-4fb1-483d-86d0-30cb83fb03be", "comment": "Malware payload (Dridex)", "value": "d5c2c85aa246267063d83a197f1912362260dd56122ac5e8f24affd19731f6bad0032c39e9c25a64c0fce142a9ac6724", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657855, "uuid": "506c89de-637c-443b-9384-2b2e87d0e9a5", "value": "86F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657855, "uuid": "f7ce4aaf-d30c-4575-ad1c-c90dd2f61921", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657855, "uuid": "13d38d76-c3d3-496b-a554-56ddddf802cb", "value": "3072:SmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:DLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618657855, "uuid": "c35b8bd7-0772-4e05-9723-cc9efe1b1d5a", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618657855, "uuid": "841946d5-8549-43c9-a084-0261a62fc8f0", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657855, "uuid": "55bfb457-6be6-4d24-b0ec-e2770b6fb85a", "value": "d1c4f0092a7dcc806edfe50510fb4d91c9526e50198dfed123ad71f5498eb5a0", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "216686d4-9f5c-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618650361, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618650361, "uuid": "8b53929c-a211-4225-89a0-ccfe0e8e202d", "comment": "Malware payload (Dridex)", "value": "7d99b5b84e51f027038f97b18a932a23", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618650361, "uuid": "02e3d669-7022-43ed-9b01-553e2b443b7f", "comment": "Malware payload (Dridex)", "value": "d1c5efd2a4dbcfd45c9f94bf2a0ebccc71185ceb3edf052a332d1152c66d0d83", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618650361, "uuid": "ace7f24d-4672-41a1-98cb-fb81722202d1", "comment": "Malware payload (Dridex)", "value": "a6e87761f5f19577a23782e3dbbea2df167a7247", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618650361, "uuid": "735164fe-53a6-4857-b965-3333e7a7a158", "comment": "Malware payload (Dridex)", "value": "ebf86b539f58c40c6a6779cef41c75d5d2a03e4c267085fd53b6a8e19e6176cc5041aed3f9bde75d4ceb8d7652eb790a", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618650361, "uuid": "3a28525f-b486-4daf-8ecd-40455624a15d", "value": "F6F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618650361, "uuid": "02cfa4c1-d8ea-4579-bf39-41c9eaf28a59", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618650361, "uuid": "bf0d7237-6a5e-484e-8a71-254cb961c13f", "value": "3072:fmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:+Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618650361, "uuid": "437862f6-0b44-4195-8c27-15202185d3f0", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618650361, "uuid": "f852311d-cd95-4418-80dc-0fde953e573e", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618650361, "uuid": "64590d8c-3794-4d0e-8ab7-f5833911473a", "value": "d1c5efd2a4dbcfd45c9f94bf2a0ebccc71185ceb3edf052a332d1152c66d0d83", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0b4b2e4-9f2d-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618630522, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630522, "uuid": "8bbd9454-e69b-4064-98b5-7380393fd76d", "comment": "Malware payload (Dridex)", "value": "bfe4bb145cd87b718045a8242aca473d", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630522, "uuid": "a86b8dd4-3d5c-4791-841b-2a9f71c9a7a0", "comment": "Malware payload (Dridex)", "value": "d23ee93eb77240a64368173f5c1bdf158fd7a4fbec8c4bae04f91d485127b7b5", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630522, "uuid": "c5c67f04-5d8a-4a34-96cc-616e1902e459", "comment": "Malware payload (Dridex)", "value": "6d77a29db3388ecc65136279f70236a38052f891", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630522, "uuid": "24b70140-de19-4467-91dd-eab6d254cb56", "comment": "Malware payload (Dridex)", "value": "5779f47617c986fd1a102c694d5c4c798ec80c7a9f5cafc85bb2f6645006f0f2bf79a4913e2120e06142fceeb796be77", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630522, "uuid": "31a3b54c-3dbb-4fbd-a47b-55f743145783", "value": "F6F3DF08D1CFCA46E00B69700D9A761BB79839812F7C8EA8B496B1FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630522, "uuid": "88f9765d-06d5-4ca7-bb75-28ce51b0eb22", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630522, "uuid": "d8835835-5338-4775-b2c3-9a5263fbef2a", "value": "3072:/A6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:/3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618630522, "uuid": "6ab367aa-6bbb-48d9-863a-aa79ef8f00d6", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618630522, "uuid": "2dd1a451-8d3b-41cd-aafd-b5e1ec0b1423", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630522, "uuid": "ebf9ed01-d2cf-439d-824a-076f45d8a590", "value": "d23ee93eb77240a64368173f5c1bdf158fd7a4fbec8c4bae04f91d485127b7b5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f94f0d28-9f38-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618635261, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618635261, "uuid": "19b2e0aa-aeaf-4f55-a9dc-b9e3ca640b81", "comment": "Malware payload (Dridex)", "value": "5a04d87fc269bea1f9b64f63160e384a", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618635261, "uuid": "bf23ee63-cf1f-4671-937b-3a2a95c26c60", "comment": "Malware payload (Dridex)", "value": "d26cf7527dfd3d43faa1465045900d7b665b4f59607dc779fb3b9ec3a8b3f772", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618635261, "uuid": "f9969447-820b-446e-b95b-3d5178f789df", "comment": "Malware payload (Dridex)", "value": "f4833d9d24aa63f56b51a0674dd346351ce613ec", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618635261, "uuid": "8c4fafc1-1593-469f-a077-576fe8b94bec", "comment": "Malware payload (Dridex)", "value": "4e32b2e9daa2d6915aae66b2c0ac28c436e8ffe3f92358d51e6f75c8f8db3dcd86fc9d5fab0c60694aa3afd3e01c584c", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618635261, "uuid": "69832743-b46e-4549-80e5-715ad060dfba", "value": "EEF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618635261, "uuid": "9f7feaab-1027-4509-a3ad-84bcc907b9db", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618635261, "uuid": "97bb2a48-3e88-426d-8776-eeb6a92ae4ed", "value": "3072:pmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:4Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618635261, "uuid": "1f44bb24-656a-4e42-aaef-e34da797030d", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618635261, "uuid": "16cc4493-cbf9-4193-b5cd-7083ea348ccc", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618635261, "uuid": "8455b4c2-7af7-4077-b3aa-05d973ebbe31", "value": "d26cf7527dfd3d43faa1465045900d7b665b4f59607dc779fb3b9ec3a8b3f772", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88fadc27-9f37-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618634643, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634643, "uuid": "531b4ddc-70ae-447b-85a4-fb8f4ddc0163", "comment": "Malware payload (Dridex)", "value": "7debefc2416e76e9092bed3d26550487", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634643, "uuid": "958f6cf2-7f90-4c94-9a98-57edc54580c2", "comment": "Malware payload (Dridex)", "value": "d27b355a0d415470f337c181d0fb944c760a220489932e7bc8cb61d2061fd588", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634643, "uuid": "b3c7c092-d476-4705-bdd6-0187061498b2", "comment": "Malware payload (Dridex)", "value": "6677484e693f269bcb32d3820328fbfbf67dd214", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634643, "uuid": "344398a7-e185-4e4c-8976-3ecca5caef52", "comment": "Malware payload (Dridex)", "value": "5e7d4426c6ab8c35cda827d2f4adfddd69552db44cdc62462f2eb64e868f4bed534efd2d7cfb67ee96479c36bbde6d4b", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634643, "uuid": "889a60bc-f219-49f8-85f4-7b46c8826814", "value": "84F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634643, "uuid": "5b450274-72a0-48d3-9e5c-fc1c920c4b24", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634643, "uuid": "5518d92d-4e72-4847-b9d5-109ab4ccc85e", "value": "3072:FmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ELc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618634643, "uuid": "dab96bad-b0b7-4c46-840f-8bf59d47dbd8", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618634643, "uuid": "53181888-1e5f-412c-9855-c80fd9a660c6", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634643, "uuid": "bc171a14-f8b2-4f8f-b62f-0fa3f513144d", "value": "d27b355a0d415470f337c181d0fb944c760a220489932e7bc8cb61d2061fd588", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6a79bc4-9f3d-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618637323, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637323, "uuid": "990a2a27-e82e-4878-9d73-beb5b8a88283", "comment": "Malware payload (Dridex)", "value": "fd9bbd8a810a6ea52c5e8e0c4569b967", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637323, "uuid": "e6656e70-4d4f-44a4-9323-ec06d0d73207", "comment": "Malware payload (Dridex)", "value": "d3b7761e055567416f0ec6f18048e92d01c416472c0e5f623b4b43a42c0c9924", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637323, "uuid": "0311e761-6155-4d03-8585-5019d737b7fb", "comment": "Malware payload (Dridex)", "value": "f6b4d406685555fbe3d628209ca1c4723de68c30", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637323, "uuid": "34387e0e-ac6d-474a-81ac-eef548e580a7", "comment": "Malware payload (Dridex)", "value": "12a1244957c43ee44c7216c792c6dee5ca651fcfe6e8dedd3bdbe58aed284288fbed714bd1cee9c6944e4c01a50cd78b", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637323, "uuid": "976e982f-9e10-4c52-a54e-1bf29b91b438", "value": "6AF3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637323, "uuid": "2bfb7727-1c56-4434-8d67-0d1ffc85b2c7", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637323, "uuid": "15e5044b-31fc-4d95-962e-6a0c267dec8e", "value": "3072:xiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:CeAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618637323, "uuid": "3fc73435-0dee-4e65-82f7-12b60cd875c8", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618637323, "uuid": "915de628-8023-4383-acfc-ba4bba15d252", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637323, "uuid": "20efcc54-3c31-41a3-a41b-351b252496e4", "value": "d3b7761e055567416f0ec6f18048e92d01c416472c0e5f623b4b43a42c0c9924", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "968d7ade-9f25-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618626935, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626935, "uuid": "ec95867e-45aa-4401-851b-009d7817efff", "comment": "Malware payload (Dridex)", "value": "201960a8ae6fe65e388cfb6a0e460ac1", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626935, "uuid": "d3b07527-4799-47f6-a21f-0023e2e7fcc5", "comment": "Malware payload (Dridex)", "value": "d5273a745f3051ee08a62736025c4cae5f69a028a1f91034de8e282c0408987b", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626935, "uuid": "d8ebf52d-763d-49a5-beb4-1049f1fce3f5", "comment": "Malware payload (Dridex)", "value": "3bcc5ad2b9cf376f320581e80f655a8be9975d48", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626935, "uuid": "a9d35dc8-8c47-4d26-99bb-6e4a991b7c08", "comment": "Malware payload (Dridex)", "value": "b9c3746e29971881b336f69707affbd05b406218c30db074cf82207264441b923c3e08174370b997b9a167d21bdde2d2", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626935, "uuid": "9ccc6ae9-3b39-4960-971f-356cf2aebeeb", "value": "71F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626935, "uuid": "4e2c7e2b-1865-4eae-8b0f-4059e459c36f", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626935, "uuid": "a50244c2-92a0-4a34-a3e8-8f989aef6196", "value": "3072:BmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:wLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618626935, "uuid": "7dd0593f-1ab5-49e6-9c50-7135cf2cc26c", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618626935, "uuid": "4ad2fd42-636d-45fe-aea5-2a18840690d3", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626935, "uuid": "204dbeab-5c1a-45f0-b5d3-f49bd24c63ed", "value": "d5273a745f3051ee08a62736025c4cae5f69a028a1f91034de8e282c0408987b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "068efcd9-9fd4-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618701855, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618701855, "uuid": "159f9ea4-b791-453c-ba2b-14bfecf9087c", "comment": "Malware payload", "value": "df28ccb51c89781a4fa6dec605175316", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618701855, "uuid": "55dfc579-e5c2-43c9-b3e0-bef29e5c0146", "comment": "Malware payload", "value": "d528b5b8aa4ca9bd128135dfac1e5f40fbfc94d083654433e0256f2cf82a8d42", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618701855, "uuid": "98b0f4b2-0cc0-40f0-9415-147cdb15b746", "comment": "Malware payload", "value": "dfa4ab75ed2df20f9de06bbcdf63f590f9a7d271", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618701855, "uuid": "9a69e4ff-071e-4c30-ad37-03ffc5615eff", "comment": "Malware payload", "value": "fbf082eefa735699e841da38ed94d58c37efeb67ab97ea19f1f85202ddf8b437589fed97017022aaab39c8701166a6fb", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618701855, "uuid": "e73cad2f-1233-4ad0-86d9-90ab492e2c7c", "value": "4EF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618701855, "uuid": "429bd8a2-f7de-4e8b-a996-e1164fbabb69", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618701855, "uuid": "916dcdab-521f-4ad3-a882-99f5bf6b4393", "value": "3072:tmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:MLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618701855, "uuid": "b37c132f-1162-4738-8c7f-fbb5e559ecbf", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618701855, "uuid": "0c628a8a-d62b-493e-9a39-5e12f7a73096", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618701855, "uuid": "269295fe-4051-4329-8930-7eeb76084e20", "value": "d528b5b8aa4ca9bd128135dfac1e5f40fbfc94d083654433e0256f2cf82a8d42", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ecd9becb-9f12-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618618919, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618919, "uuid": "ff1d4fdd-52f7-4c4f-af66-b2625e73b4be", "comment": "Malware payload (Dridex)", "value": "b2a21ce42a3938550efa202b081eebd6", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618919, "uuid": "e38b247a-05f4-4d8f-aee2-c734d19857fe", "comment": "Malware payload (Dridex)", "value": "d53a5851bfc77bca0e0cc5d89be67c86a485b8d5f88af6af79bfdbfd4be7d5cb", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618919, "uuid": "ccb5b31d-a40c-44f7-929f-f96a72f9be03", "comment": "Malware payload (Dridex)", "value": "5b1eda393ca8a26425e75e0faa07997960c41288", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618919, "uuid": "bf3a4dc2-906d-4f4b-8188-bf9a4527a793", "comment": "Malware payload (Dridex)", "value": "42a2e0dd2285d6f74ce63b95850fe360587ea10372e8638d54f7237cad48bc00b99be8438f8d1d4c200c03d553c6e5b9", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618919, "uuid": "e9a5a2d9-7ba1-48ff-9e24-c5ad565d2879", "value": "3FF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618919, "uuid": "067823dc-21ac-420d-951f-15769d84e32f", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618919, "uuid": "60032e58-0b2c-4eb3-843f-6accd0ff2318", "value": "3072:FmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ELc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618618919, "uuid": "f487772d-b67d-43b8-918f-32d74db226f8", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618618919, "uuid": "e5bc5e79-f901-429e-bb40-7321e083c5d0", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618919, "uuid": "4e3c8e03-4547-4e64-9c24-a25cc025aaad", "value": "d53a5851bfc77bca0e0cc5d89be67c86a485b8d5f88af6af79bfdbfd4be7d5cb", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40f86d69-9fd6-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618702812, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702812, "uuid": "af8b8aaa-f655-4359-89b9-81be1c6c6ab3", "comment": "Malware payload", "value": "2307a17d996da1d968102a3961daa404", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702812, "uuid": "11254226-c450-4afa-bdf5-d4bac12b253a", "comment": "Malware payload", "value": "d53ae7b028389cee3c9dcdc7fa3d86e56f9fc43f9befc54ef7d0fe5161ab21d0", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702812, "uuid": "83dfbde0-a93e-4206-b8e8-67b50af61eb8", "comment": "Malware payload", "value": "4e058eee7d1dcc876184ec36d9ab2e0bcbbc6491", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702812, "uuid": "86fa2673-9544-44bc-8068-14c1bb1e63b3", "comment": "Malware payload", "value": "e48abd7c0db8a64c49c0b9ee3a9f1e9ae58d026d27af0a96a3b199433eef4c0d71ee83cdb79e149e158aefb785992f71", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702812, "uuid": "fc4fb84d-4788-4bef-b2fe-ba6caf418611", "value": "4FF3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702812, "uuid": "6282151b-b2de-4923-8dcd-a2d185ad0242", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702812, "uuid": "403402f9-0ee7-4e0c-ae09-c25e44d0e310", "value": "3072:FmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ELc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618702812, "uuid": "1576f20b-3f93-4d3e-aa1c-96b72cb65586", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618702812, "uuid": "c5862d38-cbf0-428c-b9b4-0c64cc96a295", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702812, "uuid": "f7695f44-a8a8-4788-b5ea-7cd5f511dd8e", "value": "d53ae7b028389cee3c9dcdc7fa3d86e56f9fc43f9befc54ef7d0fe5161ab21d0", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c934b567-9f55-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618647636, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647636, "uuid": "4c343292-db94-4eac-8136-d447a8d82459", "comment": "Malware payload (Dridex)", "value": "fdd05efbd3ff0de9cbbf0433562502d4", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647636, "uuid": "08433d29-7e00-44c5-baf9-0e4fc1c19f17", "comment": "Malware payload (Dridex)", "value": "d5809f16580762514e26166a3fcf009c3d7a37108e86b39c21670e74582baef8", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647636, "uuid": "0c3cc3eb-917e-4a1e-9a65-6f6cbc188f97", "comment": "Malware payload (Dridex)", "value": "7d1642d99da55427539bf478662b4bd52834c33b", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647636, "uuid": "815c135c-92c5-46e7-adee-2c9b63e77bb8", "comment": "Malware payload (Dridex)", "value": "01aefc0bd606e71612664dbe9d6e60727fc58c721b7a28af4825a63b93be66c1981d82d1f49810d5ab1880ce6e2012af", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647636, "uuid": "548e752a-d871-488f-82be-f27f388203fc", "value": "83F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647636, "uuid": "f66c9130-70ce-40d0-bbbe-df9499c01734", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647636, "uuid": "58ac446f-0155-4565-9a64-2f6fe7727e79", "value": "3072:pmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:4Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618647636, "uuid": "cf96e0ff-0f72-40cd-9a37-bb13fc6e5113", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618647636, "uuid": "acf9d545-4816-46e7-aac9-4a136a497f1b", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647636, "uuid": "db355341-6538-40d3-a576-ac8922392df0", "value": "d5809f16580762514e26166a3fcf009c3d7a37108e86b39c21670e74582baef8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9c95dc6-9f32-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618632658, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618632658, "uuid": "1884b9ae-057b-44ed-bac4-b0f4b21b7906", "comment": "Malware payload (Dridex)", "value": "44e90802f6a671175a4afc7bc3998961", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618632658, "uuid": "74e1073b-303b-4cce-b26a-def7331f4e87", "comment": "Malware payload (Dridex)", "value": "d6141cec8b41f2635c2d6f2277a75f941652ecfdd5c31ffb9f8809e932e3d558", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618632658, "uuid": "ee053bbf-2738-4cbb-8c33-21319af51b88", "comment": "Malware payload (Dridex)", "value": "1e708d9c5b6859e7e3baa2e557e0dce5e45789ae", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618632658, "uuid": "57c98ce5-de35-4b90-87ef-82057cdccaaf", "comment": "Malware payload (Dridex)", "value": "7af02b5f0277300cd8cb636b9af0a2c7885794bfdd9e016a64c35d92691815eaae83245b289f35bd75bd654320224046", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618632658, "uuid": "68ccbc8f-fb74-48a4-9e28-14cfcc5ed754", "value": "73F3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618632658, "uuid": "bbfc84e4-d0f5-4e57-9092-7f123480661c", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618632658, "uuid": "164d77a3-a3dd-4b8e-89e0-0e55f1303c17", "value": "3072:ZiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:KeAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618632658, "uuid": "1895c02e-fcd2-429b-be1a-1614c584e3d9", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618632658, "uuid": "65e7e6b4-0a30-48aa-8ecb-e94d621fc46c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618632658, "uuid": "770651fc-120c-4af0-877b-5804e39cdb84", "value": "d6141cec8b41f2635c2d6f2277a75f941652ecfdd5c31ffb9f8809e932e3d558", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c84a5db5-9fba-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618691013, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691013, "uuid": "85662ae2-2d90-45c9-ab43-32a0cbfe3b81", "comment": "Malware payload", "value": "40a628d27bbdcebabb2037923d4f1443", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691013, "uuid": "9b8889fe-fe53-4062-af5f-d3387b5fc81e", "comment": "Malware payload", "value": "d6f1ecccebd3ad9e9a494db8b47200198670c890794db3cf1feb479a46a52527", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691013, "uuid": "7c87bb69-8151-42b3-8867-1360ab959dd0", "comment": "Malware payload", "value": "8cdda9ed041e28dc534c75a7f675a787440d511e", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618691013, "uuid": "dea213a6-8e07-4ad0-a36a-d625be70b11a", "comment": "Malware