{
  "Event": {
    "analysis": "1",
    "date": "2026-05-20",
    "extends_uuid": "",
    "info": "[Threat Intel] Premium Deception: Uncovering a Global Android Carrier Billing Fraud Campaign",
    "protected": false,
    "publish_timestamp": "1780386247",
    "published": true,
    "threat_level_id": "3",
    "timestamp": "1780284447",
    "uuid": "441a0a60-4abf-4afc-8318-eee24dbf5b68",
    "Orgc": {
      "name": "Rectifyq",
      "uuid": "cd9bd516-61fa-476b-980f-2f8de03992d4"
    },
    "Tag": [
      {
        "colour": "#8f3c0c",
        "local": false,
        "name": "misp-galaxy:target-information=\"Croatia\"",
        "relationship_type": ""
      },
      {
        "colour": "#915448",
        "local": false,
        "name": "misp-galaxy:target-information=\"Malaysia\"",
        "relationship_type": ""
      },
      {
        "colour": "#9f5dac",
        "local": false,
        "name": "misp-galaxy:target-information=\"Romania\"",
        "relationship_type": ""
      },
      {
        "colour": "#33360c",
        "local": false,
        "name": "misp-galaxy:target-information=\"Thailand\"",
        "relationship_type": ""
      },
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#004646",
        "local": false,
        "name": "type:OSINT",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:producer=\"Zimperium\"",
        "relationship_type": ""
      },
      {
        "colour": "#e931d8",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Capture SMS Messages - T1412\"",
        "relationship_type": ""
      },
      {
        "colour": "#9f9a68",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Deliver Malicious App via Other Means - T1476\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Exfiltration Over C2 Channel - T1646\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Generate Traffic from Victim - T1643\"",
        "relationship_type": ""
      },
      {
        "colour": "#64af28",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Input Capture - T1417\"",
        "relationship_type": ""
      },
      {
        "colour": "#e1e5b7",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"SMS Control - T1582\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Scheduled Task/Job - T1603\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Suppress Application Icon - T1628.001\"",
        "relationship_type": ""
      },
      {
        "colour": "#bbb53d",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"System Information Discovery - T1426\"",
        "relationship_type": ""
      },
      {
        "colour": "#b418fc",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"System Network Configuration Discovery - T1422\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Web Protocols - T1437.001\"",
        "relationship_type": ""
      },
      {
        "colour": "#5f0077",
        "local": false,
        "name": "ms-caro-malware:malware-platform=\"AndroidOS\"",
        "relationship_type": ""
      },
      {
        "colour": "#49a260",
        "local": false,
        "name": "rectifyq:category=\"threat\"",
        "relationship_type": ""
      },
      {
        "colour": "#130049",
        "local": false,
        "name": "rectifyq:sub-category=\"campaign-analysis\"",
        "relationship_type": ""
      },
      {
        "colour": "#170059",
        "local": false,
        "name": "rectifyq:topic=\"mobile-attack\"",
        "relationship_type": ""
      },
      {
        "colour": "#ffd12e",
        "local": false,
        "name": "rectifyq:target=\"broad-based\"",
        "relationship_type": ""
      },
      {
        "colour": "#dd2e44",
        "local": false,
        "name": "rectifyq:MY-relevancy=\"relevant\"",
        "relationship_type": ""
      },
      {
        "colour": "#b94b1d",
        "local": false,
        "name": "rectifyq:mitre-att&ck=\"from-original-src\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:online-service=\"b0c71d51-34fd-47b5-9eb4-dd406ffc607f\"",
        "relationship_type": ""
      },
      {
        "colour": "#626567",
        "local": false,
        "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
        "relationship_type": ""
      },
      {
        "colour": "#230087",
        "local": false,
        "name": "rectifyq:samples-found-in=\"Tria.ge\"",
        "relationship_type": ""
      },
      {
        "colour": "#3a00e0",
        "local": false,
        "name": "rectifyq:action-taken=\"x\"",
        "relationship_type": ""
      },
      {
        "colour": "#3b00e2",
        "local": false,
        "name": "rectifyq:action-taken=\"linkedin\"",
        "relationship_type": ""
      },
      {
        "colour": "#3d00e9",
        "local": false,
        "name": "rectifyq:action-taken=\"telegram\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1779359735",
        "to_ids": false,
        "type": "link",
        "uuid": "c8c74f1e-966e-46af-a16a-340e380a0fef",
        "value": "https://zimperium.com/blog/premium-deception-uncovering-a-global-android-carrier-billing-fraud-campaign"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1779483013",
        "to_ids": true,
        "type": "hostname",
        "uuid": "0b37ea6b-7dc2-4837-82a1-1e6a872a28b8",
        "value": "api.modobomco.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1779483013",
        "to_ids": true,
        "type": "hostname",
        "uuid": "efeb6e49-b4eb-4245-b723-592de053312b",
        "value": "apichecksubs.modobomz.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1779483013",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5285c5f6-573e-41d2-804e-9023b0a74eb3",
        "value": "apizep.modobomz.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1779483013",
        "to_ids": true,
        "type": "hostname",
        "uuid": "f6728238-a4ff-4568-a788-4d6ffb2a78c7",
        "value": "apizep.mwmze.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1779483013",
        "to_ids": true,
        "type": "domain",
        "uuid": "83ac9662-589d-4165-8bb3-5e0a8fc7eb62",
        "value": "apkafe.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1779483013",
        "to_ids": true,
        "type": "domain",
        "uuid": "f093d67d-50bd-4bc2-b5b8-c96b2cfe2999",
        "value": "apkhype.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1779483013",
        "to_ids": true,
        "type": "hostname",
        "uuid": "f75b2102-cd4e-4176-96da-f391fea9027d",
        "value": "filesub.modobomco.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1779483013",
        "to_ids": true,
        "type": "domain",
        "uuid": "a745b864-6fa8-4d3d-8bc3-aab72feb736e",
        "value": "gamemixes.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1779483013",
        "to_ids": true,
        "type": "domain",
        "uuid": "8b536d03-eed3-48cc-b2ac-0203c8769007",
        "value": "gamemuchs.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1779483013",
        "to_ids": true,
        "type": "hostname",
        "uuid": "03ddbd75-bf18-4616-b346-b546e0a6bb87",
        "value": "gameshtml5.thacyber.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1779483013",
        "to_ids": true,
        "type": "domain",
        "uuid": "4de58acd-4fbb-4778-a9c1-17fe33e7ae72",
        "value": "grannygames.net"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1779483013",
        "to_ids": true,
        "type": "hostname",
        "uuid": "95a06623-de72-46b4-bdf8-2d709b02e1d7",
        "value": "lpbigfun.thacyber.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1779483013",
        "to_ids": true,
        "type": "hostname",
        "uuid": "8a70d9a0-15fd-43a9-a6cf-ee0fae339db6",
        "value": "minecraft-mdb.s3.ap-southeast-1.amazonaws.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1779483013",
        "to_ids": true,
        "type": "hostname",
        "uuid": "76b3d59b-010f-4841-abca-9ebdc9911be1",
        "value": "onesignal.mwmze.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1779483013",
        "to_ids": true,
        "type": "hostname",
        "uuid": "b929cd03-53a0-4917-8b37-1465a62f457f",
        "value": "onesignalmdb.modobomz.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1779483013",
        "to_ids": true,
        "type": "hostname",
        "uuid": "1f054a4c-e336-425c-a921-296c01a4c412",
        "value": "portal.bigfunspace.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1779483013",
        "to_ids": true,
        "type": "domain",
        "uuid": "04a8a230-70f7-4c96-aa7f-c56eeca09b72",
        "value": "sunny-mobi.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1779483013",
        "to_ids": true,
        "type": "domain",
        "uuid": "3d6d651f-be4d-42dd-bfa9-ad1b76f840a3",
        "value": "tobegame.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1779483013",
        "to_ids": true,
        "type": "domain",
        "uuid": "1d295abb-a930-4fa0-8894-082c1521e2da",
        "value": "topboxinggames.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1779483013",
        "to_ids": true,
        "type": "domain",
        "uuid": "d7ef8a5e-4e20-4de9-96b9-6f06fed9c38d",
        "value": "topstickmangames.com"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1779483013",
        "to_ids": true,
        "type": "hostname",
        "uuid": "21488133-34f4-4915-810e-ee39cbfb0488",
        "value": "wap-cpa.digi.com.my"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1779483013",
        "to_ids": true,
        "type": "hostname",
        "uuid": "f21eedd3-f977-479e-ab67-1b6ef67c8c8f",
        "value": "wap.lpalice2appsmart.com"
      }
    ],
    "Object": [
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780126648",
        "uuid": "b345df00-7379-4794-a1bd-668cfe322a10",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499115",
            "to_ids": true,
            "type": "md5",
            "uuid": "1082ea8b-a94f-4688-87a9-4e693946c409",
            "value": "ea28ad4769603b2fff732ca2f881240d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499115",
            "to_ids": true,
            "type": "sha1",
            "uuid": "a3ac4c95-399c-4e65-8684-5198ddda2d8e",
            "value": "e06f658064347e62a20da12f5c43e99f71e03d57",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499115",
            "to_ids": true,
            "type": "sha256",
            "uuid": "0a2bab04-9c19-437c-965f-893b398ce6e1",
            "value": "82cb5928a6ad6122c99577146011fd6f8cac28a2ec3c3fcaea0d9cfd028fe222",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779483389",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "ebb19fc8-6e14-4c0b-b5be-5a97810c6868",
            "value": "49152:jEoUZnblgdEuJ6Fk2Sd8WpHgQ7Zo/KrUPoPqA5cxgFpkLJ5:goUZBg90k2SCWpo/KrUPoDyxgFw5"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779483389",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "30bc8727-d700-440a-9e62-00df8d7dbb27",
            "value": "2836558"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779483389",
            "to_ids": true,
            "type": "vhash",
            "uuid": "e4171ffe-1d89-4ecc-a16f-89777be85685",
            "value": "1be96efe1563a9d80e787f6e109a7308"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779483389",
            "to_ids": false,
            "type": "text",
            "uuid": "23bbc89b-ed82-4a5a-b16a-cd6b45f63aef",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:23/66\nFirst Submission:2025-05-06T05:13:02.000000+00:00\nLast Submission:2025-05-06T05:13:02.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780126669",
        "uuid": "19b00990-c404-417f-9d45-51271dce544e",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499116",
            "to_ids": true,
            "type": "md5",
            "uuid": "f5513629-b9ff-4f11-8007-e42eca875b15",
            "value": "64e126904611f981eae0523f7031a678",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499116",
            "to_ids": true,
            "type": "sha1",
            "uuid": "27e57698-a5aa-45f7-8efb-9ac2816e3684",
            "value": "6e7711918ad9f928a733f5b249c8654ce37306d2",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499116",
            "to_ids": true,
            "type": "sha256",
            "uuid": "0d1a7706-1d68-4923-83ab-3b9e9182aefa",
            "value": "06f173fcb5d7b63c8a97f6fd220dd8534f0ae5641aba4c0f773f83a3779fd6c7",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779483411",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "8fb1e9af-bf78-49a7-9590-7d1076af2a1f",
            "value": "49152:RBMNlMJPFScI+ZdEWQrYYv1HQ5DUSLY0HgQ7Qo/Kr0xPGf3:nMgVFD3EWQs+QYSLko/Kr0xPe"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779483411",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "cf753407-1b3a-4168-b68b-bddb7d96af1d",
            "value": "2624558"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779483411",
            "to_ids": true,
            "type": "vhash",
            "uuid": "a1de614e-31c1-436c-b36a-1a7962b24d0e",
            "value": "b9c15db6e6136ef16ca1d0f73df7af7e"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779483411",
            "to_ids": true,
            "type": "filename",
            "uuid": "1ee6be62-02cb-46b0-a43d-9a307a3f8b48",
            "value": "ai7t6h.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779483411",
            "to_ids": false,
            "type": "text",
            "uuid": "31783d7d-36c5-42c8-99b8-7057e437a18d",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:29/66\nFirst Submission:2025-06-29T11:40:27.000000+00:00\nLast Submission:2025-06-29T11:40:27.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780126690",
        "uuid": "a8384003-6841-472f-8719-ebb09822d1e9",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499118",
            "to_ids": true,
            "type": "md5",
            "uuid": "33c43c8c-266e-4a9a-aa4c-d62c91155bb1",
            "value": "a49dfac6e682c29537750e45a7011a24",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499118",
            "to_ids": true,
            "type": "sha1",
            "uuid": "cba571d2-c0cf-4705-a6ce-b5c7f82919bf",
            "value": "de5b8f8408ec27c4580731766162e4ff69d99ce7",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499118",
            "to_ids": true,
            "type": "sha256",
            "uuid": "40c59a0b-334d-4468-b9d7-323c13ffdad4",
            "value": "95082e3589b82180b69837778a1e87b8f07a69b6b064cc3145f8ec202d79aa95",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779483433",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "ceb17ffb-f5fd-4eb6-a643-c8996cb0f5dc",
            "value": "49152:tzoU7SHKDtXd0MaFidZujHgQ7PSo/Krm/PCmA5cxgFpv:FoU8IttTaxSo/Krm/PayxgF9"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779483433",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "9ee600c8-f1ea-4a3b-82d0-b98ef063e5bf",
            "value": "2844829"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779483433",
            "to_ids": true,
            "type": "vhash",
            "uuid": "37050c52-4470-4a90-9bdd-600382ada789",
            "value": "1be96efe1563a9d80e787f6e109a7308"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779483433",
            "to_ids": true,
            "type": "filename",
            "uuid": "602da8ff-a56e-4556-bce6-4ea6863b8a6b",
            "value": "Pojavlauncher.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  21/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779483433",
            "to_ids": false,
            "type": "text",
            "uuid": "7824782d-371c-468b-8ab2-99c29ddd04ca",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:21/67\nFirst Submission:2025-03-25T14:44:39.000000+00:00\nLast Submission:2025-03-25T14:44:39.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780126712",
        "uuid": "d3ed4fb4-2dd6-429b-bddc-51027593d581",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499119",
            "to_ids": true,
            "type": "md5",
            "uuid": "f9804ccc-ca03-43da-80ee-613b5e230751",
            "value": "2bb58ac67ae0b0744aeb345aeb0c2387",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499119",
            "to_ids": true,
            "type": "sha1",
            "uuid": "d7051682-63fc-4c0b-9e56-48f04ccced5f",
            "value": "0590f20afe8b6b99ab5f0d9ef453db3d489372a5",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499119",
            "to_ids": true,
            "type": "sha256",
            "uuid": "1d14e405-b147-4526-94fc-a2c7fe66d218",
            "value": "db6bda1d121954b02174dae18f052e72f0f73ddbc41da1cd1994621107e42813",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779483456",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "c8a1d4f9-f162-4cac-961f-758056585ced",
            "value": "98304:3bj338dg6duHf/Qhq8bhu0cxU+G8bo/Kr9/QIx2:rj3uWWbhuPQb"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779483456",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "4f401e5d-56ac-4f6b-b650-bfcf92db87c9",
            "value": "4661392"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779483456",
            "to_ids": true,
            "type": "vhash",
            "uuid": "57d438a1-a6ff-4d1b-bdeb-503da682e7ed",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779483456",
            "to_ids": true,
            "type": "filename",
            "uuid": "edad6dc3-e8ba-46b3-b517-7d64f5e13c28",
            "value": "fr79j.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779483456",
            "to_ids": false,
            "type": "text",
            "uuid": "15d3e1d9-3336-4902-9d78-210fe9efc507",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:29/66\nFirst Submission:2025-10-14T12:53:42.000000+00:00\nLast Submission:2025-10-14T12:53:42.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780126734",
        "uuid": "835b2374-4191-4ee4-a877-d0624fdf6365",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499120",
            "to_ids": true,
            "type": "md5",
            "uuid": "cb6fbe04-750d-444d-a28a-18815c31dcb0",
            "value": "0e299b5b9abad22c8a976f547d8587d5",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499121",
            "to_ids": true,
            "type": "sha1",
            "uuid": "e2691e0c-65b7-4e0e-bef5-3f6ccb6a8bd2",
            "value": "a3732bc0d7879bcdf90f6dc501013b4bd51eb650",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499121",
            "to_ids": true,
            "type": "sha256",
            "uuid": "5e732de7-ad7c-4aaf-92f9-8f0ee38a5013",
            "value": "7e1fb80894f1cb0da37be78b491231d4379777e972634805b97167ba379ef0c5",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779483477",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "846a74e4-5797-48f6-9a75-85c6bfabca10",
            "value": "49152:4UEPIiwhIyrp/f4NMCzHYxxi3pcd0lg5/psCSpd7Fo/Kr9/q0fjlhuh:qlE4SCzHwi40jo/Kr9/Xjlhuh"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779483477",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "9755f584-75ca-49bc-81a6-7c04c37e54b7",
            "value": "3309491"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779483477",
            "to_ids": true,
            "type": "vhash",
            "uuid": "0b4c430c-6825-4405-9b3e-c900eb2a21b6",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779483477",
            "to_ids": true,
            "type": "filename",
            "uuid": "f2f4b636-b4a7-46c5-bdeb-b88d7dbf0e1c",
            "value": "o72k4p33.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779483477",
            "to_ids": false,
            "type": "text",
            "uuid": "9bd8ddb2-ff51-4e4a-b38e-e88833b608de",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:29/66\nFirst Submission:2025-10-14T13:51:42.000000+00:00\nLast Submission:2025-10-14T13:51:42.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780126756",
        "uuid": "71a0589c-ca16-44ac-a5e9-1993ab7b31a4",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499122",
            "to_ids": true,
            "type": "md5",
            "uuid": "490ad60a-cca7-4311-9a62-45d2c2ad849d",
            "value": "fb27f9c6fbe6a89993213e3b9213cec0",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499122",
            "to_ids": true,
            "type": "sha1",
            "uuid": "5127dc25-eb1c-4604-8fb3-b28eb582eab0",
            "value": "25fa776266dcf3964db95335d8babfd0ffed65f9",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499122",
            "to_ids": true,
            "type": "sha256",
            "uuid": "8b6f9193-786f-4e0d-8c1f-88a3c57812c1",
            "value": "7d09f7da4cd417413ae48e39a1bb336935e70b8c4cadc2908651b9a0764e328b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779483499",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "56df44e0-7ade-4a77-8963-6dcd6d3405fa",
