{
  "Event": {
    "analysis": "1",
    "date": "2012-08-16",
    "extends_uuid": "",
    "info": "[Threat Intel] The Shamoon Attacks",
    "protected": false,
    "publish_timestamp": "1772419209",
    "published": true,
    "threat_level_id": "1",
    "timestamp": "1772419207",
    "uuid": "2955667f-2a0e-4521-9158-38b978e36046",
    "Orgc": {
      "name": "Rectifyq",
      "uuid": "cd9bd516-61fa-476b-980f-2f8de03992d4"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#004646",
        "local": false,
        "name": "type:OSINT",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:producer=\"Kaspersky\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:producer=\"Symantec\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:malpedia=\"DistTrack\"",
        "relationship_type": ""
      },
      {
        "colour": "#49a260",
        "local": false,
        "name": "rectifyq:category=\"threat\"",
        "relationship_type": ""
      },
      {
        "colour": "#120044",
        "local": false,
        "name": "rectifyq:sub-category=\"intrusion-analysis\"",
        "relationship_type": ""
      },
      {
        "colour": "#190061",
        "local": false,
        "name": "rectifyq:topic=\"ics-ot\"",
        "relationship_type": ""
      },
      {
        "colour": "#f1dfed",
        "local": false,
        "name": "rectifyq:TA-category=\"APT\"",
        "relationship_type": ""
      },
      {
        "colour": "#d92121",
        "local": false,
        "name": "rectifyq:target=\"targeted\"",
        "relationship_type": ""
      },
      {
        "colour": "#31373d",
        "local": false,
        "name": "rectifyq:MY-relevancy=\"not-relevant\"",
        "relationship_type": ""
      },
      {
        "colour": "#f6810a",
        "local": false,
        "name": "ICS-capable",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:sector=\"Industrial\"",
        "relationship_type": ""
      },
      {
        "colour": "#b94b1d",
        "local": false,
        "name": "rectifyq:mitre-att&ck=\"none-from-src\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1771720804",
        "to_ids": false,
        "type": "link",
        "uuid": "592a03db-27fc-41b2-8f3b-98c639c1aad8",
        "value": "https://web.archive.org/web/20120818235442/www.symantec.com/connect/blogs/shamoon-attacks"
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1771720804",
        "to_ids": false,
        "type": "link",
        "uuid": "6f5d801f-4e96-47ca-a26c-7d4beba6b7c5",
        "value": "https://community.broadcom.com/symantecenterprise/communities/community-home/librarydocuments/viewdocument?DocumentKey=281521ea-2d18-4bf9-9e88-8b1dc41cfdb6&CommunityKey=1ecf5f55-9545-44d6-b0f4-4e4a7f5f5e68&tab=librarydocuments"
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1771720804",
        "to_ids": false,
        "type": "link",
        "uuid": "9881292e-a4c6-4f41-b300-3b103b5dad0c",
        "value": "https://securelist.com/shamoon-the-wiper-copycats-at-work/57854/"
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1771720804",
        "to_ids": false,
        "type": "link",
        "uuid": "5a332e6f-5cda-4ae5-96ea-ace213124c6c",
        "value": "https://web.archive.org/web/20120820024808/http://blog.seculert.com/2012/08/shamoon-two-stage-targeted-attack.html"
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1771720804",
        "to_ids": false,
        "type": "link",
        "uuid": "fce3e741-268b-4ab3-905a-75527b0d82a7",
        "value": "http://web.archive.org/web/20151101012852/http://money.cnn.com/2015/08/05/technology/aramco-hack/index.html"
      }
    ]
  }
}