payload", "value": "ef77d3ac374aacca1597683f69510a7b8602142abf6f12d619f8155307b41799c10eb32bda5e569ded5af076ac382cf9", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691013, "uuid": "42123869-ff50-43d9-9ed4-c22c58f1a829", "value": "D4F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691013, "uuid": "0681d79b-df51-4eff-a332-08a88ad3a29f", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691013, "uuid": "8a5aa8a3-7cd4-4092-a3a0-fede087ceeb1", "value": "3072:PmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:OLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618691013, "uuid": "a51b388f-aa32-4cf8-978e-d0e7711e6d35", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618691013, "uuid": "9620c509-997f-4ef4-a1d6-1959f7514a7f", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618691013, "uuid": "a680dd08-3092-4829-b848-ed87f1c9884a", "value": "d6f1ecccebd3ad9e9a494db8b47200198670c890794db3cf1feb479a46a52527", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba7e2ece-9f89-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618669945, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669945, "uuid": "6de300ff-9b0d-4112-8dc6-9f3b53368013", "comment": "Malware payload", "value": "b79dacdbd2a197bc4c843a196b6d763b", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669945, "uuid": "aa00cced-ccc8-4f2e-9446-c1aa5ca791c0", "comment": "Malware payload", "value": "d796afd162a83c1f49f15feb26833c2c57eac56d34396783bf863417ebd74588", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669945, "uuid": "caed9b8c-c8b1-4cdb-848f-dbc1fc841aee", "comment": "Malware payload", "value": "73f31f575b7fa5bd24bc16b48d571ec2de52e65d", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669945, "uuid": "5295d1c4-c969-42a4-9340-f14a933b06cb", "comment": "Malware payload", "value": "d514b5aeaa2eaa416dd7e3a8d2fc71122892402154144bd7738dba174221526b52faf286a318e620347acc32e46983b6", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669945, "uuid": "f1b42c03-4424-409e-809d-82de993baaf4", "value": "46F3D088CBB3E4E6EFB3D37866F85E1B461174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669945, "uuid": "6bad3d0e-e08c-4b75-8dac-0e31a4c2b2c7", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669945, "uuid": "6259365c-057c-43be-95b8-efbd5adab51b", "value": "3072:2mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:nLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618669945, "uuid": "8d7e01ee-3060-4604-9c62-2f79c51b9b79", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618669945, "uuid": "ea6a2c81-ffa4-4068-a777-19f0a65d38b5", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669945, "uuid": "cfaa707d-a1ba-4c2e-9b52-9243244ded39", "value": "d796afd162a83c1f49f15feb26833c2c57eac56d34396783bf863417ebd74588", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53b273dc-9f48-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618641855, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641855, "uuid": "8ef1c39e-fce2-4653-a857-0f053f3843ee", "comment": "Malware payload (Dridex)", "value": "ee04589af9dfc9826b427f7421c16789", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641855, "uuid": "7370f22a-1f4b-45ae-a1d4-349780f32101", "comment": "Malware payload (Dridex)", "value": "d7d9b59cb3b43e3caf3f70cb0fe660191441aaf1061b2182246f7e01176048d6", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641855, "uuid": "a6046aaa-9ea4-40c5-be7d-e15d6f1aa675", "comment": "Malware payload (Dridex)", "value": "cfce611a92dca633f7d119aae32bca4d2fb286d8", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641855, "uuid": "7cd4f2a9-8949-4b3e-bedc-844e2083495f", "comment": "Malware payload (Dridex)", "value": "c24fa2c667a491df65ff67dff847b03e73825dbb3d21e394302ebd1bf5c89ccce232359d48289bc4756000e257d02f7e", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641855, "uuid": "3dc0048e-6811-45fb-9aa6-593f6a1187ed", "value": "0AF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641855, "uuid": "d60124a0-f997-46be-b6f4-417a920aef03", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641855, "uuid": "3dd6bb0b-b46b-4a8d-94e3-ba9c57db44e1", "value": "3072:CmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:TLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618641855, "uuid": "93705f10-9a36-416b-9ad4-4de91d46dc85", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618641855, "uuid": "d3fa2b91-8bba-42f9-b3a2-c95ed12eed9e", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641855, "uuid": "42db5532-2b28-4832-a445-9a30e7ccdf94", "value": "d7d9b59cb3b43e3caf3f70cb0fe660191441aaf1061b2182246f7e01176048d6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "843b9d8c-9f3e-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618637642, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637642, "uuid": "a8764ce2-2cd2-428d-94bc-a89cb8e93672", "comment": "Malware payload (Dridex)", "value": "277ff8b23196aae6a0700ac498dfff62", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637642, "uuid": "c2718764-514d-4156-9b0b-561f91d5daf5", "comment": "Malware payload (Dridex)", "value": "d848a4771a49d1ef9e9326b51df29bf58250bb394275b2095a479a86663bf353", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637642, "uuid": "def063a7-b436-46fd-affb-d043686ff041", "comment": "Malware payload (Dridex)", "value": "2b5c0cfba0c8033e0261541d0b1d0e9589f7b09a", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637642, "uuid": "8197f66a-682b-4558-b1cd-8b597b6acd69", "comment": "Malware payload (Dridex)", "value": "b47288e2bf6161bff7d647719ced19c85210291e3081aedc45dd8371bf7d641ac440f06c094fbd2b2dd8b3b019867004", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637642, "uuid": "994a1719-c0aa-4349-ba8d-e277fe18df5d", "value": "FBF3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637642, "uuid": "bc630c7f-c3dc-4216-b6c4-7c1b8328e3d7", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637642, "uuid": "08fe46b8-3f9c-4e85-91b4-320369bcfebc", "value": "3072:wmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ZLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618637642, "uuid": "195bbab7-49b7-449e-b4a0-22d2d7f33799", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618637642, "uuid": "2b416ec0-fd21-4852-a575-746a7f06c818", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637642, "uuid": "a15c6eb3-43af-4bc3-bf1d-c324791241aa", "value": "d848a4771a49d1ef9e9326b51df29bf58250bb394275b2095a479a86663bf353", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5c950c4-9f4d-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618644194, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644194, "uuid": "6dbe1fb1-d951-45c7-a2fd-f8aa55c6e979", "comment": "Malware payload (Dridex)", "value": "ded17ecba1b2e8bd8a0c4d87133d8a36", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644194, "uuid": "a337b4a0-d969-4c9f-a651-58894d5a488a", "comment": "Malware payload (Dridex)", "value": "d8958b5da44851acde4298db7f4977b77f990c1c78ba2eec00e4f314af26c2ad", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644194, "uuid": "c8adaeb6-44ff-41c5-af34-21f8c50e36f5", "comment": "Malware payload (Dridex)", "value": "075d6f7be0a6e9b1cec7a7f289ac220fa9b9ddca", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618644194, "uuid": "94baf8a1-76f1-4707-a061-95f7134f8eeb", "comment": "Malware payload (Dridex)", "value": "70cb0a7c41d8cb55a68c9d723450cde1fd5b169ffeccf623a9a569a870480bae6416a3d6d46de6fa4a0fc79e74bb6f2b", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644194, "uuid": "f47ecb8f-aa9c-45d7-971f-43fec9446c73", "value": "F4F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644194, "uuid": "a2e03743-3c9d-4f1f-b4a9-32eaa21d1197", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644194, "uuid": "d9fd2146-ff42-44a7-ac1c-5b6e63b7fb01", "value": "3072:omNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:xLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618644194, "uuid": "00631ac1-b970-4593-a8a6-72af0c956a7a", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618644194, "uuid": "822009db-1aa2-4d1a-8680-459bf3d49737", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618644194, "uuid": "c3cad1a1-d5e9-43f2-8945-ca7635f206bb", "value": "d8958b5da44851acde4298db7f4977b77f990c1c78ba2eec00e4f314af26c2ad", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1021cd84-9f12-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618618549, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618549, "uuid": "0b421823-9e95-415e-858e-73dc5f1ab95d", "comment": "Malware payload (Dridex)", "value": "24c30ab339d1a7943ca8d745e9cd213f", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618549, "uuid": "fa05e5b6-6dfb-4889-9cb4-e9fdf4399123", "comment": "Malware payload (Dridex)", "value": "d9657cff67e722f830d2df60dc56cf3dbcec0fbda460d33132f044ed055549e7", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618549, "uuid": "85632384-6592-478b-81b4-bf584db61311", "comment": "Malware payload (Dridex)", "value": "d3db9786590e853a3791504393f5a9c047c8f655", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618549, "uuid": "31574892-6814-4967-9539-9cdff6d8a22e", "comment": "Malware payload (Dridex)", "value": "cc6f54486dc19e512c69f435cc5f146b1eafd61917a55aae28767f527d912a890a526ece7198ba9c83421f15d28880c1", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618549, "uuid": "ee0bfe94-6f5d-412c-ade8-b5a68755b453", "value": "16F3C088CBB3E4E6EFB3937966F85E1B461574551408F4F4C87CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618549, "uuid": "ccc40e13-c440-4a55-8569-5f417db8a0e4", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618549, "uuid": "68243dc2-f4cf-4c48-bc16-313aec7bbd9e", "value": "3072:nmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:mLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618618549, "uuid": "9eaf8cc0-7579-4680-a4e3-6fe57ccb8637", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618618549, "uuid": "2b9157d2-3264-4505-9f5a-7e688059b804", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618549, "uuid": "857751b9-9b76-4fdf-a86f-e78625120a61", "value": "d9657cff67e722f830d2df60dc56cf3dbcec0fbda460d33132f044ed055549e7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ebd115f4-9f66-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618654995, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618654995, "uuid": "ed4cad20-84d0-474f-8a3f-a298b86fbac0", "comment": "Malware payload (Dridex)", "value": "11491866d6dde2b86f7302dce3b39a84", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618654995, "uuid": "5af7a456-b93e-4ca1-8eb4-02e3aed58386", "comment": "Malware payload (Dridex)", "value": "da0e364c770f7d5857dc1c2ffcfdc75eed4a76298f5a3361459ca32b27366e37", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618654995, "uuid": "c5ffa267-f69d-416e-bec5-74a1b898b1e8", "comment": "Malware payload (Dridex)", "value": "886a2094febc64c6ad4cd54a859efa68007a464e", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618654995, "uuid": "03ba2866-1b2b-46be-a566-475ed208c6f2", "comment": "Malware payload (Dridex)", "value": "1fe37ccbb0825d674374a2ee4fc6c1cc361851c3ef34a07f3d149c06dbbad217ca3e0b120edc13e5e8d905375d15cabd", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618654995, "uuid": "d3a5f2ef-6b2c-424b-9ecc-83c727e522b6", "value": "DBF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618654995, "uuid": "ac1cd938-0bf4-4c28-a00c-bf4a7c31b388", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618654995, "uuid": "cd082aad-e00d-48f3-a409-07f14533cff7", "value": "3072:QmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:5Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618654995, "uuid": "7787a0cf-b481-496e-b655-ee6c62d768f3", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618654995, "uuid": "4ccbc4bf-f77d-41fa-a61c-8b5b5b7bda7c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618654995, "uuid": "59fb8b3f-f30d-447e-a5a1-63dda70ea628", "value": "da0e364c770f7d5857dc1c2ffcfdc75eed4a76298f5a3361459ca32b27366e37", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10d457c3-9f6d-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618657634, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657634, "uuid": "27ba5bad-17bc-452c-841c-eb5a9c22b4f2", "comment": "Malware payload (Dridex)", "value": "ac8fe7962851a865421ff84fe0f14a39", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657634, "uuid": "e90acf8f-0286-4880-a864-18b8dd6f14ea", "comment": "Malware payload (Dridex)", "value": "da457cea77a43f9c2231526313273d1dc39dd6a27811625f4094f17240e54c00", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657634, "uuid": "1feb1619-588c-4834-8cbe-0114ed44152f", "comment": "Malware payload (Dridex)", "value": "8964b7786a6cca1de284e1c53c20c34e720b3666", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618657634, "uuid": "aa29468f-63a1-4aaa-a4d1-7c122be0e3f8", "comment": "Malware payload (Dridex)", "value": "e1d46516ab6804d29007c0ccbdeca6863e942aaf8743aa51399c0fdf286be57786e4ad42761163967a1bd1e09a5dffd0", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657634, "uuid": "2c60854d-31cb-4905-9a8b-fbee974cda13", "value": "E4F3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657634, "uuid": "710315b9-a248-47cd-ad85-ca612d42fef3", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657634, "uuid": "574879e2-4582-4e46-92b5-74c47feaf5d0", "value": "3072:HiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:ceAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618657634, "uuid": "9e3ff9e5-60a4-45fd-962e-c1f3b6cd94f5", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618657634, "uuid": "397ec743-8c40-45e8-b1eb-32ef085bbb57", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618657634, "uuid": "25a59842-3ba0-496a-9b05-374d735d4b0c", "value": "da457cea77a43f9c2231526313273d1dc39dd6a27811625f4094f17240e54c00", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a2584fff-9fa0-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618679783, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618679783, "uuid": "5b656ccf-b505-4b0b-a29d-57ba33c59fbe", "comment": "Malware payload", "value": "7d8860ce93bba66b516f22fa7dd1f438", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618679783, "uuid": "1c72966a-8608-438f-92e5-31fb86eba693", "comment": "Malware payload", "value": "da9db044a2f6d124179110258047a3ba3c325e2bb6aef456c98c162f06449d53", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618679783, "uuid": "2a93667a-3dca-4b24-b2a5-e63ba1c45a0d", "comment": "Malware payload", "value": "9f84296b9064b0cf7d8e0e66730fc05b8db2d88c", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618679783, "uuid": "b967c372-d0fa-4a99-9a21-bc203d7f925e", "comment": "Malware payload", "value": "705c8ac526c1b4caa94f1bd723e17c98596fb9c8db77bd0204833fa50129bcd3fdb7b268e40ea4e359c94f46bf19e0c2", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618679783, "uuid": "828e0d2e-596f-4303-8203-688369353768", "value": "10F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618679783, "uuid": "d873ab48-2e0d-4e6d-8446-1b33a5774f62", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618679783, "uuid": "59874a97-8055-418c-b224-7ea51ce7193d", "value": "3072:Hlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Hlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618679783, "uuid": "949dd40d-1f5a-4b2c-8334-8360b232cb9f", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618679783, "uuid": "59d1659f-5b7b-4c0f-b0f0-4bc610ea4d62", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618679783, "uuid": "1d70552b-50f0-487c-ad09-70107143e875", "value": "da9db044a2f6d124179110258047a3ba3c325e2bb6aef456c98c162f06449d53", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e442d2f-9f9b-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618677521, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677521, "uuid": "94706b3d-f72f-4938-be3e-8dc4b36ecd1a", "comment": "Malware payload", "value": "d0acb68e4b65bff4aeaa31924e69316d", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677521, "uuid": "2496645e-8cdd-4453-9ab1-0851d404f5c7", "comment": "Malware payload", "value": "db10ae8f012d7942061278c71a1908f9e6ef729bde73025146a1702dc669a2d2", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677521, "uuid": "01179a69-4551-4d25-8f07-f6568ea25e54", "comment": "Malware payload", "value": "45937f5d75619661806b39a7d09f2ccb320c9a4f", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677521, "uuid": "3f5c9a3e-f071-4864-ae3b-8ba92a5dbf71", "comment": "Malware payload", "value": "c25548789480f775a581f92f52080b9529a45fe3aaac18b20e75f24da92d4e9526a8fb5d011fe538221384887d966138", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677521, "uuid": "d069ce93-c8a8-4cf9-96ae-0e8d76264098", "value": "48F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677521, "uuid": "af8220d4-0d69-4837-9347-a5bb9ec82958", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677521, "uuid": "ccab062a-8366-4ef4-9702-99d8a48166bd", "value": "3072:CmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:TLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618677521, "uuid": "9e3ed7df-3615-4b94-bee1-ad84cb08ecc2", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618677521, "uuid": "9a0fc663-379c-4195-9fab-7b028022621b", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677521, "uuid": "e5248cfb-8d27-4905-960e-8b28a858910f", "value": "db10ae8f012d7942061278c71a1908f9e6ef729bde73025146a1702dc669a2d2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ace9f9cb-9f24-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618626543, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626543, "uuid": "b954852c-e83f-4120-b033-37d13bcfda7c", "comment": "Malware payload (Dridex)", "value": "05259b8ca837412e5ffa50b23ae7f4c1", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626543, "uuid": "344639c8-e3d6-40da-a3fa-d3d8d260ec90", "comment": "Malware payload (Dridex)", "value": "dc86fd34f82034a578d7d0a488e215718a8931443c646a7bf7b738ae658910df", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626543, "uuid": "e6892d9a-8798-4055-aff3-c4e2ae60eed3", "comment": "Malware payload (Dridex)", "value": "919940177a2370b85d8c3add58840bc6e9ca7b29", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626543, "uuid": "cf61bde3-bb78-4144-854f-2c70342fe5a2", "comment": "Malware payload (Dridex)", "value": "9abab4c61d5cfdc9b78e9d80cd9dd9071bf3442dc7dd380fd56e0b27edee7dce87305105da2b1531d940962eea46d340", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626543, "uuid": "a4f4b91a-3a10-4f04-9427-b436c892a23c", "value": "E1F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626543, "uuid": "40aff0e0-2ac7-43a9-bc77-43568894ad53", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626543, "uuid": "2da38a01-448d-46a7-b43d-02e6b8436877", "value": "3072:4lpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:4lo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618626543, "uuid": "08a17adb-9271-4bdc-aee8-644651ad5dac", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618626543, "uuid": "676f51ee-9caa-4cb9-9815-40dc24c721dc", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626543, "uuid": "03bca0fc-c1df-4cd9-b65c-e782209c08e6", "value": "dc86fd34f82034a578d7d0a488e215718a8931443c646a7bf7b738ae658910df", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87d0a8d0-9f23-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618626051, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626051, "uuid": "b87e496b-3c2c-47d8-aa32-e997df3a5393", "comment": "Malware payload (Dridex)", "value": "f2bdd1d455bc9aee259e52b62d61421e", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626051, "uuid": "3f9ebbdb-9b34-4274-9925-f6ff570bd4a1", "comment": "Malware payload (Dridex)", "value": "dcbf1c883765e45ed3bf23b742a122e447df3bea7907f36625f224a786577149", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626051, "uuid": "dd12c214-67ce-4cbe-938b-7b1f474c0e13", "comment": "Malware payload (Dridex)", "value": "dab9d3b83688207bea9e0857e7b69c8592b4f2a4", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626051, "uuid": "16445ec5-0e86-4f0e-9884-18c2263438ba", "comment": "Malware payload (Dridex)", "value": "7433a99328b0d49eab3042864dad5ea449b461e9fd34b7a31698ffe0682eedf1900daefce7c49905198c2d8df5f93fba", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626051, "uuid": "8262123d-a4c0-44e9-8eec-5729be69e54c", "value": "B7F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626051, "uuid": "ee080712-ecbf-42c1-899d-9a67ce04fd3b", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626051, "uuid": "409a3115-8f95-4125-9aee-9b4470460a3f", "value": "3072:Vlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Vlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618626051, "uuid": "eff811bf-a57c-4292-95b0-822dbd90b569", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618626051, "uuid": "4c254468-1f75-4303-9f55-23f96deebac3", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626051, "uuid": "2e08643d-5667-409c-9dba-f8604f75ec89", "value": "dcbf1c883765e45ed3bf23b742a122e447df3bea7907f36625f224a786577149", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca9daecd-9f3a-11eb-abe1-42010a9c0039", "comment": "Malware payload (RaccoonStealer)", "timestamp": 1618636042, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636042, "uuid": "e4b5598e-e049-4322-94e6-3cea8ccd818c", "comment": "Malware payload (RaccoonStealer)", "value": "f9d60a6f9602d8bc8826f71c4b2a5a09", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636042, "uuid": "c73ce167-72a8-47f1-9fca-6d01e0daaf9e", "comment": "Malware payload (RaccoonStealer)", "value": "dd3f4329365ca4f289bcaf6acdf96919271500ea44e5513519cc53b079df8762", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636042, "uuid": "dbaac380-cda8-4f97-826f-3e5c7a689a10", "comment": "Malware payload (RaccoonStealer)", "value": "ed780dde21421bc2b195c411015ac4c36ee42dbe", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618636042, "uuid": "ddf1936e-a19f-44d1-b6dd-2cceaae3a6be", "comment": "Malware payload (RaccoonStealer)", "value": "a654519936a6b401b8088f420fa36d119f9f170efdf2ea2846c94d050f58d39a278ad1a7b59458d8af98a624328fa86d", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636042, "uuid": "33b7cfa1-221d-4e0b-8819-9ace8d565317", "value": "94B4F01832C1C073D45770359969CBF65EBEB8711A66AA4FBBC80A782F747E2572130B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636042, "uuid": "aa925a8c-9c20-4566-9923-e099b8f046f5", "value": "08b2b759e2fdb8f29e60c592875ae04b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636042, "uuid": "31a9345d-e704-42fb-a914-4c93a75cc4c6", "value": "6144:dIxV/YjqzJg+RHV6N/L6yPzFwP3NCEA4L7DMMR0nd+Z0fQBu6MTyGlePFKjrSO5:dIPYjq1TR16ZDx78HDFyd+yoP+lePFy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618636042, "uuid": "dffaa4e7-fd0f-44eb-b55a-aace84716333", "value": 531456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618636042, "uuid": "308eab47-d7a3-4313-b1fe-54f608e15446", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618636042, "uuid": "9536abd3-7978-4f5b-bf57-8929105cee23", "value": "f9d60a6f9602d8bc8826f71c4b2a5a09.