            "value": "98304:GWunfIq/dORdXBX2TM2iC275qq5Go/Kr98Tjul:G5pwrXh2liCk/4"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779483499",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "1e99d3f2-8c65-41de-acee-a4ac50d063d6",
            "value": "3432226"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779483499",
            "to_ids": true,
            "type": "vhash",
            "uuid": "cc3adc1b-6fe8-4095-93e5-daa7a180aa4c",
            "value": "c28ef8ef13a12f9b2b7a758fad9be84c"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779483499",
            "to_ids": true,
            "type": "filename",
            "uuid": "51a15aeb-af5c-432b-9054-930e4c536dd3",
            "value": "ni7y6brn.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779483499",
            "to_ids": false,
            "type": "text",
            "uuid": "40c6bf7b-3060-45ab-ad68-fecd1ccff059",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:29/66\nFirst Submission:2026-01-10T09:40:40.000000+00:00\nLast Submission:2026-01-10T09:40:40.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780126777",
        "uuid": "d0b12dac-be88-4bb0-b1e8-99b4829a0c47",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499123",
            "to_ids": true,
            "type": "md5",
            "uuid": "4bc5a84f-f937-4ade-b2f8-5dc383f7d558",
            "value": "9f800e4b2839247a7dbf0e3cadd6f40f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499123",
            "to_ids": true,
            "type": "sha1",
            "uuid": "352d406b-5846-475b-bf7f-49fcd5b6be25",
            "value": "7a6c51fce9cb63ea004d8569f25ecca8fee59ff8",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499123",
            "to_ids": true,
            "type": "sha256",
            "uuid": "62f131b9-f9c4-46aa-a4e0-55fa4c732b32",
            "value": "6f36ad8089a477d785472581c593429c6e52a3ec94c6652df1156d0fba90a2ff",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779483520",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "591339cd-0ca3-4f4f-b63d-352b959954a4",
            "value": "98304:ASkELyXwObT6Z5/49e9PdefV+/RjC1ZxJfw2Moo/Kr9nwbQ:A8Ly3kg9eNde9+1yxCDCwM"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779483520",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "9ec6a40d-3516-4c26-ab06-19bf4fe669a5",
            "value": "4743312"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779483520",
            "to_ids": true,
            "type": "vhash",
            "uuid": "0c77e883-0ab3-45b8-8e63-edd0ce2b2fb1",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779483520",
            "to_ids": true,
            "type": "filename",
            "uuid": "d84a7470-2a18-4099-9ab9-c85fe0891431",
            "value": "tajdw.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779483520",
            "to_ids": false,
            "type": "text",
            "uuid": "6f758532-6a2a-4dc0-9627-4a31d88b4477",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:26/66\nFirst Submission:2025-09-20T23:22:12.000000+00:00\nLast Submission:2025-09-20T23:22:12.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780126798",
        "uuid": "a3019a89-df5d-447f-bee3-d4657e7272aa",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499124",
            "to_ids": true,
            "type": "md5",
            "uuid": "7f2da1bd-a4f4-4d54-89c2-843d7ff03a28",
            "value": "6bd72afa30df7959cb82cae1afe46320",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499124",
            "to_ids": true,
            "type": "sha1",
            "uuid": "0f484e93-3929-48f2-912d-ea70477035f0",
            "value": "e18a429bf579cf7202c762343094d8004a318a80",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499124",
            "to_ids": true,
            "type": "sha256",
            "uuid": "54357aba-0ca2-44fa-82e8-6ede4c14382d",
            "value": "c4b13345d970fc5d4b0795111d5eb71b0c990f6786924d262cdb2331ce72a028",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779483542",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "6dde97ec-9dc2-4038-8daa-2a55f7adfa69",
            "value": "98304:4X5Hr4jyHx3vGagCe1ARyWWIuo/Kr9/OKX:W5LkavOe5WIoOO"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779483542",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "d0ffa5eb-018d-4e96-b604-4fb86b564d27",
            "value": "4628624"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779483542",
            "to_ids": true,
            "type": "vhash",
            "uuid": "f96248d4-90ef-4a4b-ad3a-5a9fd87ece34",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779483542",
            "to_ids": true,
            "type": "filename",
            "uuid": "cd916ff5-5d08-40f1-8105-c3c08a005d73",
            "value": "qeaby5q.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779483542",
            "to_ids": false,
            "type": "text",
            "uuid": "a92ee650-9f00-4c1d-a18d-ddfb58c269be",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:26/66\nFirst Submission:2025-10-14T10:21:33.000000+00:00\nLast Submission:2026-02-06T16:59:39.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780126820",
        "uuid": "ec9c6ba6-f677-4adc-a275-edb845af471c",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499126",
            "to_ids": true,
            "type": "md5",
            "uuid": "61643bfd-8cb7-4348-8399-221fd55f51c7",
            "value": "64927a8cdc68e02afd3c63d32a07f7b6",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499126",
            "to_ids": true,
            "type": "sha1",
            "uuid": "24b44dc3-6b28-426a-8b74-920e9f38c2df",
            "value": "eadce7b4b1c3d4bb75ba4390b21a907fedaa4f30",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499126",
            "to_ids": true,
            "type": "sha256",
            "uuid": "43dbcff5-e1d1-46e3-b332-9d3c2ca59847",
            "value": "fa99e1a365d9f30dd5756c15e44758651c433a63cffe51397e67a51e30395a7b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779483564",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "b8098f47-b048-454a-9970-c6f59c7c7825",
            "value": "49152:HE0V8RRJe8pTtZXrG8THgQ7oo/KrUPooZdIT3zv:kRy+jXrGvo/KrUPoMITD"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779483564",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "09fa436b-2a7c-4e18-a79d-9de740299bd5",
            "value": "2816078"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779483564",
            "to_ids": true,
            "type": "vhash",
            "uuid": "464f9c08-89cd-4156-a043-cabac67abb16",
            "value": "1be96efe1563a9d80e787f6e109a7308"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779483564",
            "to_ids": true,
            "type": "filename",
            "uuid": "eed34e84-0ba1-4d41-b9c2-e5b4812e9376",
            "value": "Repo.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  21/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779483564",
            "to_ids": false,
            "type": "text",
            "uuid": "3d03ddd7-a770-468d-a889-4a6df29b08a0",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:18/66\nFirst Submission:2025-03-31T14:02:53.000000+00:00\nLast Submission:2025-03-31T14:02:53.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780126841",
        "uuid": "eb7e9da0-7be7-4007-a737-f661c5617f88",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499127",
            "to_ids": true,
            "type": "md5",
            "uuid": "43fccf7c-05ac-4645-b711-efa5571fca62",
            "value": "2e09920beb06f5eccbaddc2a89fbb68b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499127",
            "to_ids": true,
            "type": "sha1",
            "uuid": "bdfeb6bf-1a24-42d6-993b-cd63c8fe95a8",
            "value": "2896b2379527b1cf249c2df59f9ebaa28c384e16",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499127",
            "to_ids": true,
            "type": "sha256",
            "uuid": "2de7feae-097e-4f34-9a76-349d623afd0a",
            "value": "f2371412fafe4d584adb85a73d062f45d0be9f99e9d7fbb1629b751c56201ed0",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779483585",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "5dc6c80f-09c6-4134-a6b1-752ba8fd285e",
            "value": "98304:mzvh6kKpvc+zWt7W8WWtSxFM+nCBdQs1joUdH4kto/Kr9XrQF6:Opgvc+at7fWWd+MVoUdTrQF6"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779483585",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "43a6526a-e19a-40f4-8a0c-868859329b6d",
            "value": "4747408"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779483585",
            "to_ids": true,
            "type": "vhash",
            "uuid": "fe68d6b2-4e1b-4a8e-b143-98a36a0d9546",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779483585",
            "to_ids": true,
            "type": "filename",
            "uuid": "da63042a-28d0-402e-8bab-8d1bf76664b5",
            "value": "c7a10lao.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  23/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779483585",
            "to_ids": false,
            "type": "text",
            "uuid": "e5503e9d-d1ae-48ee-9c0a-8e17883369ed",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:27/66\nFirst Submission:2025-10-14T13:57:16.000000+00:00\nLast Submission:2025-10-14T13:57:16.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780126877",
        "uuid": "94817f06-560e-4172-b90c-0524b8178c72",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499128",
            "to_ids": true,
            "type": "md5",
            "uuid": "6d33147d-5463-42d5-a04c-591e2084275f",
            "value": "519f2d0451d1f3c8b92b5b53da89cc0c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499128",
            "to_ids": true,
            "type": "sha1",
            "uuid": "a5829b41-087d-4b77-904a-63ae1e6ef090",
            "value": "1eb50dc964d89d5514c53dc6f6e7b3d3c437612b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499128",
            "to_ids": true,
            "type": "sha256",
            "uuid": "38847081-e0f1-44db-af66-00d6e8a07daf",
            "value": "4c9540fa67e7b05ce33e8537af9a27fa4530bac58e0eab14b7e1911d1a388655",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779483607",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "1e1e5d58-908a-45b7-a3b7-df8694fc19e0",
            "value": "49152:0V409iab/DC78mngohhkGQeRAxnwKZZhlwK58HgQ7bo/KrfdUxFBVP:8Tb/W7bngwhkG9RrmKo/KrfdUj"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779483607",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "9b504687-db08-455e-966e-c474468bb564",
            "value": "2939950"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779483607",
            "to_ids": true,
            "type": "vhash",
            "uuid": "30ae73c7-94e7-48b9-a05f-aa839d299690",
            "value": "1be96efe1563a9d80e787f6e109a7308"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779483607",
            "to_ids": true,
            "type": "filename",
            "uuid": "60b7d728-bc90-4f28-ae39-3a2a2f82b5dc",
            "value": "519f2d0451d1f3c8b92b5b53da89cc0c.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779483607",
            "to_ids": false,
            "type": "text",
            "uuid": "5e47de9b-4c1d-49c9-ae82-fbf465293488",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:26/66\nFirst Submission:2025-05-19T23:28:05.000000+00:00\nLast Submission:2025-07-18T12:28:14.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780126900",
        "uuid": "85c6c554-4491-4380-8eb3-63e5e9bed044",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499130",
            "to_ids": true,
            "type": "md5",
            "uuid": "3f0e8682-45d4-4801-be57-7ff8c8bea43f",
            "value": "2fdd8d62da6c1f8dddc0ac18f1f0616f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499130",
            "to_ids": true,
            "type": "sha1",
            "uuid": "a56ab25a-93f0-4095-8ecb-020c7d53441d",
            "value": "f70809fa02df0cba703c0d19431f533b0ffcfb9a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499130",
            "to_ids": true,
            "type": "sha256",
            "uuid": "d950e067-a1ce-4ee0-8b32-081e0f214253",
            "value": "f92057beb838a864d3850cd4b8e3dc2c4e71ee3249a0393da94f4711b1d5094c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779483629",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "97edc1e3-d07a-4947-8fdf-525f031a2ff9",
            "value": "49152:PYvmyioYtSirgtNXRVyQJrmfzB0HgQ7Jo/KroNgRS:gvaoY3rgtFyDao/KroNgk"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779483629",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "8fbaf137-6cf5-412b-8224-24be31d9ec20",
            "value": "3147926"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779483629",
            "to_ids": true,
            "type": "vhash",
            "uuid": "0fb9aba8-1849-4684-a10e-5dcbeba70785",
            "value": "1be96efe1563a9d80e787f6e109a7308"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779483629",
            "to_ids": true,
            "type": "filename",
            "uuid": "00089265-6939-49ab-bc14-b3e604c42bd7",
            "value": "8bjds.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779483629",
            "to_ids": false,
            "type": "text",
            "uuid": "31db6fef-b18b-4cf6-b7bf-3d5f8fa40696",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/66\nFirst Submission:2025-11-21T07:41:25.000000+00:00\nLast Submission:2025-11-21T07:41:25.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780126921",
        "uuid": "7f49ce21-a4ae-4c38-8be4-175e870ded14",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499131",
            "to_ids": true,
            "type": "md5",
            "uuid": "02608e13-935d-4b11-a49f-c103bc5725e1",
            "value": "822d6772565cafc3bc5c506ea40b428c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499131",
            "to_ids": true,
            "type": "sha1",
            "uuid": "2711a86a-105f-4277-9d8d-50b888a91141",
            "value": "cd3bf78e94d8e3aa1c080871460b17ba9f2b2f54",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499131",
            "to_ids": true,
            "type": "sha256",
            "uuid": "f66eaf23-a42f-4e1f-a7a1-364e8d28bfba",
            "value": "6f4f285f4eb5bbf62c7d257c445ad29effaaac4bd36df90fe17af67dfae5839d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779483651",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "1f713344-9bd4-47f2-8e95-8279d968baf0",
            "value": "49152:JFANG88xvbFgzPmTvVZMH/d699HgQ7uo/KrUPo4s9gOYHMD:XAGNXi+TtZMHl1o/KrUPoZIHMD"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779483651",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "831127d2-f3ef-429b-97c6-daccf5f04844",
            "value": "3213390"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779483651",
            "to_ids": true,
            "type": "vhash",
            "uuid": "163bf557-4c7f-4d55-a7fc-768cf36ba5c3",
            "value": "1be96efe1563a9d80e787f6e109a7308"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779483651",
            "to_ids": true,
            "type": "filename",
            "uuid": "fe7f0558-1184-46fe-8637-32b3c2a19329",
            "value": "00zhuq.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779483651",
            "to_ids": false,
            "type": "text",
            "uuid": "4982db4f-c10f-4709-833e-7da8c6e8674b",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:26/66\nFirst Submission:2025-11-21T07:41:25.000000+00:00\nLast Submission:2025-11-21T07:41:25.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780126943",
        "uuid": "70ae80d5-e669-441f-acdd-5e6877ecfe92",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499133",
            "to_ids": true,
            "type": "md5",
            "uuid": "10ef9c09-3190-442e-be05-a9a640925094",
            "value": "b01f2839d0e2df6047f89db9245cdd23",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499133",
            "to_ids": true,
            "type": "sha1",
            "uuid": "3bd19607-6a1b-4109-a732-266936732d4e",
            "value": "c7d8287f5c1152a9da91ec452c0f2e4465debaa2",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499133",
            "to_ids": true,
            "type": "sha256",
            "uuid": "f428df26-5271-41b7-9cc2-43c6224ef820",
            "value": "52763e7f5230a0fd4fc6d108a35e1a0bf7bd2b8de4ccfe70367c04021be964fa",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779483672",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "a04cbadf-6b56-460b-9a1f-d48799bdcd56",
            "value": "49152:pJHxOwESr1C7kCjEWxeTMH+xVNCxhoHYDr9LewgQ2lo/Kr0SCfngv:THswESBtxWxeS+x2NRio/Kr0SCfngv"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779483672",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "84dff242-fd91-4b5a-bf6b-1665f7500135",
            "value": "3231471"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779483672",
            "to_ids": true,
            "type": "vhash",
            "uuid": "621699ef-cf2b-4293-9f87-4dec81e34bc4",
            "value": "fdb1c64322fafad4be3f9a665dc32725"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  21/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779483672",
            "to_ids": false,
            "type": "text",
            "uuid": "75d1f8b8-e321-42cf-bbfd-6d45553fde39",
            "value": "apk\r\nType Description: Android\nMicrosoft: Program:AndroidOS/Multiverze!rfn\nVT Total Detection:28/66\nFirst Submission:2025-06-26T18:14:27.000000+00:00\nLast Submission:2025-06-26T18:14:27.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780126964",
        "uuid": "e2f94d2d-5945-4ce5-a827-e2510b2a83dd",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499133",
            "to_ids": true,
            "type": "md5",
            "uuid": "5ba6fc1e-22f8-4481-9a98-9c6848b7e55a",
            "value": "aa7b04931d543b83b3ef052d6a69331b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499133",
            "to_ids": true,
            "type": "sha1",
            "uuid": "c9003171-839f-4d75-902a-221957f6be04",
            "value": "e30f5e36b9db36cb916941b7b97a4689812d3fee",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499134",
            "to_ids": true,
            "type": "sha256",
            "uuid": "8daf842d-b774-4c14-a73e-0fd520ec72b7",
            "value": "c44b28295afed36ed8d442c5bd1f76ace945165305d5c3d78cc0e406fbb8db47",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779483694",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "44df2eda-a487-4f1b-a69a-efc79cd04db8",
            "value": "49152:dmANG843SRwgyWZMteIFaZ62xmGDnRUzNP2T+9HgQ7EPo/Kr17BkzPy:AAGQ1MN0bxmGDnRURP2FPo/Kr17BUPy"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779483694",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "a3bbe5a3-0327-40be-8482-c4b92e6bd27f",
            "value": "3213474"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779483694",
            "to_ids": true,
            "type": "vhash",
            "uuid": "f0afcfc7-c161-47f9-b480-161ebd96124f",
            "value": "1be96efe1563a9d80e787f6e109a7308"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779483694",
            "to_ids": false,
            "type": "text",
            "uuid": "6be7f8e3-3739-4d6c-90b6-27b35045c38e",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/66\nFirst Submission:2025-07-06T13:36:33.000000+00:00\nLast Submission:2025-07-06T13:36:33.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780126986",
        "uuid": "d41f5587-1cf5-4a00-851c-29f21bec9a64",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499135",
            "to_ids": true,
            "type": "md5",
            "uuid": "cbf4add9-f430-4d02-ac7e-a399d2fc7484",
            "value": "3a81a444ec81dfdd2433b74f2cc0d028",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#230087",
                "local": false,
                "name": "rectifyq:samples-found-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499135",
            "to_ids": true,
            "type": "sha1",
            "uuid": "22914db4-a6c4-4be7-b6fe-d0134f2e5605",
            "value": "a0f06022cf4a774cb14f49d41796f48967ca3679",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#230087",
                "local": false,
                "name": "rectifyq:samples-found-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499135",
            "to_ids": true,
            "type": "sha256",
            "uuid": "c6f4399f-ec89-44d7-bfa4-cbfdcd4fa899",
            "value": "58c2b7816fce0aacd21a268f9fcc916251fd4c5d04853c36fb8a879487a07e40",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#230087",
                "local": false,
                "name": "rectifyq:samples-found-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779483716",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "46d58fbc-2a7c-4a10-a6b5-c5613085ba23",
            "value": "49152:HlFZbKFPql9eEFTANDcf/WHgQ7So/Kr6g7tehKQBq5b5h:FSFoFTAFcfNo/Kr6g7Mhdq5D"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779483716",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "697268d4-0985-4fd5-b119-7fd661bf9ae5",
            "value": "2828292"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779483716",
            "to_ids": true,
            "type": "vhash",
            "uuid": "34d46203-d9fb-48d9-ab9a-6c657d85a5db",
            "value": "1be96efe1563a9d80e787f6e109a7308"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779483716",
            "to_ids": true,
            "type": "filename",
            "uuid": "f79c695e-613d-45fc-a383-a90c1a005a0d",
            "value": "Beamngdrive.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  21/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779483716",
            "to_ids": false,
            "type": "text",
            "uuid": "6ae55516-cc5a-4b04-bde2-c43d26d7371e",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:19/66\nFirst Submission:2025-03-24T18:06:10.000000+00:00\nLast Submission:2025-03-24T18:06:10.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127007",
        "uuid": "364f4daa-5893-406c-9634-c5cb18a4a864",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499136",
            "to_ids": true,
            "type": "md5",
            "uuid": "0e5c5976-4976-4c7b-bbac-86698ca13caa",
            "value": "536a942d2503bc3f75a6f3b777c26928",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499136",
            "to_ids": true,
            "type": "sha1",
            "uuid": "e1fa7b3f-a1b4-4525-a335-647711166b94",
            "value": "95da5ee136cf8e64c481cbb3e35a34edaac3cb7e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499136",
            "to_ids": true,
            "type": "sha256",
            "uuid": "c4957f5d-8839-48dd-9f5a-ff7753a21319",
            "value": "7ac6fa0f808083d8528518b35783f8e53fe11dfbfd58f2b7ac3292f8b491a436",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779483738",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "006e2dde-923e-4c6e-8d1c-5ce4858513a2",
            "value": "49152:0mzRUZ4g5f1dCeDu1NSxSaOxwgQ2bo/KrAavPXSkVCLtISIiTk:d6R1kcu1Nt3o/KrAavPXSkELydiTk"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779483738",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "57462986-f5ac-48ff-bae9-5ea8f2a1f712",
            "value": "2895600"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779483738",
            "to_ids": true,
            "type": "vhash",
            "uuid": "c4d6a8bd-171a-47ef-a818-88f39305a7b9",
            "value": "fdb1c64322fafad4be3f9a665dc32725"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779483738",
            "to_ids": true,
            "type": "filename",
            "uuid": "421a7a05-c078-4e80-80c0-0cb46e87b331",
            "value": "Deepsleep2.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779483738",
            "to_ids": false,
            "type": "text",
            "uuid": "f37f997c-0eea-4bff-8541-f7b1c1e82440",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:27/66\nFirst Submission:2025-05-16T08:10:19.000000+00:00\nLast Submission:2025-05-16T08:10:19.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127029",
        "uuid": "a1a84961-dee3-4a24-83c7-4ad7cfa7aa9e",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499137",
            "to_ids": true,
            "type": "md5",
            "uuid": "363763a6-b15e-4295-ba8a-7c512510464b",
            "value": "05cf42e0c514a1fbe956cd74d9dc8de8",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499138",
            "to_ids": true,
            "type": "sha1",
            "uuid": "fe7f3865-1e61-47e6-8886-fee02745dc2b",
            "value": "202d782ca337e87a08f94ada7ff8c524c2f51fc3",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499138",
            "to_ids": true,
            "type": "sha256",
            "uuid": "61ea3f1f-4adf-4408-9f42-6a38e40f19d7",
            "value": "ce6c3943b7f3ebf681bf50922cf7c705ff93230b6213c30add06a7042c075f46",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779483759",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "f670c8b8-4705-4160-8ba9-8b4fbd5fb72f",
            "value": "49152:F6PeQG4Tros5/zFk4rP4uwQcfbkefv3anHgQ7Oo/Kr6g7e2:mMs9XlTcfyIo/Kr6g7J"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779483759",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "d05b052e-df94-43ac-83bf-50c1c6028117",
            "value": "2758661"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779483759",
            "to_ids": true,
            "type": "vhash",
            "uuid": "f59d6e1c-e9ac-406e-a528-2657a95feb3a",
            "value": "7bbbc33a735ef16eaf02f475b744f3e6"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779483759",
            "to_ids": true,
            "type": "filename",
            "uuid": "c68cc947-67d4-4ddf-876e-d1fea52d896e",
            "value": "Geometrydash.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  21/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779483759",
            "to_ids": false,
            "type": "text",
            "uuid": "6dc9c61a-b1e0-4a9d-ad7c-d0fd02644d79",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:22/66\nFirst Submission:2025-03-24T20:02:52.000000+00:00\nLast Submission:2025-03-24T20:02:52.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127050",
        "uuid": "566c09e1-9374-4fc0-a2f7-afb3e16186db",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499139",
            "to_ids": true,
            "type": "md5",
            "uuid": "011ecdc6-672c-4674-ab8c-9f05ade568f0",
            "value": "528f1e4d56813c7f4600cafd5cc53725",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499139",
            "to_ids": true,
            "type": "sha1",
            "uuid": "058ad1d9-c66e-4fd1-80e6-9b296dc5bcf1",
            "value": "451dc99555aa0031b0725263b298eba3d4e7193e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499139",
            "to_ids": true,
            "type": "sha256",
            "uuid": "06819374-df43-4a68-9a2b-c33cd0c22c4f",
            "value": "6d0e1760010cf4b7f8eea21abfdf6ae867ffa90cbf99e13c7623c825ce6c5c4f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779483781",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "8496d1e3-d9c6-4825-9985-80943f5769f5",
            "value": "49152:gp0V8EKGINPaBsJFsEmnW3f3W8THgQ7oo/KrUPolF2dI5BL5QX:oEeSBsJFNmWv3Wvo/KrUPo7wI5IX"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779483781",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "ff42eedd-c9bb-4f5d-b58c-eda4fa0a5e29",
            "value": "2816078"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779483781",
            "to_ids": true,
            "type": "vhash",
            "uuid": "45fb39ea-be1a-464c-b174-e6365953429b",
            "value": "1be96efe1563a9d80e787f6e109a7308"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779483781",
            "to_ids": true,
            "type": "filename",
            "uuid": "ba8007f7-1f6a-4968-a25c-b5d051413d98",
            "value": "Repo.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  21/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779483781",
            "to_ids": false,
            "type": "text",
            "uuid": "40608edf-4384-4828-a7a8-4e70402911be",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:18/66\nFirst Submission:2025-03-29T05:37:44.000000+00:00\nLast Submission:2025-03-29T05:37:44.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127072",
        "uuid": "05b47aaf-a12e-4f29-970c-4fa70af7c131",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499140",
            "to_ids": true,
            "type": "md5",
            "uuid": "6becfc97-a77f-4773-8bce-77e197ed0a1d",
            "value": "03d0df278887435b1c3bbfb7c1e8514e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499140",
            "to_ids": true,
            "type": "sha1",
            "uuid": "9bdbc843-c6f9-4f5a-9f14-fa08290d6e03",
            "value": "5c7f0255c13b1d9dc188218daeff014bc36cd81a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499140",
            "to_ids": true,
            "type": "sha256",
            "uuid": "e523aed1-07cc-4eff-a968-a1889fd6941d",
            "value": "27155c6f6d8c822424fb2eaa4214defd3e4d96288dec858b005676ec413c5a2c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779483803",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "dd4469ca-0ec7-43d3-9dc8-981747b3d5b1",
            "value": "98304:LQNh4YbNRM05h8hLIXXLigtRHFk3be5GUZKmJXhqduiGvAIVwXYZTjo/KruBkN/:c4W2chYLIXjRH4qAN+IVGvA8wXYZTIkV"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779483803",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "0f290cf3-c0a1-47d0-84e3-1da39156cb32",
            "value": "5856282"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779483803",
            "to_ids": true,
            "type": "vhash",
            "uuid": "1f565d7c-6d92-4102-8fb2-32a3aac53efb",
            "value": "d412355e15773f6a32dc89aa179473b1"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779483803",
            "to_ids": false,
            "type": "text",
            "uuid": "0600b79c-8d0f-409a-b45c-2e031440c7ba",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/66\nFirst Submission:2025-03-08T18:33:44.000000+00:00\nLast Submission:2025-03-08T18:33:44.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127093",
        "uuid": "c17ec673-50dc-4b0d-ac63-2a4636a5f8f6",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499141",
            "to_ids": true,
            "type": "md5",
            "uuid": "a9d00e62-6a64-4fcc-98e4-d70eec11fd14",
            "value": "0686061d6f2702d48402e64b850a9461",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499142",
            "to_ids": true,
            "type": "sha1",
            "uuid": "29f4243f-83b8-458f-9de4-d891d6d71010",
            "value": "23fb818ff3891758b14786c656ab46c87bddbc5d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499142",
            "to_ids": true,
            "type": "sha256",
            "uuid": "723bf439-34ac-4a15-b15c-f3529cdad767",
            "value": "0fdbff43b28b301c19cdf26352319d83d3291002453054711f0d9eb3d64fa54f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779483825",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "601e33b2-3166-4e4e-b8c7-32c15894939a",
            "value": "49152:Gs6+qdo0PmAwkEJFwwNBK7BHgQ75So/Krm/P0ri4xRxl+zuQZ:Jrkhw1wLtSo/Krm/PQi4HT+zuQZ"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779483825",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "a52c22d2-f365-4cbe-95fa-9f15650dab7c",
            "value": "2881693"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779483825",
            "to_ids": true,
            "type": "vhash",
            "uuid": "9d001928-9c41-4ff0-a5ff-08ca3d7d042d",
            "value": "1be96efe1563a9d80e787f6e109a7308"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779483825",
            "to_ids": true,
            "type": "filename",
            "uuid": "2f996873-adfa-4817-831e-5a5d53b17526",
            "value": "2gwirr9.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  23/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779483825",
            "to_ids": false,
            "type": "text",
            "uuid": "5e8a1641-d829-40ea-8660-448491fc22c0",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:20/67\nFirst Submission:2025-03-26T16:53:26.000000+00:00\nLast Submission:2025-03-26T16:53:26.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127116",
        "uuid": "914687c9-faa5-40e4-a3ca-bb4b8410316d",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499143",
            "to_ids": true,
            "type": "md5",
            "uuid": "c2a6676f-c564-4d19-8b74-f47ad4c5d736",
            "value": "58c612673d2ecad853e589f5d9a16bb6",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499143",
            "to_ids": true,
            "type": "sha1",
            "uuid": "108c101c-2cc4-4f4f-9139-5dead7110a0b",
            "value": "7057f0d7a93184f8a9e3bb35108d18c11951fd4f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499143",
            "to_ids": true,
            "type": "sha256",
            "uuid": "90123dca-0538-413e-aa86-becbf315b5e2",
            "value": "a3c39fe5385caf65f7d283b8678f9267d64e7d7bdda6bf950b8e137c8e74962f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779483847",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "7e36d776-fa82-4943-8929-de1a37dccf39",
            "value": "49152:9gpW+1lHTqWClNxwa77hpmmqjHgQ7xo/Kr6q8NxHT1N2:ux1lqvwap8No/Kr6q8vHT1Q"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779483847",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "e658b56d-b357-4e98-9c60-498a05ab436b",
            "value": "2873422"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779483847",
            "to_ids": true,
            "type": "vhash",
            "uuid": "ae61dc8d-84e8-488d-a54d-af11c06c836e",
            "value": "1be96efe1563a9d80e787f6e109a7308"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779483847",
            "to_ids": true,
            "type": "filename",
            "uuid": "902ce4ac-037b-4734-96f0-6b61ba1ca971",
            "value": "Counterstrike2.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779483847",
            "to_ids": false,
            "type": "text",
            "uuid": "d4a38bf5-39e3-41e0-91c6-b7316f97ae62",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:27/66\nFirst Submission:2025-05-25T09:15:27.000000+00:00\nLast Submission:2025-05-25T09:15:27.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127137",
        "uuid": "13a40002-fec5-42a5-bfbd-8bb75ea2f648",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499144",
            "to_ids": true,
            "type": "md5",
            "uuid": "e98e79d7-0010-425e-9d75-e58cb4cd3445",
            "value": "dd8cda9754db25ab68a3875143d7b51e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499144",
            "to_ids": true,
            "type": "sha1",
            "uuid": "36947377-d325-4ae8-b3ba-5392bfedfde0",
            "value": "cf79d049d012ab7b5ccbe021b702d50a50614b17",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499145",
            "to_ids": true,
            "type": "sha256",
            "uuid": "b71c1314-8f99-4b19-b293-53269b78ffed",
            "value": "b9172a4cfc473d88c654c4e245c9c8af9dff8a06a80db42cd10b877eb7373712",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779483869",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "515391b4-517c-4862-8728-236762911783",
            "value": "98304:hW2Eb5+SHJ4WbKNAC8OF+BVrQFfnUKx3ocPo/KryBa2y:hW1wA47QQVx3Ua2y"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779483869",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "ce964ebe-5fd3-4b8d-833c-41fae02f92a8",
            "value": "5635527"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779483869",
            "to_ids": true,
            "type": "vhash",
            "uuid": "e868294e-169c-4cd1-b270-94c80e478ab7",
            "value": "d412355e15773f6a32dc89aa179473b1"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779483869",
            "to_ids": true,
            "type": "filename",
            "uuid": "a67af886-6019-4521-8813-f2a8abc6bdae",
            "value": "wvqrj.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779483869",
            "to_ids": false,
            "type": "text",
            "uuid": "805491db-0bad-4e76-a9be-6392bfe1eb41",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/66\nFirst Submission:2025-11-20T16:54:39.000000+00:00\nLast Submission:2025-11-20T16:54:39.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127159",
        "uuid": "ea598707-02ce-42f2-b3d9-f9a04598a8d1",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499146",
            "to_ids": true,
            "type": "md5",
            "uuid": "c01d65ca-0ab4-4e98-99b4-d5d679199601",
            "value": "a391d5d3f834b21a5f5de00e1638c8d5",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499146",
            "to_ids": true,
            "type": "sha1",
            "uuid": "ccc2b9d7-8aa1-4a71-a394-1bc8295d027f",
            "value": "2a805dbf595de3f79c6ba0d6d14ad6581bf62f69",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499146",
            "to_ids": true,
            "type": "sha256",
            "uuid": "89a7f8cf-097c-4027-b16e-60475f337480",
            "value": "b959949e4f18bc2d66dd0066b86894b9b43fb6eeb71591f8951857ff07330587",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779483890",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "a4c52cb0-95a8-4b2b-b484-c8636ed96274",
            "value": "98304:mbOxM+5CpmX99ifyRZVnv6C/+8mc+AVt6A1UOJw/ENHzo/KrYeUn1:msT99RHZ/TmcvH6A1rJJBUn1"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779483890",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "3a644315-cc6a-43c4-be58-b4d0018ab2cf",
            "value": "5520411"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779483890",
            "to_ids": true,
            "type": "vhash",
            "uuid": "8c8d9a70-a581-4969-8f15-b5b1a357ec47",
            "value": "d412355e15773f6a32dc89aa179473b1"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779483890",
            "to_ids": false,
            "type": "text",
            "uuid": "465879d2-16dd-4f10-a6f2-316ae1461306",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/66\nFirst Submission:2025-03-08T07:30:07.000000+00:00\nLast Submission:2025-04-09T00:15:28.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127180",
        "uuid": "945cc492-4de9-422b-8b51-c5d68947945b",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499147",
            "to_ids": true,
            "type": "md5",
            "uuid": "6f215892-7b40-49a9-af46-bacd09023f15",
            "value": "cf586160cb33c0f3d0a6fe7ee65f2fd8",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499147",
            "to_ids": true,
            "type": "sha1",
            "uuid": "5780408a-1564-47f3-9650-f056e477775f",
            "value": "cc5e86c31f9b20cd3f35e73e609ca7ac2f424127",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499147",
            "to_ids": true,
            "type": "sha256",
            "uuid": "943fe818-a223-46b1-838e-9d467a869f7a",
            "value": "0c94b8d960f9ee5c4237db5522127ffbde1076ebfaec0e6e703e526a26343391",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779483913",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "08a805ce-6ab2-4030-b945-b777daca5c2f",
            "value": "49152:n00V8Z5ZeNPUCTHUSuj8THgQ7oo/KrUPow7dIm:0ZoBTwvo/KrUPoCIm"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779483913",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "77ecb302-e7a8-446a-80d8-05a5a0a30f8d",
            "value": "2816078"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779483913",
            "to_ids": true,
            "type": "vhash",
            "uuid": "37c80974-27a9-4c25-b803-6b692d80ee67",
            "value": "1be96efe1563a9d80e787f6e109a7308"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779483913",
            "to_ids": true,
            "type": "filename",
            "uuid": "27066e51-8cdb-4445-ad15-d52f40e22b85",
            "value": "Repo.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779483913",
            "to_ids": false,
            "type": "text",
            "uuid": "6916f8e5-6f29-4e08-88d0-85516735b81a",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:24/66\nFirst Submission:2025-03-31T18:11:42.000000+00:00\nLast Submission:2025-03-31T18:11:42.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127202",
        "uuid": "76345c43-7d0b-4a93-a6ae-5f460a70878c",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499148",
            "to_ids": true,
            "type": "md5",
            "uuid": "1c56df44-2e99-44f6-89f3-b513eb3820aa",
            "value": "35683ee3a7399d85d1c0e5b7445a1d53",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499148",
            "to_ids": true,
            "type": "sha1",
            "uuid": "014ff0b4-7e8c-448d-a3db-f980efee4ce8",
            "value": "c161dd09efb311d8d4d3d369fb710ebf8447972e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499148",
            "to_ids": true,
            "type": "sha256",
            "uuid": "a76a79d3-0d45-45c7-941f-99385069a6ef",