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90897dc9-9f23-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618626066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626066, "uuid": "8d157ccd-a582-4868-a43f-74d8f5d7ff58", "comment": "Malware payload (Dridex)", "value": "13724f17138f3a5ff895e7aac61a93f9", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626066, "uuid": "22f9b2dd-8146-48da-98c2-b2b2a60e0c23", "comment": "Malware payload (Dridex)", "value": "dda757193fc3afa3fe91144073127868f84a77cf0e727277ce04295f094a859d", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626066, "uuid": "c21b28b8-d7b7-4f63-878d-16ec5e5adf32", "comment": "Malware payload (Dridex)", "value": "55964085286c4c224661ff341e82af2d34087644", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626066, "uuid": "6517d183-c715-46c4-91c2-486439bb9afd", "comment": "Malware payload (Dridex)", "value": "d7baec55fbc15fb2ab13575b03879640a3129e36028d4003f5e5066a8f71c98050c63c03d33888b0e0a61f6c65c918cf", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626066, "uuid": "2f6183d3-acb1-4cd4-90fc-0aeea3e56207", "value": "1EF3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626066, "uuid": "e46f22cd-37ff-4e1c-8bd9-ca080b685843", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626066, "uuid": "ce1fefce-954e-4c4d-94fc-76ece7165351", "value": "3072:dmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:cLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618626066, "uuid": "8843d526-959a-43b6-964c-4f9b99cac3e2", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618626066, "uuid": "cebcaad0-78de-4e2d-95f9-03de2cda6a77", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626066, "uuid": "09e8e0af-278c-4ede-8d02-5849a2b26a1b", "value": "dda757193fc3afa3fe91144073127868f84a77cf0e727277ce04295f094a859d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16148afe-9f94-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618674393, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674393, "uuid": "ae77bc40-e18b-4405-8461-e66b94b4eeee", "comment": "Malware payload", "value": "8ffbad32ec136b2db7d75961d777f7b2", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674393, "uuid": "1c2cd13e-6929-4209-9f1c-37f358319325", "comment": "Malware payload", "value": "ddc7294c32b14736332104b4951e2fc2b2b1b8a0d827240abedec8fa838dc197", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674393, "uuid": "096b3d73-f8e2-4cf9-a23c-cb47b86ab900", "comment": "Malware payload", "value": "e2aa1c18907e7647312a88a1e09e8c7514bfaf64", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674393, "uuid": "248ced47-56d6-4115-a553-0e974d212c10", "comment": "Malware payload", "value": "1a10d5d9e23498ec088e753654e1f5d70ea2138f9b0d6d391ef6aea486bed43b33a96f713c26f9affca3d05493ccb848", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674393, "uuid": "aacca90d-68e7-4ff0-a583-9a5ee0fe37f3", "value": "0FF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674393, "uuid": "ff4007d6-1837-4ef5-bb3c-396e273db1e6", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674393, "uuid": "ca0fbe9b-8626-4d06-a861-0fd9ef3986ca", "value": "3072:wmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ZLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618674393, "uuid": "63096b6c-427c-454c-b0bb-2bada6b3c8a7", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618674393, "uuid": "c1813bfe-dc7c-4c2f-86ef-17931bc22297", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674393, "uuid": "dc9c3d74-41bd-4b09-aee4-c25720e1ff73", "value": "ddc7294c32b14736332104b4951e2fc2b2b1b8a0d827240abedec8fa838dc197", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc306a7c-9f36-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618634407, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634407, "uuid": "8f8eca88-6ac1-4d1a-b55c-baf7fecc948f", "comment": "Malware payload (Dridex)", "value": "d04f29dca528a8042310874d618c5b38", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634407, "uuid": "5d14d265-2e88-4759-ac63-ffe290904f2d", "comment": "Malware payload (Dridex)", "value": "ddc9bb65a78dc7bbf81e68af9ec8d21bac412aff801999306d05e2fe4d569dd1", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634407, "uuid": "218d16de-272a-4b0f-b09d-83b96f207dab", "comment": "Malware payload (Dridex)", "value": "87c3587868e6d5b6f30712c2c44f00d481115278", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634407, "uuid": "87a21150-3403-41f0-97a0-0651f3af05a9", "comment": "Malware payload (Dridex)", "value": "4c6281f341a372a7669db6cf61f7858c0a2ca5e90a33e4c883b71188f8b88fade7ab0f5464a735a2655f40a78658bd09", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634407, "uuid": "a3b11ac0-f4a8-49f6-9ea7-c3b569d59cc0", "value": "4BF3D088CBB3E4E6EFB3D37866F85E1B461174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634407, "uuid": "2a5c4277-ca56-489e-bc13-4a9a7f4ea49b", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634407, "uuid": "7c712cdc-565d-4fa6-8c82-5009fedfc110", "value": "3072:4mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:hLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618634407, "uuid": "f28d1d56-33df-425f-ac80-c8cebe9f234e", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618634407, "uuid": "4dee4036-f166-4242-b586-559f712b320c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634407, "uuid": "dd6f35a2-ca6e-4376-9d07-f937a21644af", "value": "ddc9bb65a78dc7bbf81e68af9ec8d21bac412aff801999306d05e2fe4d569dd1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "908b4280-9f1a-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618622200, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622200, "uuid": "f687088e-c433-494b-b64d-702badd93ca4", "comment": "Malware payload (Dridex)", "value": "5794c10866335e71fa1714647bb0ed2c", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622200, "uuid": "4963a07d-5fb7-4c51-8db4-2522d50045eb", "comment": "Malware payload (Dridex)", "value": "ddf0516c49413a596dd19dc73a21b5f48467cf3fb0dd31b20f017a379adb435c", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622200, "uuid": "d2921488-82a8-4f52-b1ab-91e2ab0d977f", "comment": "Malware payload (Dridex)", "value": "c6d6d4fd12e0eac2cd90882247fed9e80fa007e5", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622200, "uuid": "910a608d-3f1e-418d-a4a2-fe24e1167584", "comment": "Malware payload (Dridex)", "value": "03c2ce1f4bd5f1453f0b6161981b683e6308f4f7940847125f79604cf23312757105296ec1d6fccd8e0209fd23f80170", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622200, "uuid": "5eeea0db-b69f-4047-bf5d-febb26e7acf9", "value": "12F3D088CBB3E4E6EFB3D37866F85E1B561174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622200, "uuid": "3be728a8-9121-4734-ae59-1a75edccf56e", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622200, "uuid": "9db5246c-71ca-465a-8c56-798e19d86ce0", "value": "3072:0mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:dLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618622200, "uuid": "f88612e0-b5e5-47e5-b340-7f84a24392e3", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618622200, "uuid": "f38bedcd-2cea-48e6-b6d5-51d82b645d44", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622200, "uuid": "37819504-5ffa-4476-ad23-04cad562c0a6", "value": "ddf0516c49413a596dd19dc73a21b5f48467cf3fb0dd31b20f017a379adb435c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "260c10ef-9fb4-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618688164, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688164, "uuid": "1394c65a-fefb-49c5-a951-e31581940f24", "comment": "Malware payload", "value": "2343e99b6fb5d2b09011096cdae214a4", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688164, "uuid": "2903c154-258f-47dc-b90f-02d69cc147ed", "comment": "Malware payload", "value": "dea142c93c76320b0f85ae568c21ca0a6f4008eddf87f038e26bf23f47a3b231", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688164, "uuid": "f9ef9288-8bec-438a-802a-76a5ae32f1b5", "comment": "Malware payload", "value": "d8ce50ae725b72fbeb5fd6cea79ef1a2b1abfef9", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688164, "uuid": "11447c5d-665b-4225-9ce5-4454854030fd", "comment": "Malware payload", "value": "6d157ee16cc8ed936efd16fafad85b5bad673a78482e4903892faf014b55efb9ddd3023db35d55cb45736c5d6a9ca827", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688164, "uuid": "bd59d655-79e5-451a-a86a-c17f7c753c8d", "value": "9CF3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688164, "uuid": "3487e24d-7fd2-46e7-a829-4ce047be892b", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688164, "uuid": "c2247c9b-7eb4-4b38-b3ca-97ab828fd3f0", "value": "3072:MmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:VLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618688164, "uuid": "ba01c94d-dbbc-4681-9784-a3e5942c2e21", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618688164, "uuid": "d8d25db6-b72e-43d7-a24a-82b71eea215c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688164, "uuid": "148a08d0-9686-4b2e-bdb9-ba92f782dccd", "value": "dea142c93c76320b0f85ae568c21ca0a6f4008eddf87f038e26bf23f47a3b231", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86e4d9b8-9faa-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618684032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618684032, "uuid": "7bc63838-e278-458a-bcc2-ca0eff0544a0", "comment": "Malware payload", "value": "b7a9d074309c660340eac4a4ecf2fa8a", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618684032, "uuid": "3a4503cd-de22-448b-b638-28be9fba1b50", "comment": "Malware payload", "value": "df47af941d811533da302dcd5973034c174595f9316476f9a9ee92532bd15336", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618684032, "uuid": "52a84af0-d294-4d34-b392-badbfa08106f", "comment": "Malware payload", "value": "6390a9a1e2beac34e0de11b9533b09fed82dde5b", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618684032, "uuid": "a3a7c0a9-e570-4f28-b34f-6f32452814f8", "comment": "Malware payload", "value": "677420c8a3f106e085c3701e18b5c05ef43565e6902c1ed27457a4c36d4413338169f07380ad9351c8984f79384c8187", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618684032, "uuid": "18effa37-4408-469e-a2a8-36cc35bebf92", "value": "A7F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618684032, "uuid": "86bdf9d2-9973-44c4-ac75-6c257a2ef445", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618684032, "uuid": "46cdde17-5732-491e-857c-cc7550691fb5", "value": "3072:smNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:1Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618684032, "uuid": "15b83a90-66e5-4e21-9f4f-1c3f38739ebb", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618684032, "uuid": "24cc5641-a269-4fa1-ae5a-e34eec032fd2", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618684032, "uuid": "10247d81-b679-4a94-b337-22ac703b05ab", "value": "df47af941d811533da302dcd5973034c174595f9316476f9a9ee92532bd15336", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "861f9d4b-9f64-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618653966, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618653966, "uuid": "e51b6012-e1f0-4392-aa1e-e7922d2b17b2", "comment": "Malware payload (Dridex)", "value": "f12e6b382ae3919e2e44f04a297bd46b", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618653966, "uuid": "ee414d99-7bac-4024-aea9-4e799d7bf42e", "comment": "Malware payload (Dridex)", "value": "dfd266d35b6fb3cfa432032cabedfbca1c233d9dc7ab0cb44e30bb8dba2b00f0", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618653966, "uuid": "e664f43a-f948-4c18-b9aa-3395a1412690", "comment": "Malware payload (Dridex)", "value": "b22fd683adb37a729a0659a8f84cd53670e76aab", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618653966, "uuid": "042e1009-c64b-42ba-a5ab-20bf2d6c49f2", "comment": "Malware payload (Dridex)", "value": "054dfb95427a1a128187a8ead7c37a4f3c07854a270dfacba674bf4e3e8c246a35eda3bbafdd096280d160641455d21d", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618653966, "uuid": "1e45cc7b-aea7-4dc8-a728-ec0896890ccf", "value": "0EF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618653966, "uuid": "c6985566-c9a2-4b26-b0be-9e68dc68e23d", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618653966, "uuid": "24625c76-326e-47f3-b808-ca8206fc28e6", "value": "3072:8smNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:KLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618653966, "uuid": "80655bd2-9483-474d-993b-7897e504a637", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618653966, "uuid": "1f4a0bd9-669d-43af-bf5b-a18e0cf933b1", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618653966, "uuid": "625872f8-ffc4-4c48-bce9-70daf6b84b09", "value": "dfd266d35b6fb3cfa432032cabedfbca1c233d9dc7ab0cb44e30bb8dba2b00f0", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c50431c-9fbe-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618692470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618692470, "uuid": "ecb2bf12-fa92-4093-8b83-489acc5f3734", "comment": "Malware payload", "value": "292667ae94def537f6cc0555b984e133", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618692470, "uuid": "a02b1e29-125c-4c05-846d-2a0504415554", "comment": "Malware payload", "value": "dff63681dfd745d0e80cb78e4ac976e759cf024edf3743b9c9a313308901f307", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618692470, "uuid": "11f0a699-6064-458b-b109-4ce96a6b45f2", "comment": "Malware payload", "value": "a6bb9168eae7b47e1c07bb92ccafcd0e6633ae9b", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618692470, "uuid": "9635df7e-2380-4f78-b83b-3a149ee387ba", "comment": "Malware payload", "value": "8293833b39c84038b9d33fac0b1dfd9c7b23bf872ad859b97b25af765241aa3ce810de94dedeab7998d068ccbd8fb9d3", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618692470, "uuid": "42e28f30-53f9-4ee3-8f9f-d7d2ada78e41", "value": "65F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618692470, "uuid": "c91417ff-0b49-41b8-9499-bfdb477fa568", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618692470, "uuid": "2501ad3e-6285-4c0e-8b09-32340ddcd4f9", "value": "3072:9mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:8Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618692470, "uuid": "2f5a4245-f3c7-478a-91e5-0c277a88a18a", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618692470, "uuid": "6da6206f-43b6-4580-b572-89e9f5480bf8", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618692470, "uuid": "8a90f7d4-2f83-45a1-b64b-95378c3a88a3", "value": "dff63681dfd745d0e80cb78e4ac976e759cf024edf3743b9c9a313308901f307", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e356d498-9fa1-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618680321, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680321, "uuid": "e825cbbc-be4c-47a4-a27d-ae82e2775f92", "comment": "Malware payload", "value": "1d140770354f380772361caf88c4c793", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680321, "uuid": "b6435275-201c-4526-b412-39794a429672", "comment": "Malware payload", "value": "e0100c9eb13c6dd87acf2e3a3186ebf4a844c00c4aadb17247510e852dfac758", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680321, "uuid": "cff3aeb6-cea3-4f6a-82b7-4ff83908ed5c", "comment": "Malware payload", "value": "95e682764c359f1282a9467c8bb858f78f5d2f34", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680321, "uuid": "e703bddb-a039-41ae-91b1-b07ff914dfb6", "comment": "Malware payload", "value": "bbb862a0d558b626850f1672275eb4667f75bca9b5b2bd44a6161f49bb0b9ba674122b932ead067cf3b25e1fcef55c79", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680321, "uuid": "d6b7d57b-d877-4890-b3df-7f5bd25331f3", "value": "1AF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680321, "uuid": "4b5e7492-5c7a-4ef4-bfe7-9b61658786a7", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680321, "uuid": "334e6726-e5cc-4552-8e41-7ce3138bc569", "value": "3072:kmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:tLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618680321, "uuid": "98f114c4-c3c2-4642-9987-4e07b7150041", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618680321, "uuid": "933e9fee-d8cb-4ed1-86f4-b6b8df6b28ec", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680321, "uuid": "4856692c-8712-4516-be7f-92a53e6991aa", "value": "e0100c9eb13c6dd87acf2e3a3186ebf4a844c00c4aadb17247510e852dfac758", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ad8fe1c-9f56-11eb-abe1-42010a9c0039", "comment": "Malware payload (AZORult)", "timestamp": 1618647934, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647934, "uuid": "1d4967f2-360b-46fe-b5b2-4be794fe0349", "comment": "Malware payload (AZORult)", "value": "8bb18b475567b8ca925c0579edafeef6", "object_relation": "md5", "Tag": [ { "name": "AZORult", "colour": "#403640", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647934, "uuid": "5b63f5e3-1614-48cf-8a14-d3bcd79e7762", "comment": "Malware payload (AZORult)", "value": "e1108eed1eab9e6eac2d48139776a585b56ec575b1f8e41ed40099e8d6c93778", "object_relation": "sha256", "Tag": [ { "name": "AZORult", "colour": "#403640", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647934, "uuid": "c1ba4c61-60f5-46b6-b981-3725d2d9ac0f", "comment": "Malware payload (AZORult)", "value": "2001d58afa9266b364cd6a9d4edb9493f43b43f6", "object_relation": "sha1", "Tag": [ { "name": "AZORult", "colour": "#403640", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647934, "uuid": "01a5f20c-793b-4e55-ae40-dcaf5bfdb5ce", "comment": "Malware payload (AZORult)", "value": "1b337e75aad90a5897c8b25f09fc9f0aaf11fede092c8f297c333d08a04003711b207a4f7e645ece5479ebb14f407e4a", "object_relation": "sha3-384", "Tag": [ { "name": "AZORult", "colour": "#403640", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647934, "uuid": "ce788eb1-b40d-4151-9ade-ad2de65a241f", "value": "8FE4F9992B535D42C0A8C2B0E509E5ACC0F74E69A2BFF13B10197EC5D9BBDC7F841A61", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647934, "uuid": "496e60f0-a934-4b26-9d00-a29560ae35c5", "value": "9bf77bc67ffac33a782763a90e941fc2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647934, "uuid": "21cbd90e-b5e8-467d-9794-89af89cc34d4", "value": "6144:PR9+z1VuJN82NKm9VL3osj3G+jLz4kHw3N3KuF7xdDiUY4/2pAeAL1Zgq:iz1cn8I39Lz1Q3NauF7xdDd/D1Lcq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618647934, "uuid": "18229d96-7b8c-41d0-9d5a-ffda68615a47", "value": 670424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618647934, "uuid": "a71e9279-55a1-4b5f-9036-287f66cbc4c7", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647934, "uuid": "88865470-8490-45d0-b221-d23ec513fd18", "value": "E1108EED1EAB9E6EAC2D48139776A585B56EC575B1F8E.