            "value": "6a74c25051f72cda6afafff91e27faee5fa9ed6742c37b333d7c13adaec473e2",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779483935",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "32634900-0736-4599-a942-2992e95f8621",
            "value": "49152:+uDkGpRQO9riHTy5SN971e53E0oz10nDX4SUjEHgQ7uo/KrUPo/G/:VQGpRQ0GHTyz3EZIDoSUjzo/KrUPoo"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779483935",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "b06dc772-5608-45f6-a37e-43f53e6ea9cb",
            "value": "3143758"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779483935",
            "to_ids": true,
            "type": "vhash",
            "uuid": "48403a96-47ea-4d59-bd96-765bde1b483a",
            "value": "7bbbc33a735ef16eaf02f475b744f3e6"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779483935",
            "to_ids": true,
            "type": "filename",
            "uuid": "c889e1d7-0e83-44c8-9cec-1ad13895fbaf",
            "value": "Gtav.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779483935",
            "to_ids": false,
            "type": "text",
            "uuid": "3f72f94f-dfcc-415f-bca0-b3a3fa630f46",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:25/67\nFirst Submission:2025-05-03T05:25:08.000000+00:00\nLast Submission:2025-05-03T07:28:13.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127224",
        "uuid": "80048b10-2923-459a-a6ea-5d2beb2976e9",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499149",
            "to_ids": true,
            "type": "md5",
            "uuid": "5f51000b-a579-4d51-b603-0acc387e36ee",
            "value": "b1df9d3c02abb0d53970fbf4dabe84ec",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499149",
            "to_ids": true,
            "type": "sha1",
            "uuid": "4c00a056-ff30-4443-82df-ac800dc6256f",
            "value": "78ade17d2ccc8a93492b66c0d393013f713e656e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499149",
            "to_ids": true,
            "type": "sha256",
            "uuid": "5b94d9f2-a3a1-44ac-a6cc-de52a5454f9e",
            "value": "bb46ee9dfec4b166ee3045fa9ced0331bf903b7818cef9ecb16e211083c95d14",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779483957",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "f7597ca2-8c34-4246-89f2-2b081344fbde",
            "value": "49152:brZJxgrP8vdkvt2lrRsloRByabEJOkiHgQ7Bo/KrFnaw6lNC6NgS:XrGrwkvt2XByabEL2o/KrFnaHrN/"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779483957",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "18f61a64-4de4-4a1f-a626-9953d1f2be15",
            "value": "2960101"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779483957",
            "to_ids": true,
            "type": "vhash",
            "uuid": "469c348b-ac41-4eae-8e7b-1c628c49a004",
            "value": "b9c15db6e6136ef16ca1d0f73df7af7e"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779483957",
            "to_ids": false,
            "type": "text",
            "uuid": "27d53768-9411-4809-8f5c-50dd65a84e3f",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/67\nFirst Submission:2025-07-04T18:35:27.000000+00:00\nLast Submission:2025-07-04T18:35:27.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127245",
        "uuid": "bd51856b-b9b2-44fb-a0b6-d5386e03684e",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499150",
            "to_ids": true,
            "type": "md5",
            "uuid": "1e2a36dc-24fd-4596-82af-ce0ed3b5a7cf",
            "value": "702a122a658a8673c9605d2c3e60ddfe",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499150",
            "to_ids": true,
            "type": "sha1",
            "uuid": "33b9242f-0db0-4f04-8899-809d68b8087a",
            "value": "2a6c4739861762f94136735c6d5a348012cca13d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499150",
            "to_ids": true,
            "type": "sha256",
            "uuid": "22d6f368-c02d-47de-86b5-43b03654d293",
            "value": "eda719250adb72464217d92b1ec18ae730eb1dcfccc4ccdf69a96046b47d3a2c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779483979",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "d6f16df7-bd75-4a12-a304-45e0c8f4b6e9",
            "value": "49152:spD4zo8dtl6tBqhBLZEt6h+f+wU8crCwHgQ7no/Kr6q8iMJd7oep2udedOy:KMdeqvVE+Jo/Kr6q8JTeuden"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779483979",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "1c40c3bd-b5d8-43d2-9f8f-0cd7d46a18ad",
            "value": "3188814"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779483979",
            "to_ids": true,
            "type": "vhash",
            "uuid": "3d60127a-f073-4424-840f-8c69ca123528",
            "value": "1be96efe1563a9d80e787f6e109a7308"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779483979",
            "to_ids": true,
            "type": "filename",
            "uuid": "e620f389-8d9b-4197-8720-75387dee180f",
            "value": "Duetnightabyss.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779483979",
            "to_ids": false,
            "type": "text",
            "uuid": "f0aed2e5-67a7-44ff-9562-63bab91c5800",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:29/66\nFirst Submission:2025-06-20T20:57:06.000000+00:00\nLast Submission:2025-06-20T20:57:06.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127267",
        "uuid": "313a4e21-2ff4-4d6e-92eb-f40fe408a2f0",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499151",
            "to_ids": true,
            "type": "md5",
            "uuid": "f7e4564f-25fc-46e9-9a7d-174a6e986e33",
            "value": "92e4fc1bf0d4f28700150d4f09fa3a57",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499151",
            "to_ids": true,
            "type": "sha1",
            "uuid": "a5629d67-bb27-4c10-b99d-0cc71bff007f",
            "value": "576e9f602fa9bd4ed5df8911fb2973febcec8cda",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499151",
            "to_ids": true,
            "type": "sha256",
            "uuid": "8e57618a-a2cb-449b-9a55-7e6691453388",
            "value": "517b35dcf83fea62f21e29844f35156927f53a9ca1ef769146df862013cc3516",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484000",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "37ee32dc-94c7-4ea1-9e85-4b4062d6e447",
            "value": "98304:F3OcwV4XcJ2/9LuCKZCSbJr12RGY5pbSa7o/Kr9rfQ:IhV4Xl/1CqRhxNbfQ"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484000",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "20f01f58-503e-413b-8b8b-63677c28495a",
            "value": "4645008"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484000",
            "to_ids": true,
            "type": "vhash",
            "uuid": "19485100-4221-485b-925c-f120263764e9",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484000",
            "to_ids": true,
            "type": "filename",
            "uuid": "47620370-3aa9-4821-9c52-cd871a0cf97e",
            "value": "kfph95.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484000",
            "to_ids": false,
            "type": "text",
            "uuid": "4ae6fbde-ef58-4162-b586-91808e00cd99",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/66\nFirst Submission:2025-09-30T21:59:32.000000+00:00\nLast Submission:2025-09-30T21:59:32.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127288",
        "uuid": "03e640dc-9adc-483f-a7f4-766d200563bf",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499152",
            "to_ids": true,
            "type": "md5",
            "uuid": "b7277b0f-1036-4b12-99bc-6a4ed512d6b0",
            "value": "27c950143615b7e5a1238ecd35b853fc",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499152",
            "to_ids": true,
            "type": "sha1",
            "uuid": "40006ded-9880-4f89-bb11-ffa5ef83c46b",
            "value": "6d33936499fda333b23b0be42fb68ebc07e7bd7b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499152",
            "to_ids": true,
            "type": "sha256",
            "uuid": "75da2314-c88f-4184-b798-2e860d97951b",
            "value": "14a566d8cece82fb065cf92cc8558197b4ee222d9167654ac50ec2107e2869cc",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484022",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "296ae283-c4d2-4bca-852b-531188e44258",
            "value": "49152:QGuk5K+sOGHrK+ybXH7L5VHgQ7Oo/KrUPodRO:Duk5KJOG+/bwo/KrUPoG"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484022",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "f6865f3c-a774-4179-9925-b5473620fd8e",
            "value": "3029070"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484022",
            "to_ids": true,
            "type": "vhash",
            "uuid": "f6c53c44-3d4c-41ac-bb75-66513189078a",
            "value": "1be96efe1563a9d80e787f6e109a7308"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484022",
            "to_ids": true,
            "type": "filename",
            "uuid": "2f2c9f41-3c6d-4ea0-8582-7ecac4f3dd0b",
            "value": "m1a3pyg.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484022",
            "to_ids": false,
            "type": "text",
            "uuid": "8baa79ba-c90a-4e18-9f60-6544bca8fdda",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:27/66\nFirst Submission:2025-05-06T05:02:10.000000+00:00\nLast Submission:2025-05-06T05:02:10.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127310",
        "uuid": "8280a009-e544-4b80-804c-dff408c5ca11",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499153",
            "to_ids": true,
            "type": "md5",
            "uuid": "aa75eff0-7be0-4015-b1b5-0cb4edf8ba91",
            "value": "ca605d9f09c9272435c185ca6fe9e39d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499153",
            "to_ids": true,
            "type": "sha1",
            "uuid": "feba129c-0439-40a2-96b0-8608191db2e1",
            "value": "17368bfd9417461003541fd22bce61b1ea1e2970",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499153",
            "to_ids": true,
            "type": "sha256",
            "uuid": "16280d26-e518-4978-9de8-98e6d8df56d0",
            "value": "be735729719f43ad1f681916a4764ae0de658844f4040e34f77490582cc54263",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484044",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "a059f524-73f0-407b-8d79-84159076b953",
            "value": "49152:/0FILjxhTYMVvQy67l4Tcw0SXUJCU6+lllcyHgQ7Bo/KrUPoMfbPB0N/V2:IIXY6QyXcDSXUcU6gllLo/KrUPouG2"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484044",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "d11304e3-de07-4b04-ae68-495a59a9fac5",
            "value": "3082318"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484044",
            "to_ids": true,
            "type": "vhash",
            "uuid": "026e09ed-3e02-4a5e-b280-5d11de662969",
            "value": "1be96efe1563a9d80e787f6e109a7308"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484044",
            "to_ids": true,
            "type": "filename",
            "uuid": "e786f36b-8fc2-4f94-aa1d-853b74a7203e",
            "value": "685ir5n.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484044",
            "to_ids": false,
            "type": "text",
            "uuid": "f328fbab-846c-4246-8757-e97c7a84bf91",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:29/66\nFirst Submission:2025-11-03T07:15:33.000000+00:00\nLast Submission:2025-11-03T07:15:33.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127331",
        "uuid": "46ef7fe2-320b-42cb-af87-8d1a4768b124",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499154",
            "to_ids": true,
            "type": "md5",
            "uuid": "e254f51c-58aa-43e6-848e-2bacbd9311fc",
            "value": "53393c3df07540925c75d10da933ed8b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499154",
            "to_ids": true,
            "type": "sha1",
            "uuid": "1a286e36-e511-4851-9f96-7a62c11b4123",
            "value": "e69229f3e3cc9bb87267ea1c1e08193f051ca17c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499154",
            "to_ids": true,
            "type": "sha256",
            "uuid": "b7fd5513-f856-4837-8796-2567dbf75dc0",
            "value": "68625cbc1706de4a0b7b99e2b6d145983ef94bfbdf385d4a8d47d00fc9f40ead",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484066",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "6a3ba11c-ceb1-4c19-a168-439062da9b86",
            "value": "49152:HsvmyioYtSirgtbdZW6aZ23fnh/SHgQ7Kho/KroYsXb:MvaoY3rgtSDZ0No/KroYsL"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484066",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "8cb88f7d-c63e-44ae-b7e2-39e916cf2906",
            "value": "3147852"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484066",
            "to_ids": true,
            "type": "vhash",
            "uuid": "3a03ce86-ad72-4e00-8aa2-8107f1d2f4e8",
            "value": "1be96efe1563a9d80e787f6e109a7308"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484066",
            "to_ids": true,
            "type": "filename",
            "uuid": "1d5b5ea8-91c6-4dbb-836d-ebb4fee4aed6",
            "value": "Minecraft.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  21/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484066",
            "to_ids": false,
            "type": "text",
            "uuid": "4a7e233e-fd45-4f21-ac61-ac9560f97ffc",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:25/66\nFirst Submission:2025-03-26T07:24:05.000000+00:00\nLast Submission:2025-03-26T07:24:05.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127353",
        "uuid": "643572e5-fc93-4aca-868e-2391b13a60a5",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499156",
            "to_ids": true,
            "type": "md5",
            "uuid": "c0ae059f-a32e-455c-9825-a4f978139db5",
            "value": "0ab94dcf89bfd8156ff6ec705025cb58",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499156",
            "to_ids": true,
            "type": "sha1",
            "uuid": "71e06bb7-2671-4cfa-8540-fea4c6258fdd",
            "value": "8247458e757e6c04b436fdb59de2caa907ef8639",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499156",
            "to_ids": true,
            "type": "sha256",
            "uuid": "dd91ac00-12e2-4bd9-8b95-f22b25fb6c12",
            "value": "f9e756e7c00ad7bcfe428aa8522c37185bdf6c59f120a708d0067cc45d6b562d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484087",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "7f518538-d5b7-4aa7-a330-e6445cd3d284",
            "value": "49152:kFM6+y7StTWkfQ8/pdVMt17TgRUNoCSpd7Lo/Kr9/8WDFS:Fry8TvQsVa17TeTo/Kr9/7FS"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484087",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "43ad9a26-1bff-45f3-bd52-f9cb9c86a236",
            "value": "3448755"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484087",
            "to_ids": true,
            "type": "vhash",
            "uuid": "75006751-ca50-48d4-8e16-f37f03a2aea6",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484087",
            "to_ids": true,
            "type": "filename",
            "uuid": "6a4b2551-f0e0-4db5-8f9f-7b035010d5b0",
            "value": "6earzca.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  23/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484087",
            "to_ids": false,
            "type": "text",
            "uuid": "26732561-9048-40e0-9222-54e97731993c",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/66\nFirst Submission:2025-10-14T12:19:27.000000+00:00\nLast Submission:2025-10-14T12:19:27.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127374",
        "uuid": "25c396fe-28eb-4a33-b023-b0db5d14b3b1",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499157",
            "to_ids": true,
            "type": "md5",
            "uuid": "0bcfacf9-0004-40be-9795-79c908bd73f6",
            "value": "6b5f6d86d16c2d0b0294cec9518cc8da",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499157",
            "to_ids": true,
            "type": "sha1",
            "uuid": "4dd7ea6d-77b6-4d9c-90ea-6a3ea32d0298",
            "value": "4168b316f1679cb3d2867f6b94f24010fc1d18ad",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499157",
            "to_ids": true,
            "type": "sha256",
            "uuid": "de20f8af-1478-4a8f-9af0-d0da75c871b4",
            "value": "5430b587ec59696b153a3b832743cf1cc963b77149d5162d4a7288333fe4545f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484109",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "eb6cd174-f382-42ac-9e6d-8e1d888d7ad4",
            "value": "49152:i3FILjxhTIuMFZCjIfs7GdRHuFVAcyHgQ7Mo/KrUPoI2bPB0N7/ze:kIXIw6sidRyA6o/KrUPoF6C"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484109",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "d68b3ab2-bd4e-4180-9fac-1ac0561fb6b4",
            "value": "3082318"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484109",
            "to_ids": true,
            "type": "vhash",
            "uuid": "ba71fa61-4a4c-4aba-8c40-534f3b137029",
            "value": "1be96efe1563a9d80e787f6e109a7308"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484109",
            "to_ids": true,
            "type": "filename",
            "uuid": "d0d8f207-653b-45b6-8a90-9e1623f56a5a",
            "value": "Bluelockblazebattle.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484109",
            "to_ids": false,
            "type": "text",
            "uuid": "995410a9-c34f-4505-ac52-d4609c35e5ab",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:23/66\nFirst Submission:2025-04-23T08:42:04.000000+00:00\nLast Submission:2025-04-23T08:42:04.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127395",
        "uuid": "ef55916b-3d4d-4180-bc24-6604af92693d",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499159",
            "to_ids": true,
            "type": "md5",
            "uuid": "6dbf35c0-6127-4186-94d9-790e02deb26c",
            "value": "848a2948274c4c10898fde54b9803958",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499159",
            "to_ids": true,
            "type": "sha1",
            "uuid": "c82283d8-9bdd-4b1b-bbf7-39b3f81557da",
            "value": "493ee2c5189141e02536964d9131cd314de0e943",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499159",
            "to_ids": true,
            "type": "sha256",
            "uuid": "722375f3-1745-4691-8417-e0323569b5f0",
            "value": "03fea2dd3d2c79b595f197981c29c6187bde03e24635e1e44ed381e1ff514fdf",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484131",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "c0666c0e-825e-4b50-b76e-cd6f2aaa2bbc",
            "value": "49152:kdLmNu5CqVxY+/bwNQtCX7uaJyAoJUVekbHgQ7HSo/Krm/Pa+HUVIg/hOL/iJS41:5N3l2wSQVyAoW1FSo/Krm/PfqIuMZ4"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484131",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "890b1689-30b2-49ed-b4a8-ad843759e03c",
            "value": "3360925"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484131",
            "to_ids": true,
            "type": "vhash",
            "uuid": "c3baa088-2e1c-460d-8ae2-0600ae610e15",
            "value": "1be96efe1563a9d80e787f6e109a7308"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484131",
            "to_ids": true,
            "type": "filename",
            "uuid": "1564759d-90dc-4e61-8cfe-4d295e272646",
            "value": "nz65f.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484131",
            "to_ids": false,
            "type": "text",
            "uuid": "5aa65271-988a-4f24-94a1-060325d317a2",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/66\nFirst Submission:2025-07-20T14:27:46.000000+00:00\nLast Submission:2025-07-20T14:27:46.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127417",
        "uuid": "98edbe10-3445-4384-b178-6848f7d32c79",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499160",
            "to_ids": true,
            "type": "md5",
            "uuid": "880cc83f-babc-4065-8115-c901c1c9f2bb",
            "value": "f5269c961eca5301ff048ed78ce79334",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499160",
            "to_ids": true,
            "type": "sha1",
            "uuid": "799513cd-7e3c-45d2-a7d6-706a603f600b",
            "value": "b2350845c6bd929f999a45cbdac2526ef2c3e1df",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499160",
            "to_ids": true,
            "type": "sha256",
            "uuid": "541ba11f-5af1-4239-9712-cc12866a7a60",
            "value": "2e53344f932ed76765bd88ba89b15375b7527045ad83a9788573254f4edf5c1c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484152",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "f9cd1718-f32e-45cb-944e-485cb4b70a03",
            "value": "49152:Tp1/rK3HNjydwSR0l9W5ro1tXe2nHgQ7Mo/KrUPoNUpAvg9Tx0T1z:11jK3yjk1tuJo/KrUPoNyOT1z"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484152",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "c823d75f-003e-4b9a-85cc-46aba2b88df9",
            "value": "2967630"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484152",
            "to_ids": true,
            "type": "vhash",
            "uuid": "30e39412-ee12-421e-8921-4b4bf0a2cb26",
            "value": "1be96efe1563a9d80e787f6e109a7308"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484152",
            "to_ids": false,
            "type": "text",
            "uuid": "99d287bf-9eae-4b7d-92d1-12861f200cd8",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/66\nFirst Submission:2025-05-10T11:40:27.000000+00:00\nLast Submission:2025-05-10T11:40:27.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127439",
        "uuid": "779dcc44-013c-4ed0-875c-aba19a2b8132",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499161",
            "to_ids": true,
            "type": "md5",
            "uuid": "83e36c57-0205-4cf4-b965-19b7d385e737",
            "value": "d8343404354866ed7c1d02c093bcdec1",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499161",
            "to_ids": true,
            "type": "sha1",
            "uuid": "638c60a4-a578-4022-b61b-7bf8439e217c",
            "value": "2c1befb9673bc46c194f6de93279d622829a9863",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499161",
            "to_ids": true,
            "type": "sha256",
            "uuid": "3a51dfa8-7de2-4dbb-81c7-3dc20f8b2f4b",
            "value": "358e1818596ce5818759fd3ca4f17430f1de30de8382933621cefaa2642941b9",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484174",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "5ecd6830-93b8-492d-846f-5c9573cf7be8",
            "value": "49152:YaoU82ikha1mCEYeHgQ73o/KrUPol5A5cxgFp+e/:JoU80QmYgo/KrUPo0yxgF0U"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484174",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "9298cce2-144f-4bf5-a7c6-16269d451e55",
            "value": "2840654"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484174",
            "to_ids": true,
            "type": "vhash",
            "uuid": "89ad06cd-3166-4aac-90e5-1d34828374d0",
            "value": "1be96efe1563a9d80e787f6e109a7308"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484174",
            "to_ids": true,
            "type": "filename",
            "uuid": "23e37f87-5ab6-4fd3-ac19-406e72b10c98",
            "value": "Pojavlauncher.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484174",
            "to_ids": false,
            "type": "text",
            "uuid": "c6ce7e8a-3a88-420d-8133-9db0a29b4826",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:21/66\nFirst Submission:2025-03-30T07:32:44.000000+00:00\nLast Submission:2025-03-30T07:32:44.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127460",
        "uuid": "632909d7-8e49-410d-b84e-fd66951f317c",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499162",
            "to_ids": true,
            "type": "md5",
            "uuid": "35cd20b6-dccc-4d24-953c-922d0a2f6a88",
            "value": "8aa0cb2b00155a7e670923f0a9ac1061",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499162",
            "to_ids": true,
            "type": "sha1",
            "uuid": "50f3da38-ef70-498b-a827-63b21b3d6252",
            "value": "5e81ac7a438eb2dc4eea448abe01929f517329d7",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499162",
            "to_ids": true,
            "type": "sha256",
            "uuid": "1259aea7-f350-49c4-b0bb-975cd364f4d6",
            "value": "74078736a952d97523c5f9f10af5a1535942c508378b2fa45649e7435ae7070d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484196",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "6ab02f7b-a9a2-412f-9d8e-322fa27f88ef",
            "value": "49152:Ordz9tgjaWX1H9g3SzpLsrHgQ7co/KrUvpD6:8U1dgapHo/KrUvpG"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484196",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "90474c40-480b-4a36-b346-1e46d2ad7589",
            "value": "2677875"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484196",
            "to_ids": true,
            "type": "vhash",
            "uuid": "697d2a5a-8c7a-450a-9b44-ef4b56c66c3c",
            "value": "b9c15db6e6136ef16ca1d0f73df7af7e"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484196",
            "to_ids": true,
            "type": "filename",
            "uuid": "f953645d-a37a-432a-888f-4761c14ebfa4",
            "value": "74078736a952d97523c5f9f10af5a1535942c508378b2fa45649e7435ae7070d.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484196",
            "to_ids": false,
            "type": "text",
            "uuid": "ecde7b75-65ba-4f72-bf23-d17fc5b19b0c",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/66\nFirst Submission:2025-04-23T10:47:20.000000+00:00\nLast Submission:2025-04-23T10:47:20.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127482",
        "uuid": "27e843f0-616c-422e-8b85-9fe65fce7ced",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499164",
            "to_ids": true,
            "type": "md5",
            "uuid": "8fc4f045-6fb8-4d9e-b14c-a43bb8f3df48",
            "value": "2535bd9b97ce9d9ade52dbb4b2c747e7",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499164",
            "to_ids": true,
            "type": "sha1",
            "uuid": "3e1ee7e8-5542-487a-af3b-94822d009189",
            "value": "504b96408531f77dd38c07be1e0d12c4d6ea5ba0",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499164",
            "to_ids": true,
            "type": "sha256",
            "uuid": "910f8f29-5ded-4c06-8953-3f1ff80fb9c3",
            "value": "d51b1c730a421e7215d31294a2ea6fb57672b03d3cd5d49377e698c2aa0e106e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484217",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "09b03d93-d96e-49fb-bdf4-cd958558c0a5",
            "value": "49152:6JOwESr1faQkCjEWxeTMnzUDyQGTYS4f53GliybIHU6+uMHgQ7to/KrtMOQl:bwESBfgxWxeYWyJYS4BWliybPdo/Krtk"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484217",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "2aef1d33-ace8-4558-9b10-cc9738e48f4d",
            "value": "3009880"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484217",
            "to_ids": true,
            "type": "vhash",
            "uuid": "ebb1b210-8474-498d-8fd6-887b823b0755",
            "value": "81f7654535310308597ddd59f8b736af"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484217",
            "to_ids": true,
            "type": "filename",
            "uuid": "282240d5-e212-4fc9-b55a-eaa541485040",
            "value": "akoup35.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484217",
            "to_ids": false,
            "type": "text",
            "uuid": "37db881a-ed4f-4bcc-9c3f-6aa4c52037cd",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:29/66\nFirst Submission:2025-03-20T14:18:05.000000+00:00\nLast Submission:2025-03-20T14:18:05.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127503",
        "uuid": "bc89266b-a6e4-4210-b35d-3ff226780244",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499165",
            "to_ids": true,
            "type": "md5",
            "uuid": "b34c7ed8-0869-4eaa-8146-a973c87ea670",
            "value": "8fbf34f64e55f1ebf09f5755ec25281f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499165",
            "to_ids": true,
            "type": "sha1",
            "uuid": "74c12669-805c-4676-b4e5-89e30c52e40e",
            "value": "815ded6d94d08ca0e8c7ba8defefc5dad22647d4",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499165",
            "to_ids": true,
            "type": "sha256",
            "uuid": "c414086c-cde8-4d8c-bcb3-3da12c6a1791",
            "value": "808d90c2a28e7d2a59fb397753d49c6c94bf205d3bc83650a629e8d275ba2c7e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484239",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "db05e5ba-94a3-46eb-95f5-dd72fbdd6f88",
            "value": "98304:9CVtdIt6t+ok3l6bQfmKmp646dwtNa+9qlWc4+GyMAfkcqKo/KruBk+49:CHItRo+l6MfmjYW3qX4hajWkV9"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484239",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "3e8c16b3-104d-47d5-bcbd-07e9f4cac1d8",
            "value": "5831706"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484239",
            "to_ids": true,
            "type": "vhash",
            "uuid": "9e832902-d364-457a-8034-f9c2e588cc69",
            "value": "d412355e15773f6a32dc89aa179473b1"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484239",
            "to_ids": false,
            "type": "text",
            "uuid": "bf691030-97f6-4079-8df7-72c30edb831f",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/66\nFirst Submission:2025-03-09T00:23:45.000000+00:00\nLast Submission:2025-03-09T00:23:45.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127526",
        "uuid": "3096a285-47f7-4a3e-8b54-80512aef8465",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499166",
            "to_ids": true,
            "type": "md5",
            "uuid": "9d5ebe2d-9b5a-43c2-b0e7-73fecf6822d7",
            "value": "95b8778fb5156d62294664d80fdc6f0a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499166",
            "to_ids": true,
            "type": "sha1",
            "uuid": "8056f8b1-2ac4-4119-a3a7-14675bd84f1b",
            "value": "c75fc0f3ec1d4d06320d4c332ff8b945dcdb6a04",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499167",
            "to_ids": true,
            "type": "sha256",
            "uuid": "e6e7e8a7-a804-4f4a-b42a-4873bb77de07",
            "value": "3b6fd51a8cc47db2e892a2ac120aac0b126a84c3f781ba99758a8399dfad8b33",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484261",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "4c64baf4-f102-4fde-a3b6-1228b24c1c9a",
            "value": "49152:rfaVGJj0XeP5Mi4E2vYyTPSJ/Nuy62HgQ7Po/Kr0oKGu:TadOxMiP2vPbS/8eo/Kr0oKv"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484261",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "a71620ab-810a-46f2-9a35-6b134d074c32",
            "value": "2825262"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484261",
            "to_ids": true,
            "type": "vhash",
            "uuid": "1722a924-5250-4ce2-8d7b-cbff0b59bf21",
            "value": "1be96efe1563a9d80e787f6e109a7308"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484261",
            "to_ids": false,
            "type": "text",
            "uuid": "964d56aa-e0d8-45ee-abcd-91145df6e8a2",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:25/66\nFirst Submission:2025-06-23T11:55:44.000000+00:00\nLast Submission:2025-06-23T11:55:44.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127547",
        "uuid": "99b2c185-4b1f-4e3c-86ef-9a141cc94730",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499167",
            "to_ids": true,
            "type": "md5",
            "uuid": "617168e2-c043-4312-bbd9-9500f6a3dd0e",
            "value": "06c863c0b1ec1567e063c39f596a116a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499167",
            "to_ids": true,
            "type": "sha1",
            "uuid": "047ebdd0-91a8-4c54-9b84-62460c74f255",
            "value": "226c176699ea78eb7694e3c50522afc3aed40c19",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499167",
            "to_ids": true,
            "type": "sha256",
            "uuid": "0bbaee44-c9ab-4be2-9e21-4b1f88803077",
            "value": "4a2df816be01ced2696468130bcec29b364109a9e681c047f4cbbd704f41ee1f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484283",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "b58d99e5-bd73-41b9-9130-bc6d1cedcff6",
            "value": "49152:9unENJzj0XeP5M9YwNBsS6eoPQQxQwgYJwqHgQ7go/Kr0oKcq54BCi:0E8OxM9MxeYQ0QxYyBo/Kr0oKp54V"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484283",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "2420b36c-a5d9-4cb5-9388-519e0aa1b658",
            "value": "2849838"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484283",
            "to_ids": true,
            "type": "vhash",
            "uuid": "7ec803da-cb8f-4516-80de-b1c670297360",
            "value": "1be96efe1563a9d80e787f6e109a7308"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484283",
            "to_ids": false,
            "type": "text",
            "uuid": "79c2872b-75ee-4422-a6c6-bf9e8c46ffb0",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:27/66\nFirst Submission:2025-05-11T16:42:45.000000+00:00\nLast Submission:2025-06-25T05:09:30.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127569",
        "uuid": "75968521-1038-4ec1-abda-d163991ffe4f",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499169",
            "to_ids": true,
            "type": "md5",
            "uuid": "e573c5b8-e67e-48e1-b290-f3acc3fbdf94",
            "value": "bd2a426d46eb92cb13bc39686356a302",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499169",
            "to_ids": true,
            "type": "sha1",
            "uuid": "c740be5f-ebf0-4cf0-8beb-e85328025f39",
            "value": "935b5e3335edd3a7ec90d2e6e30ed889e2f21b88",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499169",
            "to_ids": true,
            "type": "sha256",
            "uuid": "19b0b821-a4d0-4a19-aae3-8aa954f3c10c",
            "value": "c55128a7df1b00e4b02f202f5e3b4aa5c7a0fabc4847e0dc1e76079a9207819f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484305",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "0a620a87-e5a0-4bdd-b7ff-2132b85a59da",
            "value": "98304:DTeqO11Wb+prf0repafoVGbwuDME/MyWU1oppGBzzsfMNdro/KrKjWW:DqqODW2eeMfXsuDMMSkopgBwWW"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484305",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "37f49158-e76d-44cf-9d27-ecba8558f703",
            "value": "5430523"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484305",
            "to_ids": true,
            "type": "vhash",
            "uuid": "ac7890c8-d57a-4652-97f2-86c516c3d14c",
            "value": "d412355e15773f6a32dc89aa179473b1"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484305",
            "to_ids": true,
            "type": "filename",
            "uuid": "4521d6a8-915d-49e9-a178-cd656ba0fe76",
            "value": "22147846_Messengerlite.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484305",
            "to_ids": false,
            "type": "text",
            "uuid": "4bcd0713-947b-4643-8e72-a7d73153fe5a",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:27/66\nFirst Submission:2025-05-16T15:53:22.000000+00:00\nLast Submission:2025-05-16T15:53:22.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127590",
        "uuid": "db20a5ca-ba0f-4595-a9c8-e4ab31e8e74d",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499170",
            "to_ids": true,
            "type": "md5",
            "uuid": "39ec0cc1-2347-45b4-9b29-e12c0396910c",
            "value": "5c7a1baa321e1206283ca85f84d67ffd",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499170",
            "to_ids": true,
            "type": "sha1",
            "uuid": "5b7bcd29-dd0f-44fa-a943-562927cbe825",
            "value": "6f0113950b829ff78790ae45f9a6270b422693b9",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499170",
            "to_ids": true,
            "type": "sha256",
            "uuid": "34f6b069-3b16-45cd-bc48-b9cc09b6b563",
            "value": "a7cc6684fc2dee91b26850667b569bb2a8dac638189c939103f9d83767fd9778",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484327",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "2edbbc93-c2a0-4e05-9610-59cc3e7de9b5",
            "value": "49152:5XX0EtcIcGP7O+PCZpk6Yh87rUf3HgQ7ro/KrmeENQrU:VOeq+Qpvukio/KrmeEQU"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484327",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "c4255ef1-1ee3-4a4d-a862-96dc070fae65",
            "value": "2710717"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484327",
            "to_ids": true,
            "type": "vhash",
            "uuid": "779079a8-6ab1-4349-9fe4-3ea19877d619",
            "value": "1be96efe1563a9d80e787f6e109a7308"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484327",
            "to_ids": true,
            "type": "filename",
            "uuid": "8445a6cd-079c-41b3-9f07-c1a1b3918b74",
            "value": "phwll8f1.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484327",
            "to_ids": false,
            "type": "text",
            "uuid": "766c4679-b97f-4f54-af74-e98b00c6b756",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/66\nFirst Submission:2025-06-06T05:15:12.000000+00:00\nLast Submission:2025-06-06T05:15:12.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127612",
        "uuid": "4b3a1dc3-5902-4c2e-92a8-1e1bd61a281b",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499171",
            "to_ids": true,
            "type": "md5",
            "uuid": "0283a423-91ed-462d-b78e-424e86ee670d",
            "value": "977cb63eb94772779bab8bbd0969f618",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499171",
            "to_ids": true,
            "type": "sha1",
            "uuid": "215b5b84-5f6a-41b0-a888-c132f4ba9aff",
            "value": "1f53bc8b2ccad16b935eaded0866946c2ab35094",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499172",
            "to_ids": true,
            "type": "sha256",
            "uuid": "e5de1a4b-da3e-445c-a402-8100f9a83e75",
            "value": "9eeb42eb8a73102c2ffb2f16bd6dcffb83e6f401a463942ace52ba36ebba4d66",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484349",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "ca1c67b8-145c-41d9-92f0-d173513660c1",
            "value": "49152:bTQGMsypiLIfwXU4eT46GvO9a6Ou88HgQ79o/KrSCkvpt:PsVH4U4O9zOYo/KrSCkxt"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484349",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "2ef7bbb9-2cbe-49fb-9e5e-26081d9cd4df",
            "value": "2661345"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484349",
            "to_ids": true,
            "type": "vhash",
            "uuid": "a2b85d3d-a6c4-4c55-a87d-ea3ed526eb88",
            "value": "1be96efe1563a9d80e787f6e109a7308"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484349",
            "to_ids": false,
            "type": "text",
            "uuid": "528f55e8-7a39-4b63-8cfe-e274d9523154",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:29/66\nFirst Submission:2025-06-23T13:36:59.000000+00:00\nLast Submission:2025-06-23T13:36:59.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127633",
        "uuid": "281a388d-847c-423d-9401-de271527a948",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499173",
            "to_ids": true,
            "type": "md5",
            "uuid": "a6e832a9-a46b-4428-b0b3-a11a5ceeec66",
            "value": "96e76ae096ac34ae09b15adfa166961f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499173",
            "to_ids": true,
            "type": "sha1",
            "uuid": "32c26992-5857-4af4-b0d7-4a277c2121c9",
            "value": "a042094141698ca496852dac96554304db79a1d6",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499173",
            "to_ids": true,
            "type": "sha256",
            "uuid": "da97ebf5-7ac2-423e-a13a-26b1d31b12f9",
            "value": "7cc431ba7c00de68adc18357696209e2ca3645f7ee52b319b778493a901e82e5",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484370",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "01764c5d-b85f-40f2-8a59-f830f402e1f1",
            "value": "49152:P5FZ33P2PXJw8mW5ZR7TGLHgQ7Zo/Kr6q81ShKQBqsb8MX:BMBZ7T+o/Kr6q84hdqsh"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484370",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "fffccbc9-06c2-42e7-8565-e17031813534",
            "value": "2824270"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484370",
            "to_ids": true,
            "type": "vhash",
            "uuid": "05dabcae-b724-4ab3-a251-fe44a6b2efbe",
            "value": "1be96efe1563a9d80e787f6e109a7308"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484370",
            "to_ids": true,
            "type": "filename",
            "uuid": "6cd820c6-f300-496a-9926-78379828c5b7",
            "value": "7cc431ba7c00de68adc18357696209e2ca3645f7ee52b319b778493a901e82e5.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484370",
            "to_ids": false,
            "type": "text",
            "uuid": "9335b921-1c6a-4412-88ce-23765a70c724",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:27/66\nFirst Submission:2025-07-19T09:33:42.000000+00:00\nLast Submission:2025-07-19T09:33:42.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127655",