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29b23e26-9f46-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618640926, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618640926, "uuid": "8f201eff-1681-4f90-a6e9-6002170458f6", "comment": "Malware payload (Dridex)", "value": "98aab9cdf3aa2afdb25edf79b66f4236", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618640926, "uuid": "ddc4da27-f5d7-4091-ba72-2bfbf2f61a88", "comment": "Malware payload (Dridex)", "value": "e195ca7bcf29026909abceb8bb0b4ab41f6c8422a9194469dde6599c0d216202", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618640926, "uuid": "faab15ee-5955-4477-98a4-2980b5ad3b7e", "comment": "Malware payload (Dridex)", "value": "9acbbaf803d58bdf196d984e2cc072fa1d953d5a", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618640926, "uuid": "b4a24f16-ddff-46c4-8955-99913e127458", "comment": "Malware payload (Dridex)", "value": "34edf3d48eee5d54d4a8f5e09e46477cb942196a8beb47d637725ac6a3d7e406ade2f92478776c5cd3f79f67e30acbc0", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618640926, "uuid": "98a63f80-f034-4446-a81b-58d7966c9e58", "value": "E1F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618640926, "uuid": "bd058b06-6bf3-4d23-93b3-5799bfb9f556", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618640926, "uuid": "1b1b47c7-c9e2-44d6-b328-025e0185a4d5", "value": "3072:AmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:JLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618640926, "uuid": "2979750a-1751-42c3-b485-a01fbae65860", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618640926, "uuid": "c0882353-2af0-46be-bcf3-49160054b7b7", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618640926, "uuid": "73608e6f-acb6-42cd-bfd7-287aff6fa3eb", "value": "e195ca7bcf29026909abceb8bb0b4ab41f6c8422a9194469dde6599c0d216202", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99e98fab-9fb3-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618687929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687929, "uuid": "0a183d03-d45d-45f6-9cb8-bf787e79f66d", "comment": "Malware payload", "value": "db2a60bbc624c5f0df5d26b287b334a2", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687929, "uuid": "d7b54b37-4164-4c25-82fe-327d25f9e2fc", "comment": "Malware payload", "value": "e23211689be58cd45362df8039de08866c4b4e22eeba8cc34e5aad6180eb39a9", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687929, "uuid": "86672e45-2db7-4211-8b07-270428d04e05", "comment": "Malware payload", "value": "910d20334f904964de3a47f908f104248286ad15", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618687929, "uuid": "f9bb1f96-3b76-45bb-ae53-50add4b79c29", "comment": "Malware payload", "value": "ce99eb89129dd90aed0592031d5aefe7280718be52ddbe69cf894384788a2340ce22e98cc3127c65adc6cb4766951fe8", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687929, "uuid": "c26ef885-519d-40a0-82d0-0f1e008c6bb5", "value": "90F3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687929, "uuid": "8c078250-952a-44e8-957a-863030f84471", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687929, "uuid": "0d43997d-aefd-4313-9aad-0135471bd6cf", "value": "3072:tiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:2eAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618687929, "uuid": "29eaa05f-7740-4d3e-81b0-473b7ff870c2", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618687929, "uuid": "7c351e28-08ee-4363-b70a-fd8f28a888a4", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618687929, "uuid": "4d79d07c-2b51-475d-b309-05dc7a5e26d6", "value": "e23211689be58cd45362df8039de08866c4b4e22eeba8cc34e5aad6180eb39a9", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28409f94-9f56-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618647795, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647795, "uuid": "0717f148-0dda-45f5-b2f5-0641ac0e018c", "comment": "Malware payload (Dridex)", "value": "c28d9e2b73690aa223ae49778125b659", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647795, "uuid": "12d9356d-2179-4f39-a21a-d7fe833ca943", "comment": "Malware payload (Dridex)", "value": "e2335f535a957f1e629fb6d8f2087156ad040e3c69e6eebdc3f73d2db9628f9e", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647795, "uuid": "b0f9e3c2-09d3-4dba-a86e-2c3e9bb92234", "comment": "Malware payload (Dridex)", "value": "3d6b11a879e2e97d5eeb1136a6255b210123e1b6", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618647795, "uuid": "853e63ee-78e7-431a-a9b9-aafc41cfdcc6", "comment": "Malware payload (Dridex)", "value": "1be4c51b52ed5a27e986b9effa785777110f4fc97026e99bc13b5b228d96f7d187357bdf8ca4a719769150e85c512de4", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647795, "uuid": "254b8498-1233-4745-ba4a-4c955a530a57", "value": "98F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647795, "uuid": "c3fafcbe-0fa7-43db-8556-6c5a40ed3400", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647795, "uuid": "4359922f-8f8c-4105-ae1a-5b0a9b9aa670", "value": "3072:MmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:VLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618647795, "uuid": "ecc5c583-7426-4063-91df-5916daa28dd1", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618647795, "uuid": "7dfbda8b-3dc4-4e32-88e9-b4dada73b866", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618647795, "uuid": "a21e6836-50ec-4734-9e9b-31e0f18aa9d0", "value": "e2335f535a957f1e629fb6d8f2087156ad040e3c69e6eebdc3f73d2db9628f9e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b82e8337-9f89-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618669941, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669941, "uuid": "c5873688-6c2a-4bad-965a-2b1b28c2ed9a", "comment": "Malware payload", "value": "35be990c9506d523efaf18753322406d", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669941, "uuid": "00b10787-4d8f-4918-81d8-8d8133d6b6e5", "comment": "Malware payload", "value": "e28fa8a9ff67d9c59ba7951104399fc3b6a272986c934358a5c0ab1cd5d101b8", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669941, "uuid": "a435d308-579c-4f3d-819c-10625f2e69bf", "comment": "Malware payload", "value": "9c9fc8d40c486a8ed9fb7a9ce94e35523c4b12e0", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618669941, "uuid": "31026cb2-6bd8-4068-b904-3b17c0a6aa9c", "comment": "Malware payload", "value": "51f6aedd8b6e77f17cf1ba3175f38a8b17f33484ef5360a76dc2681bccf04925f2489cb2f07e666d31d851db568c9e4a", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669941, "uuid": "02518b94-ba44-4110-915c-43f6b5704577", "value": "2BF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669941, "uuid": "e0f34039-dc0d-4cbd-a943-13eb4532f291", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669941, "uuid": "b2bbbc4b-269b-471e-aa20-f8af28f72f7e", "value": "3072:1mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ULc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618669941, "uuid": "92164a22-170a-4cf5-b966-610db28ca474", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618669941, "uuid": "fa27908f-2fef-466c-8c0b-d50f44f99dce", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618669941, "uuid": "24d5bd4b-de2e-481b-8517-d3ce9cdc66fe", "value": "e28fa8a9ff67d9c59ba7951104399fc3b6a272986c934358a5c0ab1cd5d101b8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "234e0ba6-9fc3-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618694602, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694602, "uuid": "867e8426-4b23-4362-97ae-26720b436d30", "comment": "Malware payload", "value": "e036a5ad7b534b2083174f0d07364c22", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694602, "uuid": "5b2f5bc4-45fa-4c51-9adf-5dc5ed06dfc6", "comment": "Malware payload", "value": "e3f7db8c2af70a1418bd8c0012ac64c0ce83c24e71c05db4fffe1630990cefc1", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694602, "uuid": "6c4611c9-3981-4750-8a81-8d3171feb445", "comment": "Malware payload", "value": "95e8272149af4eea44151375cdd49def22324f39", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694602, "uuid": "e57b6f95-fad9-4427-acc9-283b145cf0c7", "comment": "Malware payload", "value": "c241b1e50d14a758a880fd2587b415ce31a2c4a15f74a655a46f3af38c85772c902d89ea10fea6d22c3dbd3612d9a31c", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694602, "uuid": "75e497d7-2217-4c61-85be-23220e538228", "value": "3CF3D088CBB3E4E6EFB3D37866F85E1B561174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694602, "uuid": "ec036cc9-4b3d-4c1e-9d44-64cb20198ee7", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694602, "uuid": "417fa722-d6a3-4d83-8f44-3b2bd6a7b2e4", "value": "3072:RmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:gLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618694602, "uuid": "5bc506ad-4518-454e-8d47-184481e6eccd", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618694602, "uuid": "a2d76c3b-c9f8-4cf8-8feb-4c4ea4678856", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694602, "uuid": "b0792da7-e8c5-4297-8be9-188070e7ff40", "value": "e3f7db8c2af70a1418bd8c0012ac64c0ce83c24e71c05db4fffe1630990cefc1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa8c4732-9f96-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618675502, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618675502, "uuid": "2147e117-4642-4df5-bffe-fb4cc9441360", "comment": "Malware payload", "value": "25205fc2b6f6c0a5cb5205e77c19ee81", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618675502, "uuid": "c0347c99-be12-4e31-b1ff-5d8c006c4366", "comment": "Malware payload", "value": "e41f1adf9e109a71020321ca61c408810b3b6f326b644abb793777b7043bd3c5", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618675502, "uuid": "5b699e43-616b-4f0a-a650-5bdec12f2e4a", "comment": "Malware payload", "value": "cc7f179d0da4905248d522d6a3df434437fa38b5", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618675502, "uuid": "d8c3fcdc-9582-48eb-9859-36bd5fe6ee17", "comment": "Malware payload", "value": "b90b9a84c645c0e97d4bd7679cfa32f6bde15edb872ef5ae680c70607730ac05f5358c87070060e4f8560ce4cafe2d33", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618675502, "uuid": "df252aa5-86a0-42fb-ad30-8f39b99888dd", "value": "E9F3D088CBB3E4E6EFB3D37866F85E1B461174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618675502, "uuid": "aaf29ebb-3c8a-44bd-bb2d-9a0940ab6a81", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618675502, "uuid": "b3e9a614-1f7a-44e2-bd60-9386eb8fd9b0", "value": "3072:cmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:FLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618675502, "uuid": "106dfe68-5486-4a48-aa35-dc7fc321c1c3", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618675502, "uuid": "eeae4d8a-1150-4fbb-8fd2-09c4a9a5121d", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618675502, "uuid": "e7cdb8a8-c238-4b63-8962-8ad2f8945cec", "value": "e41f1adf9e109a71020321ca61c408810b3b6f326b644abb793777b7043bd3c5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd09cc92-9f57-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618648474, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648474, "uuid": "9a5fda5c-4116-4d5a-8d85-abff18e31cdf", "comment": "Malware payload (Dridex)", "value": "db980e067e8365bbf3768f23219a8f48", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648474, "uuid": "c5a20d4f-9bb2-48fe-8cab-e0c450fc6239", "comment": "Malware payload (Dridex)", "value": "e4205df0c9640c7e341a168ef1daafdc88f767292d4d17b907e2cd1aa6d71567", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648474, "uuid": "b1eb39e8-9eee-4204-9905-7d287f0a1f79", "comment": "Malware payload (Dridex)", "value": "07f13c443d4eb16523caa1ee37259d8f7fd64675", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618648474, "uuid": "5dc9eff1-3d91-4b5a-afa7-f0dd32d5c116", "comment": "Malware payload (Dridex)", "value": "b581da6a031f999a7c82a9dd6d2a4ac4d649babf4332f8ce95254d7e4ecfe8733c5e395e1fc8950d5053b52731da47e4", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648474, "uuid": "44a3a72c-d0e8-4045-9f5e-2e063ae5b2c8", "value": "F9F3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648474, "uuid": "348cc347-1361-4ce2-aff8-f7e0779dbbe9", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648474, "uuid": "1f982edf-7909-48c1-ade1-30e99c7dd97e", "value": "3072:liFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:OeAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618648474, "uuid": "62c23f43-4cc4-41c6-a4dc-fd2dd6313a54", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618648474, "uuid": "3817cefc-4636-4522-94c9-91521c258296", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618648474, "uuid": "855f50c4-b6ca-42e3-8b57-1167d2d7acc9", "value": "e4205df0c9640c7e341a168ef1daafdc88f767292d4d17b907e2cd1aa6d71567", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "212e9b6b-9f47-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618641341, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641341, "uuid": "2138cc31-ad97-48a9-8e80-b04ac9561ac1", "comment": "Malware payload (Dridex)", "value": "3f07683dbc7827b9ee18f64942979faa", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641341, "uuid": "2187b4b8-258f-4f1a-9971-6731be32ecf4", "comment": "Malware payload (Dridex)", "value": "e425938120afd7d79e93f7237bdeac82cba3a33d4ec5c447b4626423e08a5c5a", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641341, "uuid": "8b28439c-2618-426b-969b-e6a3813b9e98", "comment": "Malware payload (Dridex)", "value": "939c967b7810dac71d0c39e5544abad95e359a17", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618641341, "uuid": "128ee9d4-14f9-4f57-b8cf-89889ff21019", "comment": "Malware payload (Dridex)", "value": "730d99967019d53c63c570a590d180006442d1ab1b3a860de561d8d17fd857e207549c4a8ce08514a39630854a523548", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641341, "uuid": "f6c159cb-731d-4d1f-a537-436c3d8c3a4c", "value": "0BF3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641341, "uuid": "99a9d475-fe7f-4235-b0cd-2bccb190a661", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641341, "uuid": "1f6394c2-6d41-42a0-bad6-62822d47d89c", "value": "3072:9mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:8Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618641341, "uuid": "177f8df0-4c85-4caf-9849-75e06800ba1c", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618641341, "uuid": "375882fd-1ad3-4317-91fc-02e052176060", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618641341, "uuid": "22688c9f-e945-4d45-88c4-45be699a54d1", "value": "e425938120afd7d79e93f7237bdeac82cba3a33d4ec5c447b4626423e08a5c5a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ebcae921-9fa9-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618683771, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683771, "uuid": "cedf7cdd-b723-4e87-a710-f3e0de3fc874", "comment": "Malware payload", "value": "1ac6c365466aaaa0009710f4538e9505", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683771, "uuid": "3afc035f-d357-4a9e-a916-91f64871235c", "comment": "Malware payload", "value": "e4d0d1e931258a97b00c0fba1bd3f943f9d24c5b847255c50db39e20e9ce23bb", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683771, "uuid": "30d963b9-84cc-4358-a69c-d22fbe305725", "comment": "Malware payload", "value": "a54ceaba3f5b2911909fea7ad815732c4e218991", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683771, "uuid": "1b66321f-9dd3-4949-a310-995bae820f34", "comment": "Malware payload", "value": "4093814c96bca6579010aae5f9763b3b678469063e76d114fcfc9b0a727d0fecacb355b3e4090870f82ef18faa515665", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683771, "uuid": "8741b8c2-5a61-4f2c-83fb-ba4e41fd48a9", "value": "AFF3D088CBB3E4E6EFB3D37866F85E1B561174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683771, "uuid": "d7c25638-5b58-4df6-9562-f9d7f23114bb", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683771, "uuid": "39767011-ca45-4de9-8558-f7760fc4e506", "value": "3072:KmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:bLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618683771, "uuid": "76b98d7f-1ad8-49ff-9e8e-9c1f3fd89a20", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618683771, "uuid": "57252216-ed09-4991-93cb-9334a7035767", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683771, "uuid": "b2d5becd-361e-44e2-8df5-afe0479974a4", "value": "e4d0d1e931258a97b00c0fba1bd3f943f9d24c5b847255c50db39e20e9ce23bb", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f28c78b-9f71-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618659457, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618659457, "uuid": "77be06c4-693a-475f-ab42-afc1844a8c55", "comment": "Malware payload (Dridex)", "value": "d4d99fc4b12281fe684259dec3cbd010", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618659457, "uuid": "78398943-b89d-4f4c-9541-e3723dfcf3d4", "comment": "Malware payload (Dridex)", "value": "e52f4a65e93e67f4da9bc4469533ba8a87df18bc8d90c304d9968fdb40c3bcee", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618659457, "uuid": "26c87755-430e-46e5-b74c-a402283ca5ef", "comment": "Malware payload (Dridex)", "value": "ca5b7dd1b827ff23321ffe2efade7ba680847cae", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618659457, "uuid": "82e91f4a-8830-4722-ab3f-d484a031d143", "comment": "Malware payload (Dridex)", "value": "49ce7f19068585df243048e8fec0b11778ed2dd969b8b0964b2f5b118c25a4304ceb892f6ab51c428cce313ad876f5d8", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618659457, "uuid": "a3ce79de-c7d1-486d-a31a-5f3d8038a275", "value": "82F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618659457, "uuid": "d48196e2-da31-47b9-b331-fdd53c93cb1f", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618659457, "uuid": "0271325c-fdb9-4aec-9c48-2b872a1b63fe", "value": "3072:YmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:BLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618659457, "uuid": "48c5337a-ec43-4966-894e-63818d5e8c57", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618659457, "uuid": "54287a4a-6d90-480a-89d6-e26a06c87dbd", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618659457, "uuid": "ad3814c0-c677-414e-a3dc-0594e8799163", "value": "e52f4a65e93e67f4da9bc4469533ba8a87df18bc8d90c304d9968fdb40c3bcee", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4826d800-9f1c-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618622938, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622938, "uuid": "6ba5ed01-1ff5-4ca6-b06b-152a2a82b8e9", "comment": "Malware payload (Dridex)", "value": "000641863a875ad38ec3dcbcff71bc6e", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622938, "uuid": "189e86fb-828e-49c9-9c05-8dd19f99515a", "comment": "Malware payload (Dridex)", "value": "e61209b14adddc98029de821890bb88533ec226a39ecd85f317a35eb574fd561", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622938, "uuid": "4a20230a-f169-4260-9085-a49bf3680cc1", "comment": "Malware payload (Dridex)", "value": "b922ec182aecf60095c019473bb056bf94abea22", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618622938, "uuid": "2c86ee04-0d7b-4f3b-a47d-949e0ab3244f", "comment": "Malware payload (Dridex)", "value": "094b2136898bcf250ac8737dd99e284d77bfc9979900b0def4fc887434c2d48e9f5153224ed6a501669c072a529694c4", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622938, "uuid": "069cb5ef-b574-4e1a-a84e-d72a4c1de263", "value": "CFF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622938, "uuid": "ac2acd44-3097-49a3-b8d4-44414394f454", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622938, "uuid": "770ecf93-9177-4b9c-9013-6c4ced49d826", "value": "3072:TmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:iLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618622938, "uuid": "b0ff5ff7-3076-482e-af9e-20342d632fb9", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618622938, "uuid": "a2a29531-58be-4723-a1c1-0a28841b4607", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618622938, "uuid": "547469e4-b743-43ea-841e-623cb8726ac3", "value": "e61209b14adddc98029de821890bb88533ec226a39ecd85f317a35eb574fd561", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d000fcef-9f78-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618662679, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662679, "uuid": "5854a3d4-d6d8-47dc-a815-28a9871b87d8", "comment": "Malware payload", "value": "d9c6214cb90eed3ade69ea80fa2922e0", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662679, "uuid": "0615ca75-b221-4f02-ac7a-86c37369bd2f", "comment": "Malware payload", "value": "e6470fac64e0f9510ccead9fb57429300acf5bbef55a2a52902a91121515fa6f", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662679, "uuid": "c2f859dc-ab86-4f20-9f9d-68c3b34c45a0", "comment": "Malware payload", "value": "c4db8e2334698ce96dc9786fcf692cd9780d7674", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662679, "uuid": "c7eb85e9-7da6-4c3e-af5a-1f5e8119cf24", "comment": "Malware payload", "value": "39cd51b4b812d7755878757254b357641ff2989218f2c1e94c964a445505d104eed7c6b44184e5e1916d8dd4bacde7bd", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662679, "uuid": "be4db7ae-6f65-4e4a-bba8-9fa3c0ca635a", "value": "C0F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662679, "uuid": "2cc0fdd0-cda4-4f43-934e-a857d0f8db28", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662679, "uuid": "6733933a-1ac7-483f-ad39-404dc067fac1", "value": "3072:ZmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ILc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618662679, "uuid": "6879d624-a372-4a70-a21c-810f0cc74998", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618662679, "uuid": "e64e81a4-a447-4481-b913-fe733f376655", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662679, "uuid": "c73c3def-971a-45f0-a039-291bcfe515cd", "value": "e6470fac64e0f9510ccead9fb57429300acf5bbef55a2a52902a91121515fa6f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "074a34d6-9fc5-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618695414, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695414, "uuid": "d2b8f897-a563-4840-8dfe-7ee33f1dc88c", "comment": "Malware payload", "value": "8c14eb316c714640f063b3007fcb69d8", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695414, "uuid": "019bcbe8-a840-4f73-9b67-06c913d5b46f", "comment": "Malware payload", "value": "e64cd1893e18f23fcb45b14ddea6f16764329c052342b84e6fa87a2b697afebe", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695414, "uuid": "06007845-ca3e-4fa9-9261-800a66fd5a5a", "comment": "Malware payload", "value": "03c8f965ec9aaf08a06e20f033e57ea58491385e", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618695414, "uuid": "e1ee1611-df26-4e00-bd63-1a20ab73ada7", "comment": "Malware payload", "value": "8c1e873f91c26151958b589097b5f5b1e415550780822632762309ed9fc663aa79376576815ad5845e72eb1921816c24", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695414, "uuid": "354161cb-ee11-401e-86de-f038719ec821", "value": "01F3D088CBB3E4E6EFB3D37966F85E1B461174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695414, "uuid": "8d2a8268-64da-4a5c-9be1-56cd38d760a1", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695414, "uuid": "75d46f96-e15b-47f7-8e88-1de9904d6df3", "value": "3072:hmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:QLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618695414, "uuid": "f3994f58-f009-46fc-a572-240db6762a15", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618695414, "uuid": "96a48d0d-d298-457c-a429-fd39165cc3d5", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618695414, "uuid": "85145c9b-c6ff-49d0-9f1b-3397bfd39f52", "value": "e64cd1893e18f23fcb45b14ddea6f16764329c052342b84e6fa87a2b697afebe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10b993c6-9f85-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618667942, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618667942, "uuid": "b90ba711-eb51-436e-b259-a3efcad345fb", "comment": "Malware payload", "value": "7b33a61b85f6149635a78e0dc9c0f7b7", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618667942, "uuid": "2b3e6f13-aefd-4928-ac6e-50bc037fb103", "comment": "Malware payload", "value": "e690b6167edb3853779a3139625a515775829a778aee6f6714b47067c1e8c10d", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618667942, "uuid": "b033bc76-ba18-4d92-a92e-b70ff73f29e6", "comment": "Malware payload", "value": "50ffae112a849583c44bb38fe82cc4f9ba522a23", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618667942, "uuid": "0dd8d4d0-9569-4dcf-81e7-90b75dbccb16", "comment": "Malware