        "uuid": "3637166d-dfd7-461d-8026-64bcdb634d56",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499174",
            "to_ids": true,
            "type": "md5",
            "uuid": "c487c7c2-ecd5-4832-8b0e-58b629840ce2",
            "value": "b8b07cbb4eaf1b8e5e52e2287a3afb91",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499174",
            "to_ids": true,
            "type": "sha1",
            "uuid": "a70f34e1-814e-4249-9579-dd35d8751307",
            "value": "877143b97e75d41d30f33e078f96ed3db3ed9250",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499174",
            "to_ids": true,
            "type": "sha256",
            "uuid": "85e02ddf-aa8f-4daf-aa7d-566d5f60e1f9",
            "value": "f34b5dc65f01446fe6fb6dd0fc2e9531eec195103282a797d58d3822bf953239",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484392",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "d48e8076-24a9-43b2-adfe-c9472e7c6b27",
            "value": "98304:7JbN7SkzRIXnQZpPRZpkAO6P3bRPlKTVV4YGEs4a9ulwUeTkK48o/Krcd6wrL:7Jc2Vnij6vK0Y/s7ul2416w3"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484392",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "16e78e99-8e06-42bb-9966-c39a9f59d65b",
            "value": "5938917"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484392",
            "to_ids": true,
            "type": "vhash",
            "uuid": "9765630b-65bc-4c29-98b1-dea778b29996",
            "value": "d412355e15773f6a32dc89aa179473b1"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  23/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484392",
            "to_ids": false,
            "type": "text",
            "uuid": "ac288dfe-abfc-4068-8da4-44e320d5af5c",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/66\nFirst Submission:2025-06-28T13:25:28.000000+00:00\nLast Submission:2025-06-28T13:25:28.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127676",
        "uuid": "ed709e43-674f-4585-b4b1-b9c5590916db",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499175",
            "to_ids": true,
            "type": "md5",
            "uuid": "dd094aeb-c4a2-48cb-b8c8-29a4dc968d31",
            "value": "9a6eba81dc47427afa573b8ff290bff0",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499176",
            "to_ids": true,
            "type": "sha1",
            "uuid": "c4668854-2632-4e91-8b0a-445d3f1de1b1",
            "value": "d322aaeaface59bc0ee324d018c5d34a976075f7",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499176",
            "to_ids": true,
            "type": "sha256",
            "uuid": "9b78f872-3c78-4333-9abb-11bffdb678b4",
            "value": "8e150d0186dbda8b4149f795afa10847018fa60dd92e7776cc2aab7ecc885e36",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484414",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "3640f519-d83a-4494-a1f1-87e89a0a9e7c",
            "value": "49152:sJS22YoXjAhXjBkqhQJFyoeOHgQ7Yo/Kr6q8wphKQBq+bze5:MOYoXkhXjBFQrz2o/Kr6q8ehdq+Pe5"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484414",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "5b1675b2-8245-4c5b-9cd9-7dcb2cbb95f9",
            "value": "2828366"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484414",
            "to_ids": true,
            "type": "vhash",
            "uuid": "91e8e910-8076-4b58-9c65-870e6280ecd3",
            "value": "1be96efe1563a9d80e787f6e109a7308"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484414",
            "to_ids": true,
            "type": "filename",
            "uuid": "f2b539d7-9d43-4b56-b88f-a444908cf147",
            "value": "Beamngdrive.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484414",
            "to_ids": false,
            "type": "text",
            "uuid": "58640295-2e19-4edd-8dca-d750fa3c86dc",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:24/66\nFirst Submission:2025-03-29T07:08:41.000000+00:00\nLast Submission:2025-03-29T07:08:41.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127698",
        "uuid": "4ed64503-5da6-4ee3-8d7b-e9fbf7bc3b93",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499177",
            "to_ids": true,
            "type": "md5",
            "uuid": "735982f8-b76c-44cb-96cf-2fe631679519",
            "value": "3fe62c901b74d199840484b349eecab9",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499177",
            "to_ids": true,
            "type": "sha1",
            "uuid": "c28e797f-0cb6-45d3-8d02-1fcefc5b8d1e",
            "value": "8f27ec81370aad60f1ddf42c456ab7e1e7f22d1d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499177",
            "to_ids": true,
            "type": "sha256",
            "uuid": "0b4aa287-d08f-473f-a17b-1077cb0c3b7d",
            "value": "8796fbef9879d17285c613b1961ff4d8fd5090da33cf32ee9d1ed3b81418fad6",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484436",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "bf079469-5709-4905-ac3e-9506404f039b",
            "value": "49152:v80K1sypiNKP3Toij84kNqR7JDMqqHgQ7yo/KruaH2r:U9w43Hj8dm7JVo/KruaHc"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484436",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "260d346d-cc28-4e1f-9da7-d69ec9f2adda",
            "value": "2648975"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484436",
            "to_ids": true,
            "type": "vhash",
            "uuid": "0e736e08-26b1-4318-aed1-a90d7969edd8",
            "value": "b9c15db6e6136ef16ca1d0f73df7af7e"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484436",
            "to_ids": false,
            "type": "text",
            "uuid": "a1df78b4-6092-45d2-a19a-1ad9a986250b",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:26/66\nFirst Submission:2025-06-22T19:00:29.000000+00:00\nLast Submission:2025-06-22T19:00:29.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127719",
        "uuid": "f0399d76-97e3-4910-ac5e-b6b4d4b3d0ca",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499178",
            "to_ids": true,
            "type": "md5",
            "uuid": "ff968aa0-a268-4a1e-934c-047a78f974f2",
            "value": "1e017f45212e16641a0af7e380ad2ec9",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499178",
            "to_ids": true,
            "type": "sha1",
            "uuid": "88e199c8-3cbe-4187-b0f2-0ae5ea5d2025",
            "value": "34f82a5a082898f55c3c603552017913d8cab7a8",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499179",
            "to_ids": true,
            "type": "sha256",
            "uuid": "bf47b5bd-1d8e-4fc9-bb33-e2ea44f43654",
            "value": "eb4ea8264b83565299a85310bccac510759d1b02dbbebd579119f036b0a4d269",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484457",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "04973f05-1695-443e-b1e3-4065a2d9a244",
            "value": "49152:D9pNeL20GrSLT/iFDhiwL24sCbW99WK3pBBHgQ70o/KrSCkJr:LNBUf/WLe933pCo/KrSCkJ"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484457",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "59e9b7e3-13e5-4fcd-b425-41fb18af42e6",
            "value": "3324897"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484457",
            "to_ids": true,
            "type": "vhash",
            "uuid": "e0bbe97d-0106-401a-8335-f0fb049633ea",
            "value": "b9c15db6e6136ef16ca1d0f73df7af7e"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484457",
            "to_ids": true,
            "type": "filename",
            "uuid": "5fd6e132-0eb2-49ae-b3c0-4bfe7f9942a4",
            "value": "5ghhygunb.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484457",
            "to_ids": false,
            "type": "text",
            "uuid": "b6f1bc52-9413-4450-9a52-c5e91dfbb066",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:29/66\nFirst Submission:2025-06-22T03:57:32.000000+00:00\nLast Submission:2025-06-22T03:57:32.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127741",
        "uuid": "28aa318c-e6ca-41dc-b090-0331e2219376",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499179",
            "to_ids": true,
            "type": "md5",
            "uuid": "a5edcde4-01fb-44c2-b132-ec43024e3fb7",
            "value": "017ea031573137abd6625eca9ba83580",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499179",
            "to_ids": true,
            "type": "sha1",
            "uuid": "7d1e9d65-ab19-4bc6-8011-bda4f57956ef",
            "value": "7fa0571658c8165a2c9a4cd591ad403d21596dd6",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499179",
            "to_ids": true,
            "type": "sha256",
            "uuid": "b1383573-0f5b-4b47-8317-993e9767cea1",
            "value": "522be7abac397a14e7228d6c8e3beb65a5aa6ab976f0bd99f66273c4d1a75d83",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484479",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "65072400-d714-4805-8d2f-0196f5646c24",
            "value": "49152:xtWe3W56A7nkgWATgkvhOTypyC7axEwgQ2do/KrAavPDa6f1mL/01:DVQ6AzkgdTxhrw98o/KrAavPB1mL/01"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484479",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "4d6c4907-c0fa-4908-81fb-5fc57bde6038",
            "value": "3100400"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484479",
            "to_ids": true,
            "type": "vhash",
            "uuid": "a7f4f4b6-2495-4578-89bf-c2ceee770dc3",
            "value": "fdb1c64322fafad4be3f9a665dc32725"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484479",
            "to_ids": true,
            "type": "filename",
            "uuid": "6b8c5195-73d5-4eca-b645-a573657b0b57",
            "value": "Blondelittlesistersleeprape.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484479",
            "to_ids": false,
            "type": "text",
            "uuid": "069c15fc-a941-4972-bab1-055164536f64",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:26/66\nFirst Submission:2025-05-17T11:34:27.000000+00:00\nLast Submission:2025-05-17T11:34:27.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127763",
        "uuid": "0ab83303-0e5e-4fa6-a358-ad625aecb0fd",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499181",
            "to_ids": true,
            "type": "md5",
            "uuid": "2399f95b-410d-4ebc-acb2-6ca91b9c4a48",
            "value": "e2b51176a5b39b3b1a8485dbbfe4f322",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499181",
            "to_ids": true,
            "type": "sha1",
            "uuid": "24f41f04-8eb3-4e24-bcb8-9e9b7021c1ac",
            "value": "6e34619814fe0a8a1ef85cf8cbb07e9b7b231baf",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499181",
            "to_ids": true,
            "type": "sha256",
            "uuid": "0ad410ed-db50-4ea5-b4bf-975a2681f4b8",
            "value": "29bbbe85dc183a845334eb2b4bc7a9df658a3831781a8bd198e56566290da80d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484500",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "efb1e914-58cf-4ab0-8978-9fdede8425fb",
            "value": "49152:l67HiAHlzbRa+jUhiTHgQ7ao/Kr6q83qhKQBqwbf:YeA5bRa/hvo/Kr6q86hdqwb"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484500",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "acb50c87-542a-44c0-9509-152969bfe5c8",
            "value": "2824270"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484500",
            "to_ids": true,
            "type": "vhash",
            "uuid": "857e31f7-f535-4c53-9413-71b44623beff",
            "value": "1be96efe1563a9d80e787f6e109a7308"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484500",
            "to_ids": true,
            "type": "filename",
            "uuid": "03b90555-18a2-42f9-83d6-557d9b10cdb6",
            "value": "29bbbe85dc183a845334eb2b4bc7a9df658a3831781a8bd198e56566290da80d.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484500",
            "to_ids": false,
            "type": "text",
            "uuid": "e008dd76-6800-4fb9-87af-86d66259c906",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:29/66\nFirst Submission:2025-07-19T08:08:55.000000+00:00\nLast Submission:2025-07-19T08:08:55.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127784",
        "uuid": "5563920e-251c-45f2-a6bc-2f1a34c35119",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499182",
            "to_ids": true,
            "type": "md5",
            "uuid": "ddbf963f-dfdd-47a6-a0aa-aa6c349cf677",
            "value": "4c706f4ae96cf1bb4e6c5b321844baee",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499182",
            "to_ids": true,
            "type": "sha1",
            "uuid": "5196cf8a-e64c-437c-8426-00031652d6ff",
            "value": "a558125aeeb2979281ed57054ee7213b4fc7e162",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499182",
            "to_ids": true,
            "type": "sha256",
            "uuid": "73e05c6f-6167-4d1f-8558-f9993992ef25",
            "value": "6f28a42986717e346f6f057567645b4804227fc65c3424ca016d79355b83aac2",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484523",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "880a2a0f-c9ef-49f7-84eb-689ca8af032d",
            "value": "49152:4Cr5ztVwTZvkC3hHyS/wgQ2Ko/KrySYDIJd7:dtwd3lbgo/KrySYDIJd7"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484523",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "2c083ae8-8f3b-4a2e-bb07-873a46e2f6dc",
            "value": "2690869"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484523",
            "to_ids": true,
            "type": "vhash",
            "uuid": "b16e0ff3-ff57-42dc-bda0-6c1f651a436f",
            "value": "fdb1c64322fafad4be3f9a665dc32725"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484523",
            "to_ids": true,
            "type": "filename",
            "uuid": "4839c659-b49a-4511-8ee6-600fdb0a80a3",
            "value": "Slovenclassmate.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  21/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484523",
            "to_ids": false,
            "type": "text",
            "uuid": "620a8cf5-fd40-4224-a84c-23eeb6d235fe",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:23/66\nFirst Submission:2025-05-17T02:44:02.000000+00:00\nLast Submission:2025-05-17T02:44:02.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127806",
        "uuid": "57be18cc-4c7c-4505-9a30-43bc19ec7e87",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499183",
            "to_ids": true,
            "type": "md5",
            "uuid": "525ce408-34c9-41c5-b2fa-164bac10919c",
            "value": "45f1043a6d05400e6dde6c932291b035",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499183",
            "to_ids": true,
            "type": "sha1",
            "uuid": "286333be-56a1-43da-a14e-36ca9c08d78b",
            "value": "cf3ae1805a16445c02e2bb1f55a7519ebb1650fa",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499184",
            "to_ids": true,
            "type": "sha256",
            "uuid": "8f002aa5-50a5-48d2-a2e1-e350f6ae863a",
            "value": "d522b41bd12b66e9162cd89d783aaa3afcd1de26ec3a882081ea4f6be052842e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484545",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "4e34d2ca-9799-483c-ae30-9a91b8d80659",
            "value": "49152:1o6/zsxLKPSxbNBr5w57Uzn5LwlHgQ7Uo/KrYvKLpRJ:iacKKxrrW5en5Po/KrYvKdRJ"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484545",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "583d5f0d-fc34-4b07-ad12-600c06660b05",
            "value": "2706396"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484545",
            "to_ids": true,
            "type": "vhash",
            "uuid": "1107f469-4c76-44be-8bb7-b4f28e92836e",
            "value": "b9c15db6e6136ef16ca1d0f73df7af7e"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484545",
            "to_ids": true,
            "type": "filename",
            "uuid": "63d73a60-98ce-4318-86ab-ddefa1399a21",
            "value": "Girllife.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484545",
            "to_ids": false,
            "type": "text",
            "uuid": "69e57bf9-3e6c-46d0-b7d2-929e50aa09b9",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:30/66\nFirst Submission:2025-07-21T14:08:47.000000+00:00\nLast Submission:2025-07-21T14:08:47.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127828",
        "uuid": "630e0ce8-4f79-4127-9755-8f4cca17ecb5",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499185",
            "to_ids": true,
            "type": "md5",
            "uuid": "04f133aa-99ab-4f6f-a793-bd2649eeb733",
            "value": "01edce45317ef4e51a3da5c41a73959d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499185",
            "to_ids": true,
            "type": "sha1",
            "uuid": "6ff9388d-e2db-45b9-aab0-a45fca7b2933",
            "value": "a310f9d994a51b9e742bcb9c86660527b62b3000",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499185",
            "to_ids": true,
            "type": "sha256",
            "uuid": "b7655f6f-03ab-4ac3-a2ff-1d137002e225",
            "value": "58849eb6fca4df602e9eeff9f19a85ab287028ea19d75a0d7105343bb24e7f92",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484567",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "a3729274-5136-4ed9-a0ba-05032f2fa77b",
            "value": "49152:AgpW+PMC6wJXyQCEbXq8cnjHgQ7Po/Kr6q8SfHT128b:nxP4MXyQC2Jyo/Kr6q8qHT128b"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484567",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "6f932948-c593-4ebd-91c9-1ec0fc46211b",
            "value": "2873422"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484567",
            "to_ids": true,
            "type": "vhash",
            "uuid": "1c9367bb-9da0-4d1c-a6c5-678dc908a79d",
            "value": "1be96efe1563a9d80e787f6e109a7308"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484567",
            "to_ids": false,
            "type": "text",
            "uuid": "cdfc9905-8042-41bb-a252-8e2d0bb979cc",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/66\nFirst Submission:2025-06-02T18:50:29.000000+00:00\nLast Submission:2025-06-02T18:50:29.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127849",
        "uuid": "a21cf682-3266-45b3-a7cc-aadc06434bf2",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499186",
            "to_ids": true,
            "type": "md5",
            "uuid": "51b3864b-3eef-48c1-9957-601369b1644c",
            "value": "c7d5ede439d92c4449adcf21cc9032e0",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499187",
            "to_ids": true,
            "type": "sha1",
            "uuid": "2a84817c-cd87-4656-a1f8-2114260d0cd2",
            "value": "eccb06b385a982351235a4abcc06b21fb9332237",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499187",
            "to_ids": true,
            "type": "sha256",
            "uuid": "f68a79e5-a48d-4246-855e-8ff22a99e5a4",
            "value": "feb52c0055c21c72f0496ac04469b48a927ca489c8801f3fd3138b4a7b978612",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484589",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "2f153503-4404-4a33-95bf-97f05a61ad25",
            "value": "49152:Fe0V8rxvgEOIlF4KBeXP5eQn8THgQ7oo/KrUPoEtdIgi:4rQIsmeRnvo/KrUPocIgi"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484589",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "c8609ffe-6a73-46d9-b486-41a6d2a0e269",
            "value": "2816078"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484589",
            "to_ids": true,
            "type": "vhash",
            "uuid": "93e305ca-74d6-45e7-9217-18ed2818d68d",
            "value": "1be96efe1563a9d80e787f6e109a7308"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484589",
            "to_ids": true,
            "type": "filename",
            "uuid": "bf1f69f0-e296-44e2-88b2-630256ea91e7",
            "value": "agusxbv.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  21/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484589",
            "to_ids": false,
            "type": "text",
            "uuid": "11d7ffc4-6249-4633-aa9a-74cf9502161a",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:19/66\nFirst Submission:2025-03-31T11:06:26.000000+00:00\nLast Submission:2025-03-31T11:06:26.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127871",
        "uuid": "d7f9dd26-b91e-4edd-90a0-90fdc7ad8fb6",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499188",
            "to_ids": true,
            "type": "md5",
            "uuid": "bc980ba5-2f31-48b2-8ae8-9f3d1663adac",
            "value": "e57366a3a1ed05a1de6246cc8cd9b9f0",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499188",
            "to_ids": true,
            "type": "sha1",