payload", "value": "dee58b026f2bb57bc610ba43f7e10321a60a54eafe7c765130547ed2b047604a002aa76a6d2940837033725517d6a113", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618667942, "uuid": "237a927f-4d9e-44d5-a1cd-be0ad76324a4", "value": "33F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618667942, "uuid": "33e4a0f8-77c9-4e0d-96e1-cd4c794345c8", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618667942, "uuid": "43700407-4bf9-400f-a4fb-dd7c71f4bab0", "value": "3072:pmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:4Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618667942, "uuid": "10cd28f1-94db-4906-aff3-680cc797b8d5", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618667942, "uuid": "4fbaedd6-3f68-4485-8281-0238b3ab9d0c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618667942, "uuid": "de8d8d13-6730-4c16-8092-63aa84db00db", "value": "e690b6167edb3853779a3139625a515775829a778aee6f6714b47067c1e8c10d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d966745-9f37-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618634678, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634678, "uuid": "30e3851d-10f2-4dbd-87e8-3f0d2d0b9927", "comment": "Malware payload (Dridex)", "value": "a83f6fa33dcce994e154aa14e3368d1f", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634678, "uuid": "464c9b33-c206-443b-92ea-76fc70babfe8", "comment": "Malware payload (Dridex)", "value": "e6fb328cd09311b2b45ebac92b9edc5769a86f9c3c4759768d820dcdb38ffe2e", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634678, "uuid": "67ca6d7d-aaf7-4a9e-9043-3dc0e8556a05", "comment": "Malware payload (Dridex)", "value": "f2400d26e7c7a72e0338ca90f920dd25f8e74f8d", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634678, "uuid": "5e71a732-1f43-4605-ba5e-69cb2891a142", "comment": "Malware payload (Dridex)", "value": "149f61ce2c0fc9ce0c0e08b1b7ff85ef832cce461d5b85a00b1990839570985e87a4110c9f4aefda90966770dd194062", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634678, "uuid": "89f5152f-b2b7-49e4-be0d-7e1bf93f3851", "value": "69F3D088CBB3E4E6EFB3D37866F85E1B461174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634678, "uuid": "8741273d-9246-4e8f-9c03-738cba6cd5e3", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634678, "uuid": "fbf58abf-1bdc-4fb0-bb6e-c1f22821f82e", "value": "3072:TmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:iLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618634678, "uuid": "e397ccbb-474b-4f4a-ae2a-bad4cab223e6", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618634678, "uuid": "ae5dc060-cd50-4d45-af18-f33995f4cdf2", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634678, "uuid": "7bfac073-5d1c-495f-80d6-5b04991d745c", "value": "e6fb328cd09311b2b45ebac92b9edc5769a86f9c3c4759768d820dcdb38ffe2e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dfd4d59f-9f7a-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618663565, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618663565, "uuid": "ff4e9064-4b69-428c-a713-43210686a2d1", "comment": "Malware payload", "value": "7a3ea1c0f91e00aa1c98b192b06f3423", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618663565, "uuid": "b6e3aa8d-c2ad-4d34-af7c-d86fb7f2b054", "comment": "Malware payload", "value": "e7b3961ec24e6b08aba7022ea5f943d6359648b0c2907a25aeb086daabe76c13", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618663565, "uuid": "1837d395-09fe-4184-bd2f-8dae8131a504", "comment": "Malware payload", "value": "62bcbfb09b85e45ec999a4c98cf998fbc9b09701", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618663565, "uuid": "d8e58931-7841-440c-b149-e172b2b643e6", "comment": "Malware payload", "value": "42713a5d9fd50aadad135a1c4c123cb1a17561fc20ede6fe0b50e4dff04414923c829ae735e3a941b4964d7e5159d2bc", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618663565, "uuid": "ae3456f1-6877-494f-84ab-d3d1a28c8e26", "value": "7CF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618663565, "uuid": "ae3a35ee-e421-4ad4-b45f-1fa180f8d191", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618663565, "uuid": "923773d3-b38c-40a3-b8d6-a2e673773112", "value": "3072:WmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:HLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618663565, "uuid": "da808d13-15cb-4948-92a4-de360eddbc76", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618663565, "uuid": "db8c4597-8b39-446c-9b59-eb9b5ce519ed", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618663565, "uuid": "25d2f4ba-097b-4ae1-968f-f404c9e61eb1", "value": "e7b3961ec24e6b08aba7022ea5f943d6359648b0c2907a25aeb086daabe76c13", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20e5e34f-9f50-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618645206, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618645206, "uuid": "41e82479-10b2-40c2-86e8-a7c92443a910", "comment": "Malware payload (Dridex)", "value": "fcdb6fef4cff8b5dc939d20fe09a836e", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618645206, "uuid": "1d3dfa9f-4ced-4ba4-8915-8f735d3e8288", "comment": "Malware payload (Dridex)", "value": "e8048f68f7fbac001697a1ba5966ddc4c3d1c158690cd4704cd834dfdfd3c7dc", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618645206, "uuid": "dabc0085-063e-45db-bc8a-41293111d6d2", "comment": "Malware payload (Dridex)", "value": "7f3a0017428bb4f0664915ee94c33f65a80dabbb", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618645206, "uuid": "47753372-c832-4dbf-8444-4ec591e0597e", "comment": "Malware payload (Dridex)", "value": "285d4c0aec68bdb453fe0218e275380c603e5d152088b90dcc4939e2862cc3c7ea10c1dcf8e0aea577d0de21511de2a6", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618645206, "uuid": "d0f7f99c-918e-4dd3-b97b-b64c326704ed", "value": "80F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618645206, "uuid": "987b3bc8-c984-44e1-80c5-6030c919e159", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618645206, "uuid": "d41d9c64-797c-426d-8517-1cbfb6a6d572", "value": "3072:3lpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:3lo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618645206, "uuid": "0db09a11-d040-45a3-89a4-268a26fa0831", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618645206, "uuid": "9afd265b-b125-446e-9f5f-fd054819c19a", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618645206, "uuid": "f7a89af7-b0f2-4a50-baed-0c0f834f79c1", "value": "e8048f68f7fbac001697a1ba5966ddc4c3d1c158690cd4704cd834dfdfd3c7dc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0a33d42-9f3e-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618637743, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637743, "uuid": "3374ec16-39f5-49c5-8c61-ee57f1887729", "comment": "Malware payload (Dridex)", "value": "5205b7f05e16f15422463bf25e793ded", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637743, "uuid": "ad0439de-ef3e-4de9-922a-2dabd2770a75", "comment": "Malware payload (Dridex)", "value": "e8b0ca65dda6ef05fbc5022a106e186bfd489421a93e115725bde40fed6eb709", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637743, "uuid": "fafd6c6e-557f-4091-b053-f53669f0f8b8", "comment": "Malware payload (Dridex)", "value": "7503f690cfa2bfdbeb87510f7fdcffe43c1e5192", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637743, "uuid": "5005c0be-7ae5-460c-91cf-2f085957db6b", "comment": "Malware payload (Dridex)", "value": "dc5eeabd35d26eb2500718d3dec1917f69146789933cad0c5fd4a7f6bc77f335c5e7804cfa0d2f734732b0933fccef7d", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637743, "uuid": "29590e21-6c9e-4afa-afec-54c5c4c80b6f", "value": "07F3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B49671FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637743, "uuid": "802d28e7-70e3-4e56-9ad7-789e9b61290c", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637743, "uuid": "41bd5065-2701-49f3-83a6-ab5308578f25", "value": "3072:+A6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:+3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618637743, "uuid": "7c57d892-5282-4735-8200-765ac0eb0427", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618637743, "uuid": "9f47dca0-339e-46cb-b5a3-2f0b4032e176", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637743, "uuid": "e306c016-4f63-421a-833e-6f54fe3d0069", "value": "e8b0ca65dda6ef05fbc5022a106e186bfd489421a93e115725bde40fed6eb709", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01f4da59-9f71-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618659327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618659327, "uuid": "a071b050-14b2-4d9e-83e2-52a66062cfdb", "comment": "Malware payload (Dridex)", "value": "122bbc849cc36b679719200ed8a71927", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618659327, "uuid": "7986bf3e-38ef-4f5c-9379-ab76ad180fd0", "comment": "Malware payload (Dridex)", "value": "e980bbf2649c0bcc9969b445ca952a791669ac8ac4c4dcd6e77fd1d50e8fb951", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618659327, "uuid": "cd044975-e85b-489d-86d5-6975105a28fd", "comment": "Malware payload (Dridex)", "value": "b780b257ad59469ac81808171a0571d0f961dadd", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618659327, "uuid": "75bebcb5-a64b-43c6-b100-837d88385b5a", "comment": "Malware payload (Dridex)", "value": "612f51c12437f8bd7dfd7521679486a29fb55b18c97351171b8049c00d29aface064950f85ce704db9d6019dc588f579", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618659327, "uuid": "512237e0-355b-4f03-bea8-14ae9dbd49f3", "value": "4AF3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618659327, "uuid": "fb9ae7ea-7411-45bd-a020-7d833e9d46cf", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618659327, "uuid": "11e47c25-44b8-4e28-8f3b-92b18003cf1e", "value": "3072:/iFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:0eAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618659327, "uuid": "dcfed391-3eae-4e78-b5ef-3e578132a12e", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618659327, "uuid": "f4dac44e-6ff9-4f62-b274-6c476ef72c99", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618659327, "uuid": "f39e4187-cfbf-448a-8892-6afcfd813a75", "value": "e980bbf2649c0bcc9969b445ca952a791669ac8ac4c4dcd6e77fd1d50e8fb951", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4427ac30-9fa0-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618679625, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618679625, "uuid": "04300956-54e8-4c5f-b6cb-bf171dcc776f", "comment": "Malware payload", "value": "632925324d032c875adafe6708f2d1b6", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618679625, "uuid": "2db47f44-2ad4-4435-a291-283473476b4d", "comment": "Malware payload", "value": "e9afa05c2eee96998c5fbbb24192314ad85f86bb6cf9937736763abbd14b6a93", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618679625, "uuid": "9fe52bd9-88c4-41c1-ac9a-00f401989f54", "comment": "Malware payload", "value": "e612d7a5cfe9f026919200326da20bbc66c020fa", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618679625, "uuid": "ec3f98b9-0ff8-4b56-aa6d-5356d12a6870", "comment": "Malware payload", "value": "77d19e5887dba3cea02fa1c9369d05f2c3f5dda9d6908904c676b15e71f511d3f719731ccf1d3e55ae91936ff0a4337b", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618679625, "uuid": "4b12ff7d-74e2-46fc-a9f5-a440ca3b5a7f", "value": "3AF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618679625, "uuid": "e731baec-5ab9-4ffe-8f3a-1c1437cc7be8", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618679625, "uuid": "88b3f209-9d56-4267-8834-7ff8dd934c1b", "value": "3072:omNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:xLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618679625, "uuid": "8764290b-232d-4fd7-a915-7417afcf3cd4", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618679625, "uuid": "1cd3d768-7517-4707-bd1a-28f4a3a549f2", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618679625, "uuid": "675b6836-ab12-4d22-ad63-54cb8a12e980", "value": "e9afa05c2eee96998c5fbbb24192314ad85f86bb6cf9937736763abbd14b6a93", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4300e846-9fd5-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618702386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702386, "uuid": "ca58cf5c-bc52-4283-9ccb-28e15c2389dc", "comment": "Malware payload", "value": "5a94803b541d1d602191807544ef0add", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702386, "uuid": "216eeefe-02c3-46fc-b044-28bac836b936", "comment": "Malware payload", "value": "ea3244b906d0a52bc6b2a32ebe42a0c9c5a414203deaee30a6062cee00ed7673", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702386, "uuid": "61834c20-082d-4e93-843d-9854267a2ae4", "comment": "Malware payload", "value": "5bb1097f38d8be86cac9119305a2f3f2b18d2ff9", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702386, "uuid": "8d969963-92e1-4f01-97d9-c1efb49a970c", "comment": "Malware payload", "value": "6f97894d4999a39b6b60f95967a94121b48d511da7bfa043b3a63511f4509c41fcf75bcaee230411d82f3fa50427e1ff", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702386, "uuid": "68740117-a00f-4cc8-9a7c-4dac7f98cb12", "value": "2AF3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C5846E9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702386, "uuid": "0f21dcaa-0599-4099-80f3-3d09a6e99dcf", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702386, "uuid": "109e1dbe-e250-455f-b1c8-dea7436aa637", "value": "3072:/iFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:0eAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618702386, "uuid": "d0b960e8-b510-428b-aa7f-cf6adfb59ada", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618702386, "uuid": "f54525fd-a7f8-470a-a2f5-551af47eb6b3", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702386, "uuid": "90b0ef55-ba7c-4dc5-8c29-9d343423b2fb", "value": "ea3244b906d0a52bc6b2a32ebe42a0c9c5a414203deaee30a6062cee00ed7673", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ec47c1d-9f9b-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618677495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677495, "uuid": "17f1ab8d-a88a-42a8-bc7a-1e2393a74883", "comment": "Malware payload", "value": "b85855df7a2f9b048e4fe01da0d7c294", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677495, "uuid": "e1b6d674-f65e-4f87-b491-9a59c7992a02", "comment": "Malware payload", "value": "ea343a5d7c7b7ffde7f173c7f0359dc3197e2c6d05674c23dd45a73848978d38", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677495, "uuid": "5a5e1242-de69-48ea-adad-8268b6ee1815", "comment": "Malware payload", "value": "fb28fe93073a9d60c161a464f3c6e766cd78b71c", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618677495, "uuid": "dbad3d1f-ffee-44d9-80dd-0bc3488dcc8f", "comment": "Malware payload", "value": "858b81b59214377df5af1021e3135227d0f827462e773b1009028dd87cedde675e461c51c49fb365819e5e7621330cd4", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677495, "uuid": "eb5a770a-4cf8-4fd6-95d0-07a510d5310f", "value": "E1F3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B496B1FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677495, "uuid": "859fac5a-e924-417d-84bc-b1ba34601414", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677495, "uuid": "8f957484-486e-47ec-a598-a7ec8aca2dcb", "value": "3072:EA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:E3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618677495, "uuid": "12564d14-d26a-433e-8e09-4d9191a133e7", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618677495, "uuid": "90ecdf98-2791-4118-bb30-4c9ad7e03224", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618677495, "uuid": "ccc99799-b464-4bc7-ba6c-21341947eda3", "value": "ea343a5d7c7b7ffde7f173c7f0359dc3197e2c6d05674c23dd45a73848978d38", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ed8cd8d-9f93-11eb-abe1-42010a9c0039", "comment": "Malware payload (SnakeKeylogger)", "timestamp": 1618674140, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674140, "uuid": "6d1562cf-aea0-4245-a5f8-b400b83e7e84", "comment": "Malware payload (SnakeKeylogger)", "value": "859783f0d21a9388110fc8c0ba272448", "object_relation": "md5", "Tag": [ { "name": "SnakeKeylogger", "colour": "#5385B9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674140, "uuid": "e66d8deb-5098-4d6e-863e-2fc418a5dcdf", "comment": "Malware payload (SnakeKeylogger)", "value": "ea4c4b1ec2047b99eeaeaf1ca9c81c66c3878f4b5d2ba8675c5cea51c0defbbc", "object_relation": "sha256", "Tag": [ { "name": "SnakeKeylogger", "colour": "#5385B9", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674140, "uuid": "51fb8118-5658-438c-9784-e3d7004dccb5", "comment": "Malware payload (SnakeKeylogger)", "value": "731650ac444a9df8e3699fc33511d611141f818d", "object_relation": "sha1", "Tag": [ { "name": "SnakeKeylogger", "colour": "#5385B9", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674140, "uuid": "49d404a5-77b6-4575-94ff-c6d43ab2064f", "comment": "Malware payload (SnakeKeylogger)", "value": "d42495db2f600d3618cb7bcd6e68d0cc2eefaaf357d2a9fe27444f0ea863936a3c602567a85ed1f42a9246fccf550a46", "object_relation": "sha3-384", "Tag": [ { "name": "SnakeKeylogger", "colour": "#5385B9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674140, "uuid": "e193fdf1-c1e2-458e-938c-abcb983272fb", "value": "4D64E05552848B07CDA58FFF0CDAC6D08FB3921564FCE742ACECE2E49642366351E27A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674140, "uuid": "7f22be1c-0693-4858-a5f5-c76cedfa7ccd", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674140, "uuid": "30b08867-df4a-4cd6-b36f-9a4669fb2f99", "value": "6144:wN+RABIcF20bJXU1jyKPVuj6/6tIKyHo9:wwRAvURXuaXKyI9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618674140, "uuid": "49d43c4c-4112-4610-937d-5d1253b33245", "value": 316216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618674140, "uuid": "84635c6c-d92d-48a5-9dde-dbbc5f5d8de8", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674140, "uuid": "c3115bf1-f878-4281-9700-6f3a0c52b8e2", "value": "SecuriteInfo.com.Trojan.GenericKD.36723138.25861.12540", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d97d1edd-9f85-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618668279, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618668279, "uuid": "4bea770c-13e5-49db-9fe9-e0046a1e36b4", "comment": "Malware payload", "value": "63a81bfdcc836ea8d2275e88be463a4d", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618668279, "uuid": "bf721b57-9397-4b78-ae6a-f26188b4ba9c", "comment": "Malware payload", "value": "eacbf64d604486136f1947f568e8374127f165325cf2e75478b37b2eaac73dd4", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618668279, "uuid": "729ef168-bb23-47d1-8243-aa06b47c61b7", "comment": "Malware payload", "value": "5288c5e4fe7ec075aa5a1b3e4e606c16cd58edf5", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618668279, "uuid": "c2d14805-0e47-424f-9f08-812f7ee416e0", "comment": "Malware payload", "value": "4ca8c33c7a97aad0b222f9ad97eed79eca06792a9b971d1cdd382b0b717a2f6d839875cfe7484a361925f87a2537d51e", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618668279, "uuid": "7c96efca-a4b6-4afa-8ef3-e1b0358581b3", "value": "EFF3D088CBB3E4E6EFB3D37966F85E1B461174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618668279, "uuid": "1dcbf519-83d6-4227-926e-ad56dcefcbb5", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618668279, "uuid": "899b4f7f-2763-4431-b96f-30c6aa182dd7", "value": "3072:omNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:xLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618668279, "uuid": "bd0dafaa-5530-4268-8067-304f1e2207ee", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618668279, "uuid": "82d7d8d7-e9e6-45ac-9bbc-33da1ab99fb8", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618668279, "uuid": "3cebaed2-b2ee-4d30-ab93-c608062e6ec0", "value": "eacbf64d604486136f1947f568e8374127f165325cf2e75478b37b2eaac73dd4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0fe99a6-9f2c-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618630093, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630093, "uuid": "5fb91f32-c953-4918-92e9-8ec8785126e9", "comment": "Malware payload (Dridex)", "value": "a36254e8e73aebb71b48c472945bace0", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630093, "uuid": "927753e7-ea5a-4fa8-b0d6-3b13b9502e87", "comment": "Malware payload (Dridex)", "value": "ead78a2883ef5b4acf5b9ecd84a3b2b16036d6b8ca8113a1aa41e8c45f430806", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630093, "uuid": "0300d12a-0b98-4b6d-899f-3169f1ec723d", "comment": "Malware payload (Dridex)", "value": "8c5b2092aa07f22f29d3163102b83e31c62ec3e0", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630093, "uuid": "d7d89fa7-62b0-411f-b8c4-eb93e36e51e6", "comment": "Malware payload (Dridex)", "value": "19b12a1aee0a09e087905de8934646bd80bfb4804f4c9a0b4a26ac87fcadb446a08deea60d1a1e36514c0cffd2db59eb", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630093, "uuid": "efc176ba-5e90-4cd8-ad76-9ddaa15ad480", "value": "4AF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630093, "uuid": "33e00fb1-360e-4285-9b72-3d0ba291fec3", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630093, "uuid": "a3713a42-d8f4-4b3a-bf11-29cc011fbdf0", "value": "3072:OmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:/Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618630093, "uuid": "fb4dc2f7-1104-4fc7-b1a1-e22796fd4c07", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618630093, "uuid": "ca1d11fe-eb37-426e-a786-88b7bdccc4f0", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630093, "uuid": "21f42dc4-217f-406c-af70-9ae1c52f66ed", "value": "ead78a2883ef5b4acf5b9ecd84a3b2b16036d6b8ca8113a1aa41e8c45f430806", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f913e793-9fa9-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618683794, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683794, "uuid": "2f204dc9-0ddf-413b-ac2f-4bad27f2fa66", "comment": "Malware payload", "value": "0adf1ad0d8a3a8e9f54ab254ed188553", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683794, "uuid": "7e361ae3-b2eb-4a78-92fc-39a887274593", "comment": "Malware