            "uuid": "3c47273b-88d6-4271-a946-039db4f400ea",
            "value": "fcb55c4739bc74d7622124fdb0e9f7ba49483c32",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499188",
            "to_ids": true,
            "type": "sha256",
            "uuid": "44148bb0-e5a7-4ae2-a71f-b4e4676f0339",
            "value": "5bc95ea24ba9fc5d0ed3b48fe1a7bafffcbaa893f7052d9b8683ea75091e3f5a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484611",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "f74d94f9-dcc9-4ff3-a5c4-bd02006c1116",
            "value": "49152:gta3dyUImUKYrYdy/xM2HzownV/5FC386HgQ7Co/Kr6q82EVk:t3dpsrYdyJ1zzV5AGo/Kr6q8xVk"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484611",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "d51d986c-a88f-4ed4-ba01-1cc95a9b10e9",
            "value": "3201102"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484611",
            "to_ids": true,
            "type": "vhash",
            "uuid": "7cdb5b14-dc05-41d6-a2e3-9e3296fe510f",
            "value": "1be96efe1563a9d80e787f6e109a7308"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484611",
            "to_ids": true,
            "type": "filename",
            "uuid": "7fd80ec6-0011-433c-aec8-d59491273010",
            "value": "m3avbhm.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484611",
            "to_ids": false,
            "type": "text",
            "uuid": "98359482-33ff-4f51-bf92-51d8fc943a8a",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:26/66\nFirst Submission:2025-11-21T07:41:28.000000+00:00\nLast Submission:2025-11-21T07:41:28.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127893",
        "uuid": "fecb43dc-67be-4986-90ea-ba2b38215334",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499189",
            "to_ids": true,
            "type": "md5",
            "uuid": "631e2550-bb91-4265-91d2-74e0f57f05dd",
            "value": "3f1daf3943a19522b90d4088da481f76",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499189",
            "to_ids": true,
            "type": "sha1",
            "uuid": "e50e9edc-4b8c-46f8-9731-c6562b22b453",
            "value": "f82f830f49e0285b3cbbe193390d754f12acb8ad",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499189",
            "to_ids": true,
            "type": "sha256",
            "uuid": "f981a90e-926c-4aa8-afa7-f32ea3f48859",
            "value": "06b7b10e5313fa27e1fbc43c76042c121d5ba19becf2376f292f7dc126644973",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484632",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "072bbfc3-a9a2-44b0-9c29-a8b31d3a1307",
            "value": "49152:tdgM6qp68vNEwB+I9WaTq6fzHgQ7Eo/KrGR3jWeG:zcqp68vNE/I9WHdo/KrGR3jS"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484632",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "cfb756ae-932f-483d-8b3b-ae8488c068a0",
            "value": "2632823"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484632",
            "to_ids": true,
            "type": "vhash",
            "uuid": "007af965-9559-4a66-bf93-1c8be7c7f34d",
            "value": "1be96efe1563a9d80e787f6e109a7308"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484632",
            "to_ids": false,
            "type": "text",
            "uuid": "22f4ffee-f0cb-4992-a809-76eb25204cf6",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:29/66\nFirst Submission:2025-06-22T18:50:18.000000+00:00\nLast Submission:2025-06-22T18:50:18.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127914",
        "uuid": "edbb1a06-51aa-4873-9fb9-d6fa1eece1d8",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499191",
            "to_ids": true,
            "type": "md5",
            "uuid": "5ed71761-d0bf-4daa-8008-91999a0d0add",
            "value": "8ac5b4c2ade5ead9f082bb6b718af6a4",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499191",
            "to_ids": true,
            "type": "sha1",
            "uuid": "01c536ab-dbc0-4d37-bb69-7a48d64ff51d",
            "value": "7ae6dd0d86101b7497e9c0df7c81a94eb974d997",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499191",
            "to_ids": true,
            "type": "sha256",
            "uuid": "e5761661-67e0-4d46-bcb4-87992e7106bb",
            "value": "a37db93af80af1762ccf052e881a2e6b47c97b438e79f8b477f8def5c265fe2c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484654",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "3c494f04-99ad-422d-a88a-bd80504b3d6a",
            "value": "98304:7doxxF2KmZj6O8qrXiwpElc9WqchOAwxsSCruro/Kr9roboU:5o66Yr0l0Wqcc6ruLo3"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484654",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "dde02715-9f9e-48d4-b20b-93d78dfd96df",
            "value": "5226640"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484654",
            "to_ids": true,
            "type": "vhash",
            "uuid": "bd2b7f96-3d0e-4377-924d-ec0c8ab3b4c9",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484654",
            "to_ids": true,
            "type": "filename",
            "uuid": "24b9fba3-b4e1-47fa-9021-c15ceb788389",
            "value": "5pomx2z.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484654",
            "to_ids": false,
            "type": "text",
            "uuid": "c2e2d7f5-52d1-4163-8bcf-383d9afc51ad",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:27/66\nFirst Submission:2025-09-03T06:31:39.000000+00:00\nLast Submission:2025-09-03T06:31:39.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127936",
        "uuid": "687130f2-a145-4ddc-b975-2742b2ab1b08",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499191",
            "to_ids": true,
            "type": "md5",
            "uuid": "51b6e33c-58b3-4620-9c7f-93067a35cb46",
            "value": "fc2e35fffbd64929ccd5a65dac469e4c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499192",
            "to_ids": true,
            "type": "sha1",
            "uuid": "010fd3b5-f6fe-491e-a8e8-7c2440ec240a",
            "value": "7922399ca147cc01a9b2394997f3ae3a52c6e806",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499192",
            "to_ids": true,
            "type": "sha256",
            "uuid": "59e9d10a-72bc-4862-b58f-e2d91c23938a",
            "value": "78e93ae5c8d296fcb61a88b281925ff3a4c8d049c44495bd6f289990023e3441",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484676",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "676b9e8b-afec-4e69-8efa-7562a5f5f612",
            "value": "98304:nSkELyiIObT6ZrEO1cbCqitfVJ+BsAMo/Kr9nnq:n8Ly26EO1cJiTJ+BsXnq"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484676",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "3413a52f-0af7-4b98-b03e-a4068060a560",
            "value": "4739216"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484676",
            "to_ids": true,
            "type": "vhash",
            "uuid": "c988df8d-e522-48ed-bebe-a9e9b9af3d17",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484676",
            "to_ids": true,
            "type": "filename",
            "uuid": "d51b1568-0d15-4287-90fb-84619bd64c88",
            "value": "Deepsleep2.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484676",
            "to_ids": false,
            "type": "text",
            "uuid": "3945e862-474a-46ed-a46e-b394fe40c596",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:27/66\nFirst Submission:2025-07-20T11:55:17.000000+00:00\nLast Submission:2025-07-20T11:55:17.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127957",
        "uuid": "4e5e325c-8bbf-457a-b3d6-58b025b599fe",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499193",
            "to_ids": true,
            "type": "md5",
            "uuid": "bd30a1b5-5825-491e-8f9f-921c6fd008bd",
            "value": "ea6d52c41e4d76b815d4a9331328992c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499193",
            "to_ids": true,
            "type": "sha1",
            "uuid": "d1d8dca9-161b-45ec-84f5-8a9001df9afd",
            "value": "10527a434916f73e81c536aa4d70f15befe8120b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499193",
            "to_ids": true,
            "type": "sha256",
            "uuid": "ebc8300c-3635-4001-9a56-48451ec74e10",
            "value": "5e23073afc425af73ae9e255b7edc403d6ef6c37a03258557900337609252f6c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484698",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "8a11ca73-4bdf-4d6e-b60c-21042e052dd1",
            "value": "98304:ej/r9Cf8tU8a4aaxTLVrTBkbUfbA6B8o/Kr9v2kb:6wfVRruLViT2kb"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484698",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "366a0e84-8a4f-4524-9342-afa56cd769be",
            "value": "4661392"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484698",
            "to_ids": true,
            "type": "vhash",
            "uuid": "cf17ce6b-8fad-43ae-be48-5d4bb5ed713c",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484698",
            "to_ids": true,
            "type": "filename",
            "uuid": "cc2d2dea-a872-4376-a402-2fbadd7cc21e",
            "value": "on4ho.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484698",
            "to_ids": false,
            "type": "text",
            "uuid": "b47cbca3-f5db-4386-9ebd-21fac69083b4",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/66\nFirst Submission:2025-10-04T12:16:07.000000+00:00\nLast Submission:2025-10-04T12:16:07.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780127979",
        "uuid": "9705c804-9d12-473a-a8f3-010611ecb54e",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499194",
            "to_ids": true,
            "type": "md5",
            "uuid": "48916a24-46d2-4206-89e0-522d224d15c7",
            "value": "f1cfcd135fe4eccac5cad53254afd72a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499194",
            "to_ids": true,
            "type": "sha1",
            "uuid": "7a38978c-2471-4436-8dac-321f29748ddc",
            "value": "d92d985f00aa6b936c320e31efd8f02acfc04bb1",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499194",
            "to_ids": true,
            "type": "sha256",
            "uuid": "ae90890c-e68b-4264-b3ef-38c7b2b14a22",
            "value": "ec38e07d4f10b6eb9407a9007ceb070fd97fcdea1a27186489f6677820c96478",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484719",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "b86e6602-c398-4d9d-bb39-8da26e12963b",
            "value": "98304:ISkELyBxObT6ZCxq2i4wdo+iXrdrTsTvQX0Meo/Kr9nRx:I8Ly2zxq2ie+iXJnKvi0bRx"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484719",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "c289179c-2ba7-4499-86db-ff07bfa57a10",
            "value": "4739216"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484719",
            "to_ids": true,
            "type": "vhash",
            "uuid": "3135d0ed-2fbc-4f6a-a77a-433ea57afb54",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484719",
            "to_ids": true,
            "type": "filename",
            "uuid": "ec99c5bc-7539-45aa-a0f5-ec0fce2c68f5",
            "value": "lgwvw.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484719",
            "to_ids": false,
            "type": "text",
            "uuid": "005d0404-4f0e-4315-980f-38ac53ab82ff",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:27/66\nFirst Submission:2025-08-13T11:48:45.000000+00:00\nLast Submission:2025-08-13T11:48:45.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128000",
        "uuid": "eb70db93-8fce-40ba-b457-ecd9fece2c8a",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499196",
            "to_ids": true,
            "type": "md5",
            "uuid": "af459a4b-1879-43fc-8879-b8babdf72fc6",
            "value": "901a950b4515935a44110922b9a8d319",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499196",
            "to_ids": true,
            "type": "sha1",
            "uuid": "3d2cddbd-d746-4b2d-ac95-14ff35b47872",
            "value": "339ad87e70b5e829be47dd6b0989f320b9b6993b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499196",
            "to_ids": true,
            "type": "sha256",
            "uuid": "0a400be8-1829-4628-8a34-b750ff4c9c52",
            "value": "84dd9582302b1b908be001bc36478402a877437be3aba83a4b4e2b2c966c9057",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484741",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "f2ff99b3-a619-4c82-b345-3582f4b4d835",
            "value": "98304:RJ5qzQeT/DiE9qx2aW2nd8DE+7isxSFsHn+io/Kr9XCx:RJsz5T+E9qx2g8Dv7bS6H+MCx"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484741",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "a5cc0ab7-f4ae-402b-b6f3-ec96debb9638",
            "value": "5308560"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484741",
            "to_ids": true,
            "type": "vhash",
            "uuid": "ae995864-08ad-4e74-871a-979e29183673",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484741",
            "to_ids": true,
            "type": "filename",
            "uuid": "db89db94-326d-4aa2-af54-671d23877fbf",
            "value": "Touchbatgame.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484741",
            "to_ids": false,
            "type": "text",
            "uuid": "ad31901b-2e05-4f5f-ad9a-c53af1d95411",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/66\nFirst Submission:2025-08-27T05:51:17.000000+00:00\nLast Submission:2025-08-27T05:51:17.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128022",
        "uuid": "60966b59-127f-42fc-992a-c0a742315311",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499197",
            "to_ids": true,
            "type": "md5",
            "uuid": "b81de55a-7624-4fc9-8b8a-e0c3679ae349",
            "value": "207f339afa4d246f089bb132900d72ff",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499197",
            "to_ids": true,
            "type": "sha1",
            "uuid": "aabdd4d8-4af5-4ba7-a6db-a3f61d612442",
            "value": "c3f4e0e5e9de9fa0b315b0d0b69a3ea83c19e046",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499197",
            "to_ids": true,
            "type": "sha256",
            "uuid": "40bc698e-1df0-4308-b5de-e9089483e4e2",
            "value": "e1b8fc30b365f538ea86b425a0ef0850b0f405ae24913f8cce92df74f47289f5",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484763",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "b653d595-be92-407c-b1cf-e4f46961e44b",
            "value": "98304:iJV1mlMawjokMYAeAVgj9tnKUaqPTSGeSofgnrYMo/Kr9X6A7:iJLmyPokcVgX4SSGTnx6+"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484763",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "0a106a78-d2f5-4f25-abba-965bc84e0338",
            "value": "5324944"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484763",
            "to_ids": true,
            "type": "vhash",
            "uuid": "7b303fee-8597-4877-9f9c-e5ae5aaad7d9",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484763",
            "to_ids": true,
            "type": "filename",
            "uuid": "da8ebcca-c29c-4252-9de7-9c8028a8036d",
            "value": "bsgu0362d.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484763",
            "to_ids": false,
            "type": "text",
            "uuid": "70e99496-319d-425f-a889-bb1a580670d9",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:29/66\nFirst Submission:2025-09-14T01:51:16.000000+00:00\nLast Submission:2025-09-14T01:51:16.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128043",
        "uuid": "2d0e7792-c7a1-4512-bfd9-3baa122ed94d",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499199",
            "to_ids": true,
            "type": "md5",
            "uuid": "28ce1149-5679-4db2-b19d-6d4aeabdad90",
            "value": "8d9c4d790120dcacfbe85810dad12172",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499199",
            "to_ids": true,
            "type": "sha1",
            "uuid": "0fbd56e5-9f41-4d07-9c0d-7d7739d2b8af",
            "value": "ff4af6f730f82288157ecbf65f7a9d2244e4e56d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499199",
            "to_ids": true,
            "type": "sha256",
            "uuid": "b8237d40-183a-4396-b858-67df07bddc13",
            "value": "3b429c895afbab479591807ceec509889c4bad332cb93dd3288e51e94845d555",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484785",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "99bee5a5-dedc-4610-96f9-a269ab41a8b9",
            "value": "98304:uNTwkhQC8dwCuZa81GqLFGhgo/Kr9D5YM:y+nqa81xFGhm5R"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484785",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "264e0a66-a41e-4432-a41c-928e5030dd8c",
            "value": "3690419"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484785",
            "to_ids": true,
            "type": "vhash",
            "uuid": "5de7da86-d4bc-467c-a3d5-d6b198912a8a",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484785",
            "to_ids": true,
            "type": "filename",
            "uuid": "eaab28ea-5993-4674-a791-80fca3ade103",
            "value": "g9qtf.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484785",
            "to_ids": false,
            "type": "text",
            "uuid": "fcd3d079-e9c6-4767-a822-5aaec2c0de0b",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:29/66\nFirst Submission:2025-11-04T07:19:02.000000+00:00\nLast Submission:2025-11-04T07:19:02.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128065",
        "uuid": "8250cb56-4f90-4f9d-ade2-ff120c5cc18e",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499200",
            "to_ids": true,
            "type": "md5",
            "uuid": "d7fe6e06-f69e-45ad-a17d-8a4481c01068",
            "value": "bd9cd5ed898c7aab9e18d4952c97ccb3",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499200",
            "to_ids": true,
            "type": "sha1",
            "uuid": "236940df-294f-4e6f-9e4b-62e48b24120f",
            "value": "6287bfd7dbbe941f207f93f5ed2a5374e01fe79d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499200",
            "to_ids": true,
            "type": "sha256",
            "uuid": "52565f6e-c1a4-48fa-bb33-f86364f168d5",
            "value": "38e0625c8a6042e3b47db1fb9eb271366c0e3c6c7e038825d9002761196fb876",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484807",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "f767c1cd-f141-437a-b391-2a69e2131e9b",
            "value": "98304:JoUQz5XkupC2ChAdithpDdcHA25VMnLugE8kQIgo/Kr9bPCK6:JOJc2CvDdcHA2WSOIOPa"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484807",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "2445b6f7-1032-4c83-9dc4-d729a833c527",
            "value": "4747408"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484807",
            "to_ids": true,
            "type": "vhash",
            "uuid": "786f8d36-cf03-4e72-97c6-dcac055059ac",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484807",
            "to_ids": true,
            "type": "filename",
            "uuid": "a8a6d91c-9310-42ff-8ca0-0c8b2bd2f299",
            "value": "bi0oatuz3.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484807",
            "to_ids": false,
            "type": "text",
            "uuid": "e0ac1ff3-ee5b-4622-ab91-c7c6056a24eb",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:26/66\nFirst Submission:2025-09-04T09:05:35.000000+00:00\nLast Submission:2025-09-04T09:07:22.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128087",
        "uuid": "5fdf4fe8-76f5-426c-8e5d-5c5bc33551f0",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499202",
            "to_ids": true,
            "type": "md5",
            "uuid": "991fe101-c671-45e8-bcae-825e6f0f036b",
            "value": "81798ca53cb16a5125c78fde5f02423c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499202",
            "to_ids": true,
            "type": "sha1",
            "uuid": "91bab8fc-8cfd-4596-a410-9f578f878b47",
            "value": "b7c64f1e8f6093490b0657d429a5d76d695e69ed",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499202",
            "to_ids": true,
            "type": "sha256",
            "uuid": "b6c6d430-c3f5-499d-bda9-b2c33298fc24",
            "value": "25219ac0d2a8fb9d229adc338a44ae799eb83d627b5adcc8ea720924c712ba50",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484828",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "4a254b0b-72c2-4ab3-8886-8177c53c5021",
            "value": "49152:FEOAi0zsXtk4gCVrqJCbWH4zBPCauT9naUIrNz/aGIaHutCSpd7ko/Kr9XnhXCFv:PAD14/rhzBPCaup/IiGjPo/Kr9XFCFv"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484828",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "748d0a36-fb1a-4654-89d7-f22f52f34adb",