payload", "value": "eb7d80402e5e7200f00020dabe0f2fda1c3b5ec58450f4124ab4ae25f86a29d4", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683794, "uuid": "afb924c8-eee8-45ec-bcd6-728a23558adc", "comment": "Malware payload", "value": "82f847cc3a747d9f87477fc96886336a7c61d2ae", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683794, "uuid": "a4ad3814-aff1-4f53-ae8d-9a8e3a23e7ee", "comment": "Malware payload", "value": "f8474140346b2363b9dd14ee52fabb63991607068d89f2bd398fa74013bdbbd14c99efef0be226e3874d187823008583", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683794, "uuid": "58c892ac-253e-4b6b-9e7e-bd321d021bf8", "value": "46F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683794, "uuid": "15ef38fc-0e56-4d16-84eb-ce2414408bde", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683794, "uuid": "a5f4f8dc-dcca-4470-b2ca-597f424350f0", "value": "3072:5mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:oLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618683794, "uuid": "c2842b0a-f10f-4898-87fd-da44adb0a4be", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618683794, "uuid": "39be564c-3d26-48c8-bf99-da5bd9ff9152", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618683794, "uuid": "df92635c-41e0-4bd9-83b2-594cf383890d", "value": "eb7d80402e5e7200f00020dabe0f2fda1c3b5ec58450f4124ab4ae25f86a29d4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c92e3c50-9f8e-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618672117, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672117, "uuid": "a4b2d0da-36a4-455e-9d07-2c8f7dbdb3e4", "comment": "Malware payload", "value": "39f61cedff503e262a779a6ae5aa90a3", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672117, "uuid": "c2905978-318a-41ae-8352-256b54e2fecf", "comment": "Malware payload", "value": "eb84b3d25d791efe8d26dc7bdc10d026ddd58475a94312c15477a91b486d8814", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672117, "uuid": "1b3988eb-72fd-4d50-8d4e-d7418d3bb7bd", "comment": "Malware payload", "value": "7e9062f04c4056d5ce67ac1075d333ee70c5c0d7", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618672117, "uuid": "6f1553eb-94a3-4e77-a8ec-da30e7fbe035", "comment": "Malware payload", "value": "d8c93be813557c8425a1b1b8a5f7979f21b176b9f4b9bc858a5286cc4a1964201e2cf6df5f987df844ab50d21720c39e", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672117, "uuid": "bc57a883-8b4f-4ddc-ac5d-5f983891130e", "value": "44F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672117, "uuid": "53f15735-5caa-4b0f-8d21-418f09240d3c", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672117, "uuid": "fbd59c01-2f9a-413e-afdd-6a533b55db49", "value": "3072:Mlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Mlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618672117, "uuid": "f23bf4da-bda1-4598-9561-617180a68939", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618672117, "uuid": "c919696b-383a-46ac-a590-b14545bbef68", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618672117, "uuid": "ba43fe34-5fcc-46a3-98eb-26d682dd626d", "value": "eb84b3d25d791efe8d26dc7bdc10d026ddd58475a94312c15477a91b486d8814", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6eb7c10e-9f77-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618662087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662087, "uuid": "5f59c9a1-51d6-47dd-b751-f225e5eebcb5", "comment": "Malware payload", "value": "24a6c1529f4168af70cb003e9385fe85", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662087, "uuid": "828c7d6e-3d29-41bd-b66c-5c1c4fe044fc", "comment": "Malware payload", "value": "eb9f65e1af0efe038bd548d0b6c55aa4b2dafd4da1581808d6150ec330665aca", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662087, "uuid": "4a3d8827-7df6-4b7a-a3cd-6380bb3c2b7b", "comment": "Malware payload", "value": "7d2bad44eb5a649bc66b35905e143ca42b4c6902", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618662087, "uuid": "5970a8c7-48f4-41dc-bf4d-985aae5824a2", "comment": "Malware payload", "value": "07a9460f808659aefc4defa7fad67acd669326568eb4f6c9a348ea24ea9d51b330bdc8d7545d809f913f8084f1b166a1", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662087, "uuid": "8e2f7e2b-016d-4b51-b3c4-b4f7f3839a7c", "value": "4BF3D088CBB3E4E6EFB3D37866F85E1B561174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662087, "uuid": "bebf4bc9-ccdf-4909-8893-85a9634ed535", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662087, "uuid": "7aeee668-c3ab-4e57-957c-bc3dde803c11", "value": "3072:emNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:vLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618662087, "uuid": "bdd5f887-9f6c-4d81-b400-02e53c4039ae", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618662087, "uuid": "bf39a086-bfd9-4a73-a181-fc5b24bcc11a", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618662087, "uuid": "02a2fa4a-5521-426e-b058-69288a2d9348", "value": "eb9f65e1af0efe038bd548d0b6c55aa4b2dafd4da1581808d6150ec330665aca", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "609382b8-9fcd-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618699000, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618699000, "uuid": "4396b884-59c4-401b-ba7b-718276ddb8fb", "comment": "Malware payload", "value": "9aeac113a38d0a8f9ca5ed683ff12dab", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618699000, "uuid": "f253bd7d-5dd0-4bf1-bc49-bde3757ba990", "comment": "Malware payload", "value": "eba5b27f9b10f1ca635d345eed9cc45dff67e18273d6160b58c60dd5d8958c7d", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618699000, "uuid": "2d35ab9f-9dbf-4333-bdd3-b07bed819518", "comment": "Malware payload", "value": "56a58b18351f0a79a06c91302836aa70c16c5be2", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618699000, "uuid": "7f526e1a-dcff-4231-a3da-a8ce8cd2b51f", "comment": "Malware payload", "value": "47274ce8786a59e26c7a2d533a33e8dbc4401a1c4ad64782636951c39bd397dc5bce5a79358131156981b37392b373f2", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618699000, "uuid": "6a178d19-8aee-4bf9-8dc6-e931313a4ce3", "value": "F7F3D088CBB3E4E6EFB3D37966F85E1B4A1574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618699000, "uuid": "ef276e8c-4c08-43fc-8410-312fff1be820", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618699000, "uuid": "b8ca35aa-f1bd-405d-a731-0b6f97f98141", "value": "3072:wmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ZLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618699000, "uuid": "185009f2-e752-4c42-939d-9830f1a44a37", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618699000, "uuid": "16304cbe-ab6c-490d-9797-86daa52967b1", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618699000, "uuid": "580fdd58-b3f4-4e80-b0ee-33cb6a3703a6", "value": "eba5b27f9b10f1ca635d345eed9cc45dff67e18273d6160b58c60dd5d8958c7d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15b770e3-9fc9-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618697156, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618697156, "uuid": "1e96c302-b0e6-42b3-9f09-2bea4b3ee0cf", "comment": "Malware payload", "value": "a84696797dd4313a45f9e9bb19f25272", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618697156, "uuid": "40cdfe85-2572-49a9-a696-6677101f1b0a", "comment": "Malware payload", "value": "ec0cb44b6791be0c2944419b517c088fdafa296afff6f5913dbc5a86698d31e6", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618697156, "uuid": "b9640f9e-e837-4d1c-9e63-858c7e17e653", "comment": "Malware payload", "value": "a94b4979cb5cf4be1e8114e1cee00bdc882bdf3c", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618697156, "uuid": "29e22321-1fc1-4e72-8a7f-f37e34857e54", "comment": "Malware payload", "value": "435c9e2a18b9c076bdf8d32253eeaa34c3d3f20f6a596e4e5961a94801c4316c9e9cd6c9eea1dbbc5ae09f725de24d81", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618697156, "uuid": "b842975c-91da-493a-b311-f10747c12a21", "value": "8DF3D088CBB3E4E6EFB3D37866F85E1B461174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618697156, "uuid": "cb73acd0-2c4c-4b14-888f-ac60af5dfa79", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618697156, "uuid": "ba2accfb-e8d0-4807-819d-1aef9c1abfa4", "value": "3072:/mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:eLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618697156, "uuid": "22725479-508d-46cf-9540-86ec96f39857", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618697156, "uuid": "4279f1b4-70ea-455f-b4d6-5cd5f3714585", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618697156, "uuid": "ec936ccf-0330-4e90-bbb0-37e85c6290e7", "value": "ec0cb44b6791be0c2944419b517c088fdafa296afff6f5913dbc5a86698d31e6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2d1b891-9f23-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618626123, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626123, "uuid": "009abd81-2415-4cc6-a7d1-0b429c399786", "comment": "Malware payload (Dridex)", "value": "bac697b99126dbf4c64881204558bf7a", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626123, "uuid": "68673613-12ad-4e58-a303-b06337921468", "comment": "Malware payload (Dridex)", "value": "ecbe6bae28693afa96c3db3551484ad77ee9f7c8335cf93d91d1d22af721b5bc", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626123, "uuid": "3a38e03d-ab81-4581-b8ef-cd6cd9a131b4", "comment": "Malware payload (Dridex)", "value": "d1305b84f34d89d37c491dfb907a55e2968cce17", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618626123, "uuid": "4663bd86-2474-4025-ac26-66f7559d5c15", "comment": "Malware payload (Dridex)", "value": "16abfd9db05c37424ba264a5b9d6e67c140c4769bf42d55385888e45020639385a4e1fc20410b90aeade08b616c5aeea", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626123, "uuid": "cef11175-b622-4f09-a800-f36ea8aee896", "value": "AFF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626123, "uuid": "8b072d3e-1492-41a1-bbbe-452f93419245", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626123, "uuid": "acc8a156-7480-4cec-8be7-6deea65eccf9", "value": "3072:HmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:GLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618626123, "uuid": "f5b366e1-f923-490e-a058-6b0976252112", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618626123, "uuid": "cab81716-4f08-436c-8f27-c32cab2e393b", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618626123, "uuid": "73833a6f-58bc-437c-ad4a-5bfcc0751f41", "value": "ecbe6bae28693afa96c3db3551484ad77ee9f7c8335cf93d91d1d22af721b5bc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "acda0076-9fb9-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618690538, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618690538, "uuid": "d3dcf7d1-a268-4cc3-b764-6dbc7f0ff2e2", "comment": "Malware payload", "value": "18ee27af3f34ec61df568536256cfbce", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618690538, "uuid": "db239579-baf4-4738-a441-9d0980f44dfc", "comment": "Malware payload", "value": "edd79c9563519c9e9bb0797107b7f3e11ced8d1e3fa61d0beeb9ca9d642750b8", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618690538, "uuid": "7379a5cf-93e4-412e-8638-d8e9b46a0f0a", "comment": "Malware payload", "value": "e095e803781ae8c3e0fec681106ef63e0e7bd972", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618690538, "uuid": "b014e33f-8c97-4ccb-9285-681b8a834dc7", "comment": "Malware payload", "value": "ca516c49d8396d65d7e4b76489b31823d5317608706e0602205380dd9ffe33240fba2befe739bb2bc661dba2292b8dfa", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618690538, "uuid": "91ff83b1-a640-4a54-bbc4-3c5000eab0c9", "value": "B4F3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C5846E9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618690538, "uuid": "f3004fef-9d86-4e71-94c0-b9f6a9b7a23d", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618690538, "uuid": "2e3219e6-a4eb-4fd6-a00e-31fdcccff4cc", "value": "3072:LiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:oeAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618690538, "uuid": "acb21a27-6862-4603-b072-9b68d7ed33fa", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618690538, "uuid": "a292924b-10a9-41a6-8a7a-9253bd1849ff", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618690538, "uuid": "7bc8e706-17f7-46d3-a2c1-976c8c0b65f6", "value": "edd79c9563519c9e9bb0797107b7f3e11ced8d1e3fa61d0beeb9ca9d642750b8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "192893bb-9f2c-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618629731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629731, "uuid": "88af76f8-3bae-4014-aabc-f59656f8babb", "comment": "Malware payload (Dridex)", "value": "9195bcc5fb7fa86719f2aaa497b56295", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629731, "uuid": "01aaaa3f-4d14-40ae-9247-c9731d466e88", "comment": "Malware payload (Dridex)", "value": "ee00615b84b9b87bb9808f2ddf57441bb6b7ef9d417dd1c4dbe1f6c325831fa9", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629731, "uuid": "19721560-85ed-4e63-97c6-1b30584b18bf", "comment": "Malware payload (Dridex)", "value": "f23d57d426b6420b86bf000dbc2279463bf6edc1", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629731, "uuid": "73dfac98-896e-4ca3-8ec6-a4da40774342", "comment": "Malware payload (Dridex)", "value": "bd1266676cf36d23c19745db56788b4b87f7642b74ea9b55e2d3e5e1986e3025a0884be277b0c082c316f8e2573696e8", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629731, "uuid": "7b1e33dc-7dea-4170-bc5b-81326c29f8cd", "value": "62F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629731, "uuid": "c5c999b3-3eab-48b2-be6c-a3082cbae003", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629731, "uuid": "6e30f382-5d48-4085-8cf8-c1ec0a375676", "value": "3072:dmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:cLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618629731, "uuid": "65d3514c-4c64-4fd5-a59c-10fa617151a0", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618629731, "uuid": "f001bff1-c76d-48a8-a033-35230c87ced3", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629731, "uuid": "e521dd0a-67ce-4963-a726-bca8d1769e43", "value": "ee00615b84b9b87bb9808f2ddf57441bb6b7ef9d417dd1c4dbe1f6c325831fa9", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c47e62bd-9f38-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618635172, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618635172, "uuid": "d1cdcfe8-d469-45e6-8bc9-2eb250ed3ebd", "comment": "Malware payload (Dridex)", "value": "f0c497a2fbb3379c7b7cee99ad9977a9", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618635172, "uuid": "aaf0b77a-f757-4e83-b0ae-1334e892413e", "comment": "Malware payload (Dridex)", "value": "ee1554317fb1f82ad3f33804cd1730ab2e3d1204626d66f54a1022b6844532c2", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618635172, "uuid": "406b2c51-38d2-43b2-bc6b-002ca9e3eba0", "comment": "Malware payload (Dridex)", "value": "55405410c4ca723bb73063e804763f8bfa7cc8dd", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618635172, "uuid": "de8d98bd-f000-4a30-b00a-fd2d51d31a6d", "comment": "Malware payload (Dridex)", "value": "782c213e44a60385dc634a49eff791bc694504984f7b1a9776a1424a6bbad7a2de7cfded5c6b968c102d7e6cd5b7cb01", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618635172, "uuid": "3a991936-906a-4d10-941c-6db0df2bcdcc", "value": "CCF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618635172, "uuid": "128dc327-3feb-48df-b7cb-a7e3c2a0a33b", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618635172, "uuid": "12c4defa-5233-4cfc-a6d0-0b2bf8c718ca", "value": "3072:cmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:FLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618635172, "uuid": "9c3be833-a0ad-4998-a358-ee2fe26a92d9", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618635172, "uuid": "2c6cd6a3-b78a-4a23-ac89-c5a3e42a4690", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618635172, "uuid": "f61eef99-609f-48f9-b074-2609a481379e", "value": "ee1554317fb1f82ad3f33804cd1730ab2e3d1204626d66f54a1022b6844532c2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0026b17e-9f2e-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618630548, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630548, "uuid": "29a68d57-9749-45d1-bf1b-cf0fa7986bb6", "comment": "Malware payload (Dridex)", "value": "b28a7c73accae7743e47ba875cafe5c7", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630548, "uuid": "5fb76470-7299-4096-9595-652c525ad79c", "comment": "Malware payload (Dridex)", "value": "ee181c8f4e8087e461db0536b0775e8a13c871ca4cef0b57940bd2737a9f11c9", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630548, "uuid": "fcabe520-d83e-4089-bb40-28b45ebc9c7c", "comment": "Malware payload (Dridex)", "value": "6a2331928d60a3cf513114bd61b7f48e46a1db5f", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618630548, "uuid": "76780eb8-adc6-4be4-acbd-28b4edc438fe", "comment": "Malware payload (Dridex)", "value": "a1cc165cac3acb5f82f2d25d53d1e42ad5f5a28b9c0692bbcbe665944764a4e27e8e224b76bb4249e2a993a0085868ed", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630548, "uuid": "86cebe42-a8f5-4950-a489-8adf38882cd1", "value": "C0F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630548, "uuid": "f5a0803b-bd4a-4d65-a711-b9928f4b4039", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630548, "uuid": "80c828d6-2337-4c1b-87af-9fa1f8f13926", "value": "3072:dmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:cLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618630548, "uuid": "3d2e61d6-58f6-43a5-979f-7508dd567ec9", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618630548, "uuid": "8c7d4780-37a9-4a4c-8bf2-5402210118ef", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618630548, "uuid": "60766b66-9a01-4da9-824f-20a90f8dc41a", "value": "ee181c8f4e8087e461db0536b0775e8a13c871ca4cef0b57940bd2737a9f11c9", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d38b7d8e-9f69-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618656243, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656243, "uuid": "6c29e10a-5922-4ea1-85d7-347c97cdf829", "comment": "Malware payload (Dridex)", "value": "4f4d00ad07a7e086458c60bbecda9458", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656243, "uuid": "96f80988-ef43-476a-9630-830b2e02ed8b", "comment": "Malware payload (Dridex)", "value": "ee42ecd73fbcd50ac0559a5565cb71d5545fcbb45a24a66e4ce1f9565f371c67", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656243, "uuid": "b6bc0852-4d61-49d4-acf8-ab79189619fa", "comment": "Malware payload (Dridex)", "value": "da317a12a6438ac21d23d3b2466a4b98b5ef08e2", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618656243, "uuid": "3eea6ef4-14b5-4550-aa7c-63fd70022037", "comment": "Malware payload (Dridex)", "value": "21bf04247d777bb99d03ed115f621c6c9d5073604825aa44cf6aa288d508f222e73d66b23ece023529898602df4bae88", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656243, "uuid": "42afca31-c966-449e-9d32-18f7595551fd", "value": "BCF3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B49671FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656243, "uuid": "f18c453a-a884-4e26-a17f-5c4c201eec86", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656243, "uuid": "8c56e69b-d53d-4e50-975f-f9f0a5c7a086", "value": "3072:RA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:R3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618656243, "uuid": "8ca5157d-8d9d-45e7-aaa3-138c413379ff", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618656243, "uuid": "13c28641-96a5-4bee-ada2-5c573d01d9b7", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618656243, "uuid": "6ee3543a-5e78-4b4c-b76b-9084af8dd038", "value": "ee42ecd73fbcd50ac0559a5565cb71d5545fcbb45a24a66e4ce1f9565f371c67", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17543619-9f38-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618634882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634882, "uuid": "318374bf-0ba9-4d29-a4b8-f48d9c3c2e4c", "comment": "Malware payload (Dridex)", "value": "2cb596712e69b762dbf9fc0c8ea4be17", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634882, "uuid": "c2c03cee-3128-4ab2-990b-bdfb863222cb", "comment": "Malware payload (Dridex)", "value": "eee4da89a3922ae5e5e71b68bec7de7203ec596906d5485e8d1b7966ff80540d", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634882, "uuid": "e052d42e-9a2e-48ae-96ea-bba401de8ac5", "comment": "Malware payload (Dridex)", "value": "2d64874b8bc289e69584e20cd1580b220c762b9a", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618634882, "uuid": "805caf51-c92d-4b0b-aa2e-27d725cba09f", "comment": "Malware payload (Dridex)", "value": "7eeb0cc6d56d742f5edf60f27d9e9623a48fce488a0fcecc1e5e9000f05a0672d15e432e92b960aa39a480c06dd6a55b", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634882, "uuid": "06832dda-9534-40c8-815d-c5ee3d8e173f", "value": "B5F3C088CBB3E4E6EFB3937966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634882, "uuid": "65e74376-430d-4089-8fd5-0da6237aa578", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634882, "uuid": "d8598c72-d4ee-4fdd-91b9-b6cdc096bc45", "value": "3072:FmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ELc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618634882, "uuid": "ab47bb07-76ac-48f2-93e9-311d0808802c", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618634882, "uuid": "4c928b73-5474-4dd2-801d-ac463b17361e", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618634882, "uuid": "4a947f8d-bf13-40ea-bda8-0d511acc14f3", "value": "eee4da89a3922ae5e5e71b68bec7de7203ec596906d5485e8d1b7966ff80540d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c408a066-9fa2-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618680698, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680698, "uuid": "309e1c59-24be-43e8-af87-1904060e0069", "comment": "Malware payload", "value": "4197f74637272c959dc7159887992614", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680698, "uuid": "7b74b6c1-41bd-4862-90f6-b3c03376a0dc", "comment": "Malware payload", "value": "ef138d748817476999c69718d9904541658ad6587e5c2fd4dc50ec7271ff43a7", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680698, "uuid": "6946a1a4-377c-4271-86e4-027b78329950", "comment": "Malware payload", "value": "b94a595c6056768d7df6a3dee6024c3aa80bc4ec", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618680698, "uuid": "c00b9807-12a6-437c-b6a5-3b666ae2fb38", "comment": "Malware payload", "value": "c90d5a9fbeee568f9540007b0baaa990234a2753c37a09009f15ca4f8e0f7f1744f23b6985eb109607862da75a2070f0", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680698, "uuid": "78d1190a-f373-4fba-9c95-865219efc237", "value": "C4F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680698, "uuid": "9cbc1748-078e-442e-a51c-732829940606", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680698, "uuid": "01d3b2ee-c0ba-48c2-b96a-d0044ebcaca1", "value": "3072:9mNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:8Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618680698, "uuid": "d8b3d015-56be-4bec-9b6e-51cd9503dc79", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618680698, "uuid": "0f2261f5-4bf3-412d-b5ed-6a6532d35b30", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618680698, "uuid": "edce09f6-71d9-4ad3-882c-51ab2afacb80", "value": "ef138d748817476999c69718d9904541658ad6587e5c2fd4dc50ec7271ff43a7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8cde33f0-9f59-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618649252, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618649252, "uuid": "bb1c7ae2-f4d7-48f6-8b27-5672d5c9f961", "comment": "Malware payload (Dridex)", "value": "24c93fbe25c9d36fc417f107ec12cfeb", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618649252, "uuid": "5f81af3f-c2e5-4beb-ad32-ddf37e191b29", "comment": "Malware payload (Dridex)", "value": "f045bab9aeac816a00dbb171959f553e9c937fcf6f5b6e523177110890175498", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618649252, "uuid": "b5950086-9563-4b29-b36c-cfbd1b3d0a39", "comment": "Malware payload (Dridex)", "value": "6d83036d69b0f5fa26c5e8c5476f45af3ec31506", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618649252, "uuid": "e63f36c5-65a8-430b-80bc-6891c7ca7022", "comment": "Malware payload (Dridex)", "value": "9b0b33164f170cacf84294e2b0b93f4aec30c3e20ef5718cd19092ab98d6727040eab2b9f20aa908eaf960a9150ef68a", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618649252, "uuid": "8812599e-de00-4e2e-9223-1b26c1a1c876", "value": "39F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618649252, "uuid": "a984c985-11ae-41df-9901-1124bbf07b68", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618649252, "uuid": "b76fe05c-bc83-4cf5-8166-348d6268ffc7", "value": "3072:Klpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Klo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618649252, "uuid": "5e1ccd32-be88-445c-907e-8b8f3f5a6832", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618649252, "uuid": "d63e41ca-3327-4c85-8916-63049abdf540", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618649252, "uuid": "cee82062-b6f1-4a03-a5e4-ec689be7bb5e", "value": "f045bab9aeac816a00dbb171959f553e9c937fcf6f5b6e523177110890175498", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60ac5833-9f34-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618633287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633287, "uuid": "bd582aaf-7043-425e-8b85-3ac109f1b05f", "comment": "Malware payload (Dridex)", "value": "3aa95bbf8ac0677b987f4005f478a202", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633287, "uuid": "ffc87aac-b7e8-4442-9693-b229db112c20", "comment": "Malware payload (Dridex)", "value": "f053c1aff4739a05cdf8f5bbf1c6173f79b8ca21016480fe6f90ba745d9044a8", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633287, "uuid": "4ce6dcbf-b968-40c1-a8b2-17e4e963a3d8", "comment": "Malware payload (Dridex)", "value": "d410bacb54ed1279a5cc1278899854dd1ef54c12", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633287, "uuid": "94cc9901-2f15-4c53-9808-11abd1cfb9f2", "comment": "Malware payload (Dridex)", "value": "d239d449b0e5be3124446e03badf5f2b1f5273d39eb80829199c0c3cb46b3f1a9ee4c58167ea4979ab3c9989f310a5fd", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633287, "uuid": "94706838-31d7-4776-820f-e9343c0fba2a", "value": "3CF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633287, "uuid": "e6d44940-e174-4171-8c44-7704ddde140d", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633287, "uuid": "936ee365-de4d-46e5-9ab5-edacbc8d42f5", "value": "3072:3lpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:3lo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618633287, "uuid": "9cd01454-07dc-4bb6-a336-6e00f9bd9116", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618633287, "uuid": "4ee1fc34-2ae5-4352-9504-ed9f683059d3", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633287, "uuid": "3de74d2e-198b-4511-a181-d333b34f34b5", "value": "f053c1aff4739a05cdf8f5bbf1c6173f79b8ca21016480fe6f90ba745d9044a8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77234f82-9f7d-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618664678, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618664678, "uuid": "d1cc78a9-a91c-4649-a0d9-0952f628d539", "comment": "Malware payload", "value": "74f532f59fae1d62d98c8d41fbe2a5af", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618664678, "uuid": "f196f120-8c06-46ad-b0d9-7116c0e092e2", "comment": "Malware payload", "value": "f07ba4d8d2354adbe0374a4b50d46431fb2a1f11d5a62b28a439b2a47aaf1053", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618664678, "uuid": "a82e2c5b-6c51-45c5-b37f-8615d084acad", "comment": "Malware payload", "value": "132b392e984f66c2b0e73e59e0a2b0d533c2e067", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618664678, "uuid": "11ac5c9d-1e80-4e68-be1a-026ff200200e", "comment": "Malware payload", "value": "52413e1b4d3a46af96e4edc0891dc416540091622aef5e8f6fba08c2c3ad41325cccb29cfa711fcda6ef80d013066430", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618664678, "uuid": "3dd4a6fc-6b2a-49e3-ad61-a07c20756cfd", "value": "10F3D088CBB3E4E6EFB3D37866F85E1B461174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618664678, "uuid": "b6680217-094f-467c-b2f3-5a4c7f5a85ad", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618664678, "uuid": "5918dc40-4199-48fb-8b58-60ab30ac354c", "value": "3072:ZmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ILc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618664678, "uuid": "926ffb8c-0dce-424a-83dc-a40a630565e6", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618664678, "uuid": "f62d6beb-2d40-4463-a8ee-8d165eb3da8b", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618664678, "uuid": "ee1bd3a1-e851-4467-b3c3-fac849d4c532", "value": "f07ba4d8d2354adbe0374a4b50d46431fb2a1f11d5a62b28a439b2a47aaf1053", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e6ae6f1-9f12-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618618761, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618761, "uuid": "ca7e75e0-dfe6-40a4-b925-bea8998e5707", "comment": "Malware payload (Dridex)", "value": "c029aa56cf62585831d160449207d1a2", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618761, "uuid": "735de5d2-3022-45f1-bdcb-47ac3822d686", "comment": "Malware payload (Dridex)", "value": "f087d2100143f359241f9c0b2e4df696c98c68fabe46e4654ef213238dc51be3", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618761, "uuid": "2256e2ca-578a-49cf-b4dc-46ad7090a1ee", "comment": "Malware payload (Dridex)", "value": "aed2ce4191147c8a5ab58c4e3c364d8232ae1262", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618618761, "uuid": "6e5cccfc-a2cd-4cf0-95cc-20dca7602169", "comment": "Malware payload (Dridex)", "value": "a8d49e83e2ad7234869a5a828d384db11d2e0ab9f0066183234989c97274e2cb0bcd9126d619c5d2f2cb633366bb3bda", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618761, "uuid": "de8ba939-611d-448b-91b2-2dbf34207ae3", "value": "CBF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618761, "uuid": "b4f07f43-d1fb-4d96-864a-001e50f145c1", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618761, "uuid": "8cc81a24-ff88-4eb4-b5ab-539e1cfe378b", "value": "3072:1lpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:1lo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618618761, "uuid": "308c8786-187f-42bd-badc-1353e2592bca", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618618761, "uuid": "b5b501f8-3617-49bc-9c52-9ed6717918d9", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618618761, "uuid": "0b9723bb-e5ca-4d95-90c6-fc123bf35dff", "value": "f087d2100143f359241f9c0b2e4df696c98c68fabe46e4654ef213238dc51be3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2037ec49-9f82-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618666680, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618666680, "uuid": "950b459c-1700-4cc9-997d-fb58fcf1dae2", "comment": "Malware payload", "value": "a455685d1f32d7d5e3a47958c6207008", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618666680, "uuid": "12e08b8b-503c-43c4-9352-485e91d86a9e", "comment": "Malware payload", "value": "f0b286755c3692c07527f5bc48747652a579d7091feb03dd6bd7d7e7efce1bd7", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618666680, "uuid": "488d005b-61fc-416e-9194-f46bc425ea0e", "comment": "Malware payload", "value": "69bbbec37ab30b4cdfd034c44b3cac98813977b5", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618666680, "uuid": "941d6c60-d52c-43ba-ae6d-2540e9062f09", "comment": "Malware payload", "value": "12e313f2af7c13a403a4f63ce600c47d2b317818110674e0c535df95337da5c4f75912773c6fbe3102f8b0f029acac1c", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618666680, "uuid": "63f99bf9-9f49-48af-891f-c897712fd8ee", "value": "41F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618666680, "uuid": "96a55aab-17db-441b-a923-242802d98887", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618666680, "uuid": "a504d883-7edb-4afa-8820-915497c79afd", "value": "3072:ZmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:ILc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618666680, "uuid": "521585da-3e33-476a-98e6-27bc958701a4", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618666680, "uuid": "fc5d2b79-6f09-4210-872b-722a0151340c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618666680, "uuid": "6b27af68-6ef9-428f-82d7-eb56a10a5fe6", "value": "f0b286755c3692c07527f5bc48747652a579d7091feb03dd6bd7d7e7efce1bd7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5689eccc-9f76-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618661617, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618661617, "uuid": "b4c2a161-7706-4209-a12a-2f5cb6c9fc8b", "comment": "Malware payload (Dridex)", "value": "7a5214d74862f45d80e929176c7ecfb7", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618661617, "uuid": "fe6ca7af-f7cd-4f97-905c-11e90d54de72", "comment": "Malware payload (Dridex)", "value": "f0bed87556a694f60e5692156220db3cc073f642944b0997ecf25f98f0418ec3", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618661617, "uuid": "e4a30bda-e4a4-45b8-ad63-fa40d28562f8", "comment": "Malware payload (Dridex)", "value": "79f9b5c7ee060f49c70f2bf1d7fc5e840c5e370a", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618661617, "uuid": "64e12de7-34ea-4d77-a8b8-a3c4420becbd", "comment": "Malware payload (Dridex)", "value": "97b0e3f0c03b36969bf27923bb41d09eb80eb72470c3f6eac8a0d68267b52203767a539b2ea829eac35f2590bca4baa8", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618661617, "uuid": "9e948201-8aed-4a63-9fc7-bbe51b816d59", "value": "6EF3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618661617, "uuid": "6930910b-a579-422b-af2a-2720ce28d6d7", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618661617, "uuid": "856dd011-c4e9-4f67-b304-0f4f7009ec57", "value": "3072:hiFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:yeAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618661617, "uuid": "128b3714-3145-4d10-a904-0f252d3173fc", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618661617, "uuid": "396d8f4b-2615-4a6a-a369-7e9afc62cc00", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618661617, "uuid": "2672390c-c800-4977-b93d-f78be6983947", "value": "f0bed87556a694f60e5692156220db3cc073f642944b0997ecf25f98f0418ec3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59c08e97-9f35-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618633705, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633705, "uuid": "7c94dd5b-8e71-495a-abcc-a80e804158e1", "comment": "Malware payload (Dridex)", "value": "ff3ee881a49b7dfc02374328a4de82d0", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633705, "uuid": "aed80a18-342f-4b64-934a-f22bdc3577b1", "comment": "Malware payload (Dridex)", "value": "f147bca1b3a36338fc3b504ea186fda47735ac81691749fe15b63c8147d6b247", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633705, "uuid": "56d3d5af-408a-4b63-9ddc-5e2430f7e598", "comment": "Malware payload (Dridex)", "value": "d087d123411ad068bcb3aad509ef30ba4bada392", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618633705, "uuid": "21facf96-08d8-480f-96bb-7cbad76ae050", "comment": "Malware payload (Dridex)", "value": "6339c18dc2881573c20fed969aaebb674d53ca50eb6fc9a0ffed2b5ee535f450b34f1f235af535f60e1287fbb7e995f3", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633705, "uuid": "a60d9f22-d399-4a49-989b-22859a613fbc", "value": "ABF3E00AED9FE988E85C51F1CA4D363EE9713E371B5BDD08C584AE9DC24B252A4F0352", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633705, "uuid": "8632c76a-67a6-4946-b2b6-afb87bfc16c5", "value": "f71b9cb9891e9cf4bae79d2b5aa115c6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633705, "uuid": "d50cb976-bc4e-43be-843d-d9c302c43f4d", "value": "3072:niFieJeVDC5PIh/31VeSDH2jW+zsKWncDlRe0PLDt:8eAU/TeSH26cs+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618633705, "uuid": "77243d0d-0822-48b9-933e-eb19a8571488", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618633705, "uuid": "12b1c336-86d8-48b6-a60a-f8adcf3557f9", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618633705, "uuid": "b6c3fbf8-76ed-49dd-a29a-821eaa61cf84", "value": "f147bca1b3a36338fc3b504ea186fda47735ac81691749fe15b63c8147d6b247", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7071d98e-9f2a-11eb-abe1-42010a9c0039", "comment": "Malware payload (Qealler)", "timestamp": 1618629018, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629018, "uuid": "f3e6ac6a-cdda-4560-9f00-7336af4c139c", "comment": "Malware payload (Qealler)", "value": "fe360b574a74c7e917ec000b1e74a472", "object_relation": "md5", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "qealler", "colour": "#22D507", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629018, "uuid": "12cac245-7e38-48e2-8902-6b77a4c3fcd9", "comment": "Malware payload (Qealler)", "value": "f18cb71c990f29dfc23caaa0167f5d6e676b81befcab0117ceb09f3510538b1c", "object_relation": "sha256", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "qealler", "colour": "#22D507", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629018, "uuid": "46eda435-b878-400b-abc1-4806c82b5cb8", "comment": "Malware payload (Qealler)", "value": "d2a37340b978c0ac479fa7103437365039d5ffd0", "object_relation": "sha1", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "qealler", "colour": "#22D507", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629018, "uuid": "4f1d9e04-167b-4205-830e-32e03a493bb1", "comment": "Malware payload (Qealler)", "value": "84a144160ca7f5f3b033bd923efd62b259c22378472560ea9392d53e48c94e897462c8e7f1472437b6c3d3e4a4b6d5e2", "object_relation": "sha3-384", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "qealler", "colour": "#22D507", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629018, "uuid": "cb222803-a8cc-4201-886c-eb47d0f92722", "value": "87B49E0A7AC7F825DC93E0F30951F121DA1D8598F90BB437716159EA0D20F865B8EFEA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629018, "uuid": "7b055616-cdbd-48a6-bf08-e90e224f205e", "value": "6144:ZaiYLghcijhRhxeT9KQlIIL0e0AoKatpjwqCU1vJIvdPs2w1pPhYNGrzRG:A5gdRMxlB2HKaLjwH2vIdPs28P/M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618629018, "uuid": "9ee99c57-d0c8-4c71-869c-427b4cef13a0", "value": 519779, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618629018, "uuid": "7008c44a-d0bb-484a-8267-85229b6c89e6", "value": "application/java-archive", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629018, "uuid": "6699cabc-e29e-4248-8e0d-487eb64ab7d9", "value": "fe360b574a74c7e917ec000b1e74a472.jar", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8be1aa6c-9fc3-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618694777, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694777, "uuid": "6254bbef-0ed1-4aed-9d33-8307522ac74d", "comment": "Malware payload", "value": "02f918e245b1027280c2400825498d46", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694777, "uuid": "75e5ce09-e704-451c-aa9c-fb14c8fd4e79", "comment": "Malware payload", "value": "f193a4238652d9f83b320fd0428d9c186528dc0dc3c40f79039c81327611513e", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694777, "uuid": "ab185b19-ad87-4a59-9567-03d5ba3bd661", "comment": "Malware payload", "value": "4055b8f93c057f4fc5faac15bdef425f245e60d7", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618694777, "uuid": "f437f2ca-4ea5-42ed-a8e8-76c21c07d541", "comment": "Malware payload", "value": "8bf337fd34c5ef6110865bdda6e680c58c1fb659c64f0a6c27a47c9365fc3ff6c3fdede1888cf8ebdcd8af04ac98b386", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694777, "uuid": "912097e1-1e95-450f-b26c-a56121d1331c", "value": "7EF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694777, "uuid": "1bc1150b-d629-4f41-801a-c1cd90d73db2", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694777, "uuid": "bab769e1-67da-4834-8350-bba653f5727f", "value": "3072:mlpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:mlo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618694777, "uuid": "99a69cd3-44e4-463b-ae19-8d2a990620a5", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618694777, "uuid": "a98b7982-67d6-44be-a47f-2cedef8b1fcd", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618694777, "uuid": "d3d83aa1-c3f6-4723-9b21-a9a6b52435e9", "value": "f193a4238652d9f83b320fd0428d9c186528dc0dc3c40f79039c81327611513e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc33212f-9f2a-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618629172, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629172, "uuid": "faed8716-aa99-4ee0-9a75-ebf518ac83a5", "comment": "Malware payload (Dridex)", "value": "898766edeee55df766f78f281fb87f77", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629172, "uuid": "47cf2a76-9ae1-4c6a-97cb-3fbaf87296e3", "comment": "Malware payload (Dridex)", "value": "f1b85f736cbfe8248adb96bf6ae4e76c4bb9edb3e3c9ac1baead00e12c60e201", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629172, "uuid": "dfd8414e-01ba-428d-bf4f-ae0bbed7b2d2", "comment": "Malware payload (Dridex)", "value": "873c955f636dc3e204d25dd9fa10d4f3788364c9", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618629172, "uuid": "3a611f0d-1289-4fc7-88d3-f15cb1f27edc", "comment": "Malware payload (Dridex)", "value": "c6a8f0f4a39528c4c0ca9c672a624d6e9c0ac11652a277b0e2dd1a1eacc6a6072947034782fa9350dc7dcabe7c735c7b", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629172, "uuid": "f400a287-b23c-407d-941f-21faed6cc3f5", "value": "03F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629172, "uuid": "90480a37-d909-4c5a-866d-e257c0819c1c", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629172, "uuid": "b6482a08-348f-4541-a292-81caa494d716", "value": "3072:MmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:VLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618629172, "uuid": "681c66b0-94cd-41c2-a9a2-ce3184e9b75b", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618629172, "uuid": "604aa10e-4e64-4d22-b174-012c29a4a176", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618629172, "uuid": "aa53ba1a-6415-4c5d-904e-b75ae387844b", "value": "f1b85f736cbfe8248adb96bf6ae4e76c4bb9edb3e3c9ac1baead00e12c60e201", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "045cd441-9f40-11eb-abe1-42010a9c0039", "comment": "Malware payload (AgentTesla)", "timestamp": 1618638286, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618638286, "uuid": "c0eca9ec-e9c3-4c60-813d-31a53468ad55", "comment": "Malware payload (AgentTesla)", "value": "622f89217d5c630c8493f356a3ed5e23", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "INVOICE", "colour": "#75F0D5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618638286, "uuid": "1ca0bdce-cdca-4ff7-b5eb-f4c0d2d05208", "comment": "Malware payload (AgentTesla)", "value": "f1be45f58c89c8b3b77fda6341568c4388d95ded7597304a04b98c57ddfc4a6c", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "INVOICE", "colour": "#75F0D5", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618638286, "uuid": "f5ab6be6-381b-4e5e-a57b-e37449976839", "comment": "Malware payload (AgentTesla)", "value": "c8275a16747ae7c550f1b14e71c91dc06eb1ceef", "object_relation": "sha1", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "INVOICE", "colour": "#75F0D5", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618638286, "uuid": "39584e43-82c8-4d00-bbb6-f2109b2d227f", "comment": "Malware payload (AgentTesla)", "value": "34a001dde4d800a9c132f1d3c93200fb202d75c04ab7f7d2b6d17be90fec9a87fef6ed379d39e8ad202ec51e9fba6916", "object_relation": "sha3-384", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "INVOICE", "colour": "#75F0D5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618638286, "uuid": "705c6a04-c62d-4b78-b03e-e8058ba289c5", "value": "CA05BF50A69CBA56E02E47F68471563117376D1BCB32C22FAC8D79FD2BB0B82F449253", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618638286, "uuid": "206d862b-fa4e-4dca-8bad-c9104ab4806e", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618638286, "uuid": "f5e12d7c-ba80-4bbf-8b5f-f6fb4c109263", "value": "24576:0WnW2TT8EeJ4fbeX44Dkbjrs9MSlHbzcYiwV:PF8EmoKXLDwjA9MSlHf3iwV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618638286, "uuid": "a5b9df13-106e-4aa9-a7b2-ba14db338a35", "value": 817664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618638286, "uuid": "e7413828-0d77-4cd2-b2f3-b924e458b232", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618638286, "uuid": "b7798a91-5c33-44bd-97d4-22c64827546b", "value": "confirm below invoice.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "55734500-9f93-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618674070, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674070, "uuid": "68b3bd85-4c7c-46a9-8c27-9c075097e4e1", "comment": "Malware payload", "value": "467624164f1e99910e7ef7ba53613725", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674070, "uuid": "a03db420-a14b-475f-b863-0c3ef04521c6", "comment": "Malware payload", "value": "f25ec4f78cb3233850f0ae7bd15e4307c711e5aa1eaaf0d6d02a50b3183052b7", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674070, "uuid": "28594aa4-a1c1-4f40-ab02-1e3e5d396c80", "comment": "Malware payload", "value": "1661da915f2413a7df94f30a5e10331a75a6876a", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618674070, "uuid": "8f903329-8783-42a4-8fed-a7602eb63483", "comment": "Malware payload", "value": "f4ad8ed8b7cce440426fe44752ca308c2e2850a33fbdf250773e657b3d16df7df286a3105f8f17e412f227645cd3667c", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674070, "uuid": "4ff1ad26-0d88-4232-b9d2-5724c32afbbe", "value": "8BF3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B49671FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674070, "uuid": "95401a13-19d0-4cb0-aadf-0e8bad06237c", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674070, "uuid": "54cc9f3a-dcd5-4ce0-815f-729588f304dc", "value": "3072:AA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:A3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618674070, "uuid": "ab4597b5-48c2-4537-95ea-a3d9eef9be51", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618674070, "uuid": "5930827e-59f7-41ac-af1e-193c6ff87f0c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618674070, "uuid": "607f7e71-bad3-4606-b010-da2b4ad9cf08", "value": "f25ec4f78cb3233850f0ae7bd15e4307c711e5aa1eaaf0d6d02a50b3183052b7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "730acdab-9f13-11eb-abe1-42010a9c0039", "comment": "Malware payload (AZORult)", "timestamp": 1618619144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619144, "uuid": "762809d0-1e80-4203-89d3-e9f4ee7c9d16", "comment": "Malware payload (AZORult)", "value": "d0f8261b811b4feed688f1f41df9f3d3", "object_relation": "md5", "Tag": [ { "name": "AZORult", "colour": "#403640", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619144, "uuid": "6c0d2aad-a22d-487e-8426-73aaa02828fa", "comment": "Malware payload (AZORult)", "value": "f270e5838a9e760d920b64553ba77597a1550aacb2cbb557e0fff8d6a18fb714", "object_relation": "sha256", "Tag": [ { "name": "AZORult", "colour": "#403640", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619144, "uuid": "dc6d4d16-9010-4a34-9bfd-e990a7fad787", "comment": "Malware payload (AZORult)", "value": "6ac3383dc13889ee1a00747104271aa482e1bcbc", "object_relation": "sha1", "Tag": [ { "name": "AZORult", "colour": "#403640", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618619144, "uuid": "61332c75-13cd-4b4f-8da6-90f59fba8b5c", "comment": "Malware payload (AZORult)", "value": "d1df8618e0adc12da2ce4e46f6b5e4078bcde6c8d3b1af8175530dc103831a8fd88a976bc60ce4d755e0e781be4bcce9", "object_relation": "sha3-384", "Tag": [ { "name": "AZORult", "colour": "#403640", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619144, "uuid": "7157b34f-fe26-43a7-b649-12f49e2b4fa6", "value": "B6B32A6EF7C19277D02408BDCD45A1B9907975302E391822F7E64F6CD8F96C2AA6C2C7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619144, "uuid": "29465081-6635-4d81-b93f-91ecbb6b44c3", "value": "6d1f2b41411eacafcf447fc002d8cb00", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619144, "uuid": "6f7ecb89-38c8-4bde-984b-6bbed4000363", "value": "3072:KExRaQ6raoCoCyz6/mqv1JR+yBtGOeaeWgiyq:faO1tme++wit", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618619144, "uuid": "147a72d9-eb02-4d5d-8918-ee07cea7526b", "value": 114688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618619144, "uuid": "8fea079a-40aa-4063-981a-f0c43de57248", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618619144, "uuid": "8842c597-4a30-4d34-a744-caa467dee8da", "value": "D0F8261B811B4FEED688F1F41DF9F3D3.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57857820-9fd5-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618702421, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702421, "uuid": "fb82b46e-7f79-415c-86fb-f047b64ce74c", "comment": "Malware payload", "value": "c61c08c8ba1da76c1e512716ea07ab26", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702421, "uuid": "8134a566-30d0-4c82-b59d-6969c8472576", "comment": "Malware payload", "value": "f28d9ac9c2c9a32817401420d9cb06731cce3ca830c4cd74ada87315935d861f", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702421, "uuid": "e0cacf78-8ef2-4d5d-82d9-211c0e95efbd", "comment": "Malware payload", "value": "3ef4bebdb95e51257ec6f64ac2c42288e2310167", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618702421, "uuid": "22daf6da-a2ff-4168-9c0d-79a15c1df0be", "comment": "Malware payload", "value": "6c02c080ec845ed9ee840e3b9bd76c6ccb1c5c9f474a618d4bdb314a7d8414c8db1eb46affe0ec20a14ca71cebece8bb", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702421, "uuid": "d5070805-c47b-41a0-a2d9-b7f980f7f422", "value": "05F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702421, "uuid": "0b2b1a03-7f67-47fa-9d8a-f35c5b3f314f", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702421, "uuid": "6e8ba044-9cab-4205-ac12-e1dd64a98893", "value": "3072:Ylpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Ylo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618702421, "uuid": "4f94f19f-473b-4e1b-ba8d-e76bad691608", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618702421, "uuid": "066c0cc2-492c-418d-9c04-b80d3819e251", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618702421, "uuid": "49bb5fc4-7681-4c4b-b22e-c0e70b2c8976", "value": "f28d9ac9c2c9a32817401420d9cb06731cce3ca830c4cd74ada87315935d861f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a3c27800-9f1f-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618624380, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618624380, "uuid": "53e3c2b9-7cfd-4f88-88fb-f4881fa6cbb8", "comment": "Malware payload (Dridex)", "value": "995cb78af93d744c6efb10b65645e9c4", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618624380, "uuid": "4872e661-6aa3-4ca1-b2f8-d7644248230a", "comment": "Malware payload (Dridex)", "value": "f423ff3ec3140a6e58248795a9970d8fb46e0a98cca9a0be073efdf49f801109", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618624380, "uuid": "6f8cd8e4-f187-40f9-8f5b-d8caa02e5482", "comment": "Malware payload (Dridex)", "value": "067f6cf694ac2f8a71834036f795dc5b02de56a1", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618624380, "uuid": "117d4f24-8915-40b7-9838-98569c37c6a1", "comment": "Malware payload (Dridex)", "value": "3f732a7fee3e8c1b12eeb39d8c57866613dd4ebc218531afa0ad3b95f2785599fb9943a5c79b2d6360d50c06414acb2c", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618624380, "uuid": "c8fc6ce7-2c02-4710-a842-3964dfb2f41d", "value": "C9F3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618624380, "uuid": "23633caf-3dba-43f3-b670-3bd2f11496be", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618624380, "uuid": "5ac8ad59-d79a-42ae-a63f-b72cf884ab54", "value": "3072:zmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:CLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618624380, "uuid": "70e4afa2-81ec-4047-be4d-0009c2ded1cb", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618624380, "uuid": "7bcadd75-8695-40e2-a988-f23ccf4b286a", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618624380, "uuid": "c54c4049-2fb0-4f30-8af4-e09da081cd19", "value": "f423ff3ec3140a6e58248795a9970d8fb46e0a98cca9a0be073efdf49f801109", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1c107f3-9f68-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618655810, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618655810, "uuid": "e9265399-c6f4-4a3f-b4d6-1cce3076fad3", "comment": "Malware payload (Dridex)", "value": "76dccd501350dcd156e9910902bf4b8c", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618655810, "uuid": "4ddd8cc3-5174-44ef-a2dd-71a6de234d75", "comment": "Malware payload (Dridex)", "value": "f437f7d8604b6637cfff1153c8a08a2b591c34d915d95edc21aecd5c6dc4cfb9", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618655810, "uuid": "63a65d41-630e-495e-9e98-b0eda281ba14", "comment": "Malware payload (Dridex)", "value": "0261344157f195d8e6cd93acefb1e40cab6a3ce5", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618655810, "uuid": "9ddcd423-5007-4567-bbc9-eab4e813c134", "comment": "Malware payload (Dridex)", "value": "498d1d2b3273c9c7d8075844d943c3135c2ce54d3650b0bb11a581ffcf61c16afd3844f4d75287cbd3adaf7205722e01", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618655810, "uuid": "6f836d2e-13f5-4724-aa78-0a442d6211ce", "value": "E3F3DF08D1CFDA46E00B69700D9A761BB79839812F7C8EA8B496B1FD4F43725E490B5F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618655810, "uuid": "c41e1a8f-8f9d-49dd-8ee9-2348472cb34c", "value": "835c0fbcc6459f6264f92edd519c6e5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618655810, "uuid": "6f910050-2554-412c-a6d4-d2c0966d5a91", "value": "3072:QA6cVUieJXfe5aL7FBMOJr7uC3IDaAunyw654/Q2uZAlDO:Q3J256FBMO93IuAiywi4Y2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618655810, "uuid": "6c7d05f4-d4df-4168-9ba1-17c6447761ee", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618655810, "uuid": "e5c92509-9ada-4eb3-a580-5aaab3ea897e", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618655810, "uuid": "5574a0a3-31bf-4dc5-b379-af8750c8052f", "value": "f437f7d8604b6637cfff1153c8a08a2b591c34d915d95edc21aecd5c6dc4cfb9", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99fb78cd-9fb4-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618688359, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688359, "uuid": "b5974525-640c-4964-9049-a5890c7480c3", "comment": "Malware payload", "value": "6eafe05e02d2b4a8bc846c6ce9b17f56", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688359, "uuid": "586052ab-184f-4939-a1f1-d348273a115a", "comment": "Malware payload", "value": "f4a3ebfab9459df5f34bccbc2ec5428a197cbdf6b06712a5dd2195f06925964f", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688359, "uuid": "6e1ad713-ef45-40b6-9d5e-9c469171ea69", "comment": "Malware payload", "value": "116dd86a9190e3b6ea14cb58cd6bafe1cac2a558", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618688359, "uuid": "9362aef3-39b5-48ef-9276-8f97e813336a", "comment": "Malware payload", "value": "b83791606d7a85fbcd1a0fba064a237c3f3bcc74065a41ae4893627ec542bc8b81cf041c70ad96410cc78829e29994be", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688359, "uuid": "f51cb2ff-39f6-45c9-a3b4-c7aaeb303508", "value": "47F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688359, "uuid": "90ed3ac9-5a47-4ed0-9e71-2c505fc6c26b", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688359, "uuid": "0d404679-6716-4e2f-89e1-3160152e8ec8", "value": "3072:gPmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:gOLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618688359, "uuid": "e50026cc-39d9-44de-afc3-b1cabbed0e2a", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618688359, "uuid": "6dadf4ed-741d-4134-b590-f6084343514a", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618688359, "uuid": "0e7efb4e-69b4-4336-a5fa-31a33c7265a5", "value": "f4a3ebfab9459df5f34bccbc2ec5428a197cbdf6b06712a5dd2195f06925964f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "421061b0-9f3e-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618637531, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637531, "uuid": "3f3a23f3-b993-4dcf-9c7c-1b93f5cbbf4d", "comment": "Malware payload (Dridex)", "value": "bea922f29fb7f4d6828cafbd1c72ee31", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637531, "uuid": "c2c34323-7852-4a56-884f-7dd17d17ad3f", "comment": "Malware payload (Dridex)", "value": "f537a69f35a619c8f890f388a03a4fbb3d0bb154716e704c2f555833536b98a3", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637531, "uuid": "f41d0676-1535-4b17-b133-0198c2aa8465", "comment": "Malware payload (Dridex)", "value": "585c7718c06673d95e368a47c073997d61551567", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618637531, "uuid": "920cdf5b-d9ac-43a9-bc45-8770eb40369c", "comment": "Malware payload (Dridex)", "value": "1809c6918a060622fb5f6db3d8dc2c8e71bcb745bc4ac4fce7248aca6b52b4d65473369e4b4689d13d63502721505b90", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637531, "uuid": "f2023889-87ab-45b9-87c6-f789d92404b4", "value": "25F3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637531, "uuid": "b86a6156-c045-4307-970f-9c4aae75ea75", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637531, "uuid": "aaefcd8b-bdea-4cfe-ae1e-6896bffdf1f9", "value": "3072:Clpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:Clo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618637531, "uuid": "cea7a212-55cd-4b10-9954-944e9e65f43e", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618637531, "uuid": "d5245b13-9688-4fc0-ac24-7d2dd6bbed0d", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618637531, "uuid": "b715ba90-f053-4a2d-88fa-d14309689661", "value": "f537a69f35a619c8f890f388a03a4fbb3d0bb154716e704c2f555833536b98a3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f6c52ce6-9f22-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618625808, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618625808, "uuid": "ad159a37-9af1-4815-a2ea-720fc597f568", "comment": "Malware payload (Dridex)", "value": "3ea96b137c9d0d9e92bfcde96fada473", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618625808, "uuid": "8838e088-a7e4-40cd-ad5b-89c1199ec612", "comment": "Malware payload (Dridex)", "value": "f636c711cea360f0568cfa19ccb077ad5ad8c4fbbf799e05ab39e2cc38943abd", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618625808, "uuid": "e82de9d1-c199-4d43-bdcc-1ea74d8429be", "comment": "Malware payload (Dridex)", "value": "5113c4844657972c3619fa2a8600e7824093bdc5", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618625808, "uuid": "1ee21f43-26ad-452a-bfe8-f11af91a0d85", "comment": "Malware payload (Dridex)", "value": "00bcde62de42c333ddc44f6ce6cfd494c503e72f33bbe24e69fcd82cc9eba02bf4c7b38c254445e5ac8d6afebfc8edf7", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618625808, "uuid": "6b23a35c-b485-4963-9bad-49909d855604", "value": "3EF3D088CBB3E4E6EFB3D37966F85E1B561174551408F4F0C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618625808, "uuid": "9df23dc0-b4c0-4384-8a22-382eb63282f6", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618625808, "uuid": "8e2bd253-ea64-4209-b66d-1e79d255022b", "value": "3072:fmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:+Lc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618625808, "uuid": "146c2b3c-1586-4bd6-932e-ddbd80f2c461", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618625808, "uuid": "e05eeec1-9079-432b-af07-b3cd35bc8abb", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618625808, "uuid": "13749310-e494-43cc-82fa-22209fb6f467", "value": "f636c711cea360f0568cfa19ccb077ad5ad8c4fbbf799e05ab39e2cc38943abd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7c707e7-9f8c-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618671256, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618671256, "uuid": "dca17a97-de76-4352-9639-b8a3d88da55e", "comment": "Malware payload", "value": "8a457b00cc9a524263e600ac9ffa263f", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618671256, "uuid": "65746942-6b46-43bd-9c5a-e8ff1d472ebf", "comment": "Malware payload", "value": "f671d78c4e80cfda13ed0f648835726b742cd33aa65f5c77da42ad565d799b14", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618671256, "uuid": "7f1bb883-c24e-4ea4-8e95-04895d548f38", "comment": "Malware payload", "value": "a80f3642e5fca1a7d5a0dfe91fadc1b64d828f48", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618671256, "uuid": "eec5e6b4-badf-4c23-9fec-775de9280320", "comment": "Malware payload", "value": "20291db2b0c580d67691ed6b3aef99b00a984a102786f22128108d6fd726186f0a199b5aa27cf195088ef84d6b6f7804", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618671256, "uuid": "52b1efd8-9a88-406b-8edb-a0ca23936b75", "value": "67F3C088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD008AE50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618671256, "uuid": "a4dbf090-5b19-49e3-bacc-429c4b8d358a", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618671256, "uuid": "d24e637e-12ef-4a1b-bdb8-e6adba4e7aa8", "value": "3072:WmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:HLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618671256, "uuid": "1dbbde17-d173-4451-9933-f72376676220", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618671256, "uuid": "20b93aa3-6dd3-4523-a441-af3551bd8ad0", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618671256, "uuid": "522c48e1-3f1f-4cde-b4e8-96438da0aa45", "value": "f671d78c4e80cfda13ed0f648835726b742cd33aa65f5c77da42ad565d799b14", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e29604a-9f41-11eb-abe1-42010a9c0039", "comment": "Malware payload (Dridex)", "timestamp": 1618638866, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618638866, "uuid": "8b6cec5d-fe51-4fa6-a273-3103b3836c77", "comment": "Malware payload (Dridex)", "value": "ce532d5bbdee5c342bc10e858040c87b", "object_relation": "md5", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618638866, "uuid": "9dd07eef-4290-4df3-ad90-486ef8471e43", "comment": "Malware payload (Dridex)", "value": "f6da4a94e9a491492e2c895cd2890dbed071ddce093802adaef758795d0700b6", "object_relation": "sha256", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618638866, "uuid": "62077873-07e2-43d7-880e-fca7013dae29", "comment": "Malware payload (Dridex)", "value": "dcb94729f3b86dfe75e0e358e206af37179462e4", "object_relation": "sha1", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618638866, "uuid": "9bb0ad92-a304-42f1-a4ce-a8fefed7ca28", "comment": "Malware payload (Dridex)", "value": "6570788edd5fccafd4808d69cd093517df2db8495c39592b04940640c40d8109c0bc73275117162655a405684ff34292", "object_relation": "sha3-384", "Tag": [ { "name": "40112", "colour": "#3CFE62", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618638866, "uuid": "47f6b4e2-9a3d-4f7a-a930-1f201096f8a3", "value": "EFF3D088CBB3E4E6EFB3D37966F85E1B461574551408F4F4C86CA68FA4ABD0089E50F1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618638866, "uuid": "0b7cfd2a-a5df-48ae-8801-d42bc06e8409", "value": "987b9d7dc84d935c3675da82d40e06f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618638866, "uuid": "94d08c0d-9fd0-41cc-b26e-379be9e79990", "value": "3072:BmNFcsGvTmf9vOmoM0IZ5kPjBxYvdIL2KyOQaOP8+cMTH1PxsMYQnF1b1l:wLc7UtOpM1Z5k1xYO2LXjTH1pH5nF1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618638866, "uuid": "9953f883-53de-45df-a91e-a6193d3ace30", "value": 165888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618638866, "uuid": "2d7b05b0-ab3b-45c6-812d-945701f56040", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618638866, "uuid": "42f98243-e30c-4b22-9899-61b74607cb18", "value": "f6da4a94e9a491492e2c895cd2890dbed071ddce093802adaef758795d0700b6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e23384a8-9f8a-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618670441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618670441, "uuid": "d3600c48-54c6-4e3a-bb95-6b89ea8edb6a", "comment": "Malware payload", "value": "399537b2cb19f370fba295708e8c7d61", "object_relation": "md5", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1618670441, "uuid": "c66f1372-da86-42ab-acb6-5737bf3819d9", "comment": "Malware payload", "value": "f6dc99f9ca6701d1295fd2793f579460b0bdcf0cee5ccc92f9133eef1c93b715", "object_relation": "sha256", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1618670441, "uuid": "7e45ac79-543d-4026-883d-92d93ba3a2fa", "comment": "Malware payload", "value": "10a6b7b67961e11ccfd0ad9cd5dc27c445b8b984", "object_relation": "sha1", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1618670441, "uuid": "3ce5f1cc-263c-4d4e-b2eb-62279ae5394d", "comment": "Malware payload", "value": "3934a774539d721791c68c20f85824a13c62ac77690e9ac8bedb2880db1f5a08e6fa2ceb6b2e3545ea35c76fc01e8215", "object_relation": "sha3-384", "Tag": [ { "name": "40111", "colour": "#7B75C4", "exportable": true, "hide_tag": false }, { "name": "Dridex", "colour": "#68D4B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1618670441, "uuid": "0c122b65-7dc0-4907-b6d2-de0808bc546b", "value": "AEF3DFF6DAEFC282D72F4C7CA57BC273692B792D9507C6B3D5860A8FC61320511C22A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1618670441, "uuid": "5f16b049-3e03-4a4f-a33a-0c3a27a67c7d", "value": "d20e8b584b1e294911b88a699c987910", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1618670441, "uuid": "87c69429-ee08-42da-a733-c73f73ff1ffb", "value": "3072:7lpmktgw9IAMlZxSGg7ypZIQ404g51acpg0xZtCVxwVeXm7YP1cOPpiihEY:7lo0gw4ZMypZp45g51aXotOxwVeXm7Ym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1618670441, "uuid": "fe076507-7ec8-42ee-81cf-2679c47c8adf", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1618670441, "uuid": "6227a6f3-fc46-4722-b459-418576ec5193", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1618670441, "uuid": "97822269-7fa3-4423-8ff2-819285856825", "value": "f6dc99f9ca6701d1295fd2793f579460b0bdcf0cee5ccc92f9133eef1c93b715", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28183eec-9fa9-11eb-abe1-42010a9c0039", "comment": "Malware payload", "timestamp": 1618683443, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1618683443, "uuid": "4b48843d-2fa9-44