            "value": "3878835"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484828",
            "to_ids": true,
            "type": "vhash",
            "uuid": "8bb43ae2-9bbb-40b3-a5af-7f1a370492dc",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484828",
            "to_ids": true,
            "type": "filename",
            "uuid": "f1a602ed-fee3-4aef-8446-88413342e78a",
            "value": "f8fpn.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484828",
            "to_ids": false,
            "type": "text",
            "uuid": "184c5e58-ea9c-45ad-aa89-1732f6d49262",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/66\nFirst Submission:2025-11-03T07:25:47.000000+00:00\nLast Submission:2025-11-03T07:25:47.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128111",
        "uuid": "17cc6270-5bf3-4153-b588-bd8d41a102c1",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499204",
            "to_ids": true,
            "type": "md5",
            "uuid": "6a761c1e-a305-455a-8699-b180e605c53d",
            "value": "5e86cd389df2950a9d8973431ee50c07",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499204",
            "to_ids": true,
            "type": "sha1",
            "uuid": "70273483-faf6-442e-b560-de3eeb329387",
            "value": "21b626ca33ed9de4723bb2a10c680c68bb86b5d7",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499204",
            "to_ids": true,
            "type": "sha256",
            "uuid": "84da0d69-2bc2-4952-8a28-0f6f49687fad",
            "value": "ff145c9b72a1db63196eea041676400452900fba6a96a5bd3125a09c717b94e2",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484850",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "098a39e9-6588-45c1-b3e0-e39185062dd1",
            "value": "98304:gcA0I41Pk1/FmKLwBC+ndaISeNXPfbo/Kr9XC9nx:gcO41s9ISCPfnC9nx"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484850",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "fecbe11b-c115-4fbb-9d40-225478cf6014",
            "value": "3833779"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484850",
            "to_ids": true,
            "type": "vhash",
            "uuid": "cbf1ef03-ca32-4cec-beb8-222ca439c471",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484850",
            "to_ids": true,
            "type": "filename",
            "uuid": "8e61e8f5-66c7-4488-bfd5-4b57a297307c",
            "value": "8614t8cot.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  23/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484850",
            "to_ids": false,
            "type": "text",
            "uuid": "f9af805a-46f3-4911-8058-a91861ca273a",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:29/66\nFirst Submission:2025-11-03T07:25:32.000000+00:00\nLast Submission:2025-11-03T07:25:32.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128132",
        "uuid": "3d8f2ff2-e40f-4f16-95fa-fbdb618f2c71",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499206",
            "to_ids": true,
            "type": "md5",
            "uuid": "ba06245a-816a-4783-86cf-721803788129",
            "value": "f8103cf50adb7b7251c54501e92f7331",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499206",
            "to_ids": true,
            "type": "sha1",
            "uuid": "4ab547aa-3a8c-428a-84a1-61d23d9a828f",
            "value": "5583bb996e20cd34cbbecb279b509d28fad36e17",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499206",
            "to_ids": true,
            "type": "sha256",
            "uuid": "a9728f42-9c00-4ba9-ad59-d36a86995c2b",
            "value": "de51c5d3989ac0ff1313e3c1a2d1fff9627d7502de6f7ab14396eca2931a31dc",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484872",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "06777953-666c-4884-8712-8f388c3b7f29",
            "value": "98304:jIY0qg3Xp3lKrtlDzacIPmvT7zd3M0po/Kr9btzX:j/0qgHyJMqtzX"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484872",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "9f79999b-f5ba-4890-91ed-11fd9e706f5f",
            "value": "4747408"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484872",
            "to_ids": true,
            "type": "vhash",
            "uuid": "6be4c4a5-4980-4214-ab9a-0f6f35861569",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484872",
            "to_ids": true,
            "type": "filename",
            "uuid": "88bc5b99-a8b3-4fb9-b293-13e06269f5af",
            "value": "q8kj9j8r.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484872",
            "to_ids": false,
            "type": "text",
            "uuid": "763f8921-f558-4ce6-bcf3-3249660a01a7",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:26/66\nFirst Submission:2025-08-18T17:22:50.000000+00:00\nLast Submission:2025-08-18T17:22:50.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128154",
        "uuid": "417a9be2-dee8-4b97-bff2-079b4856fa83",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499208",
            "to_ids": true,
            "type": "md5",
            "uuid": "0b60a458-d042-4445-96da-29e82e634ab9",
            "value": "4ae7bc5f3d0e948eac832841b47fcb1b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499208",
            "to_ids": true,
            "type": "sha1",
            "uuid": "33bd1f2b-0876-4543-9e24-063e06c927fc",
            "value": "5ec75f298a7c7d5776f814791624bfc8a5a654ae",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499208",
            "to_ids": true,
            "type": "sha256",
            "uuid": "497a48a1-a9f6-4404-94c6-fb2bc3fb4bbf",
            "value": "e1b3e6635104927cfec8b8e8fc0e4ba17b7b801cbb70fb0253376413a32f8314",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484894",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "17666ea4-049e-485f-91b1-fe0a068655e4",
            "value": "98304:z9BnMyvH6nfDysPa7KFBTfIjvOj9eRQJ7p3Qtlo/Kr9bJnW:z9FonfDysiyj96k1gLJW"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484894",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "ebab0762-5bde-4397-ad7b-755f5b192325",
            "value": "4923536"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484894",
            "to_ids": true,
            "type": "vhash",
            "uuid": "91d79e6a-158e-4bee-830d-5abd1c9fd0b2",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484894",
            "to_ids": true,
            "type": "filename",
            "uuid": "662b7429-4e61-46c4-a639-0c5cf3ec5ac8",
            "value": "04u7y2upq.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484894",
            "to_ids": false,
            "type": "text",
            "uuid": "12552fc6-0b11-4485-8fab-db658d0f525b",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:29/67\nFirst Submission:2025-09-14T02:34:21.000000+00:00\nLast Submission:2025-09-14T02:34:21.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128178",
        "uuid": "1bc68b3a-b475-4a5a-b859-adf64cbd0362",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499209",
            "to_ids": true,
            "type": "md5",
            "uuid": "b4db1e9c-e998-4eb9-8656-b6e1836a7643",
            "value": "26a344dbcf273bfd5b820b2d47f4f0de",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499209",
            "to_ids": true,
            "type": "sha1",
            "uuid": "64f24924-3e02-41b2-8266-d5e1365f09fc",
            "value": "c9815874c3c1f2ef9843d1e83c903d82563b8af1",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499209",
            "to_ids": true,
            "type": "sha256",
            "uuid": "cd03a02b-b2eb-4280-8c75-bd7936888f2b",
            "value": "a2c35d410246d20de41822b305fbc6b04489e0da4f07b5247b425c6eb7edec52",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484915",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "eb96eea9-48a5-43ea-8100-0d80b9a88240",
            "value": "98304:of3xPVvRPFP2DNmuLLCP2expYzqEP4IvFjdo/Kr9rf9KF:MxNXP2pmM42expYWEAKHf9KF"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484915",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "443f052b-ecdc-4628-9900-8e0038a6faf9",
            "value": "4726928"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484915",
            "to_ids": true,
            "type": "vhash",
            "uuid": "aa490132-2906-4420-8cb9-c644ae405897",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484915",
            "to_ids": true,
            "type": "filename",
            "uuid": "54a155d8-003d-47fa-b46b-1507712fd6db",
            "value": "xir5a7p9.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484915",
            "to_ids": false,
            "type": "text",
            "uuid": "b5cbcdfb-4203-40a1-9f9b-eedff1824e73",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:29/66\nFirst Submission:2025-10-07T07:41:06.000000+00:00\nLast Submission:2025-10-07T07:41:06.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128199",
        "uuid": "f0ef72fd-5103-4fc0-90de-5ebe341b48d3",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499210",
            "to_ids": true,
            "type": "md5",
            "uuid": "3bc1eb91-d6cd-46ef-b00c-3aa07ad190cc",
            "value": "88bb8152324664389bddb22bf9f5f4ef",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499210",
            "to_ids": true,
            "type": "sha1",
            "uuid": "192737c7-5f63-48bb-874e-8235b274ba85",
            "value": "b26a797b2c36ae1134b81a95b06c2bb6bc4bad93",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499210",
            "to_ids": true,
            "type": "sha256",
            "uuid": "93d6dced-74e3-4f3e-ac54-612b142a241a",
            "value": "e68a1db37a74982151ce37aca7a0bcd833dfb7770cbd7c52aa883dbdb89b2f16",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484937",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "ed83ebfa-3435-4226-8817-8edfc1d3ada5",
            "value": "98304:X9BnMmbH6nfDxLR0Ctlp/DbM0i/0dXmzgyDLEo/Kr9btD:X9F8nfDxx/3M0i/o9YatD"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484937",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "863b62ab-c410-4427-a697-e1a75217633d",
            "value": "4923536"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484937",
            "to_ids": true,
            "type": "vhash",
            "uuid": "5af84f46-6f48-455e-aa80-16527f97eb84",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484937",
            "to_ids": true,
            "type": "filename",
            "uuid": "3155d4ef-4ab8-4ffe-b113-b7acfe05c08a",
            "value": "Plantsvszombiesfusionedition.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  25/09/2025",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484937",
            "to_ids": false,
            "type": "text",
            "uuid": "eca60d65-2c12-40c5-9540-5a37161b3d85",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:12/67\nFirst Submission:2025-09-25T10:52:34.000000+00:00\nLast Submission:2025-09-25T10:54:28.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128221",
        "uuid": "3515d614-67f7-4fb2-92b3-50e6c797f845",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499212",
            "to_ids": true,
            "type": "md5",
            "uuid": "38bd3825-daad-4c3b-a57e-6db44d6c92a0",
            "value": "b3b9ef49f73e472bb17f7f3470752617",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499212",
            "to_ids": true,
            "type": "sha1",
            "uuid": "7cfe26c3-cd45-4306-a3a5-2332e93e6eb4",
            "value": "2787e8a080d70aadc4cc87a6fee6e282c73c1d78",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499212",
            "to_ids": true,
            "type": "sha256",
            "uuid": "777b80cb-2588-4a66-89b2-207b7da57fd8",
            "value": "8a8dee61e92c2963f2773d345f44e936fc6c5559db6a9c2fd5cff1ed2943b91b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484959",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "e70b3b9c-c6b9-47dd-bcec-d16b908624f1",
            "value": "98304:mHGSlNV2ABQAZi7NmOr802h3wVWL5FbSuVNH8dYJ+o/Kr9rNz+:mm8N7QKi6f5FGu0dtNK"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484959",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "ed06a05b-302e-438e-810e-20824748faaf",
            "value": "5021840"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484959",
            "to_ids": true,
            "type": "vhash",
            "uuid": "89ee2269-74fb-481e-927a-fbf5e63abe1c",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484959",
            "to_ids": true,
            "type": "filename",
            "uuid": "193da81c-92e5-4eb7-aea1-ee9dd3b02da5",
            "value": "Sigmabattleroyale.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  05/08/2025",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484959",
            "to_ids": false,
            "type": "text",
            "uuid": "cf91d1f6-882d-4633-9171-330941dd9ad8",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:19/67\nFirst Submission:2025-08-04T07:08:47.000000+00:00\nLast Submission:2025-08-04T07:08:47.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128243",
        "uuid": "62f29217-d18d-4502-8d62-54317cc9962a",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499213",
            "to_ids": true,
            "type": "md5",
            "uuid": "8164bcb6-d1b8-41e2-9800-413b313c8b1a",
            "value": "14962266a8b20f90bc01b2efa934a31b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499213",
            "to_ids": true,
            "type": "sha1",
            "uuid": "8a01b2d2-79e4-4f6e-bdd3-2083ee78959e",
            "value": "1cb111fce04d00549577b357ed52f654ca7faff3",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499213",
            "to_ids": true,
            "type": "sha256",
            "uuid": "466494b8-d8dc-45a2-8af5-416fe7e68597",
            "value": "d24be25bd2be186096e7f29e37946101a65a2af76f7f1bd079a6c5c9b6b29b82",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779484981",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "8a2f53cb-7d0b-4cf6-be8a-d7c01ee4a2d8",
            "value": "98304:hpiOjusnebtdOhbjbaEq4yRdqSTyrN7o/Kr9nXs8:G+FeahbjbaoXXs8"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779484981",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "2a4f5176-020c-4764-bdec-97574e346f87",
            "value": "4841616"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779484981",
            "to_ids": true,
            "type": "vhash",
            "uuid": "11821f0a-2265-4d0e-babe-8b15cb48d111",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779484981",
            "to_ids": true,
            "type": "filename",
            "uuid": "21637104-b5ca-43d8-acbd-631175c548d4",
            "value": "ajourd.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  29/12/2025",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779484981",
            "to_ids": false,
            "type": "text",
            "uuid": "25a64f65-72d4-47cb-bcba-f3aabc5fa538",
            "value": "apk\r\nType Description: Android\nMicrosoft: Program:AndroidOS/Multiverze!rfn\nVT Total Detection:26/67\nFirst Submission:2025-11-27T20:12:17.000000+00:00\nLast Submission:2025-11-27T20:12:17.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128265",
        "uuid": "63ad2eb6-7f05-46e5-aa0b-5e3a2e1a2d6a",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499215",
            "to_ids": true,
            "type": "md5",
            "uuid": "23f51c44-4e26-415d-ba9c-10ff72d6616e",
            "value": "0cb4f128e7e75d32e55d0d0124abc65e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499215",
            "to_ids": true,
            "type": "sha1",
            "uuid": "293aaa8f-ebdb-4adf-9c76-8444f5711957",
            "value": "d28ec453bda7a09549f47f75a0e5c25e7513ef8c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499215",
            "to_ids": true,
            "type": "sha256",
            "uuid": "939f2246-a784-4e2b-a720-9f2ecbb830e1",
            "value": "3db2f5b59495530af32beea29eeda622ed271acf79d13d6e413001b2f7a52e7f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485003",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "7f932041-ae9b-4f11-a24f-70cc93916bec",
            "value": "49152:I8oRplLddUP1FeAQah6+A+PlkmDFQ7CFDFCSpd7ro/Kr9mPmn6RE3:mn5SMghVA+Plk0I+Fo/Kr9mc6RE3"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485003",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "181c0cfa-bc7f-4cd5-89d5-25f51fd8ade6",
            "value": "3497908"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485003",
            "to_ids": true,
            "type": "vhash",
            "uuid": "804befa8-b302-400e-8049-f9b86bc51393",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485003",
            "to_ids": true,
            "type": "filename",
            "uuid": "2da5b988-1343-4711-82d8-ac7c4a62d3df",
            "value": "56x93w.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  30/12/2025",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485003",
            "to_ids": false,
            "type": "text",
            "uuid": "ba80bc51-3b59-4351-99cd-e6e630863b6f",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:23/67\nFirst Submission:2025-11-04T12:45:12.000000+00:00\nLast Submission:2025-11-04T12:45:12.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128286",
        "uuid": "155774ce-451d-4653-9afe-88ffeac6265d",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499216",
            "to_ids": true,
            "type": "md5",
            "uuid": "f009a12b-5462-4a13-8593-f7bdf924a406",
            "value": "d9b907fdec254805d6457afcda7d311d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499216",
            "to_ids": true,
            "type": "sha1",
            "uuid": "f606617e-8846-418e-9b62-12c839f9c5c4",
            "value": "6bc7fedd1f84c4274c9891c37156251b0ea9d88d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499216",
            "to_ids": true,
            "type": "sha256",
            "uuid": "a40f4401-fdb7-4f56-a234-e1e5fa600887",
            "value": "9896d7f6f55af0cf4e3a502a42a2a99e6c926db3e02448ba468952ff085320f2",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485025",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "622fbb44-27e1-4168-9bd4-a9f465d786ec",
            "value": "98304:VSkELykQObT6ZogDPRoc9/nRgyqYo/Kr9nB+u:V8LyoaPRocZRgyDBn"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485025",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "7d75eaee-aadd-4359-9267-48bcda479a89",
            "value": "3645363"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485025",
            "to_ids": true,
            "type": "vhash",
            "uuid": "a3399b25-6d07-421f-b70e-f8c3c6d2f02d",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485025",
            "to_ids": true,
            "type": "filename",
            "uuid": "43868a0c-33b8-4586-a5ce-9397131793ed",
            "value": "tjogz.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  12/10/2025",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485025",
            "to_ids": false,
            "type": "text",
            "uuid": "a79ac42c-d239-4910-84a5-5e0bded11a08",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:18/67\nFirst Submission:2025-10-11T07:25:17.000000+00:00\nLast Submission:2025-10-11T07:25:17.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128308",
        "uuid": "697fca8b-2ba2-4155-b3a5-b6ae5febd056",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499217",
            "to_ids": true,
            "type": "md5",
            "uuid": "f76dc3c4-8fb1-44a5-a41a-0fc0a06d1ef6",
            "value": "c912ca70ebdb581564be77568d3c8f82",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499217",
            "to_ids": true,
            "type": "sha1",
            "uuid": "54cda571-67be-44ed-91ba-724865e4540c",
            "value": "ac6050f64ee39eb14b0c5712f28d623dd036d1e0",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499217",
            "to_ids": true,
            "type": "sha256",
            "uuid": "3a9d256b-2245-4804-b889-2ec9871cdec0",
            "value": "c00baa8530a76056ea9a688178d16c96b9ede91aed46c50d0f76aa6052e3eb79",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485047",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "ea295466-6152-4750-8b8d-9b02c06a76c0",
            "value": "98304:lXgbl/TWL+sXgKSAKeni+IuBPVe6l+gskDU4hk0UH8ov5tMsSUAgTo/Kr9n5+M:BgQTSALXe6v3hFPiGi5B"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485047",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "afda22a6-f723-4b3c-b256-1d2b6ac76421",
            "value": "5050512"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485047",
            "to_ids": true,
            "type": "vhash",
            "uuid": "c5af02d7-47c0-4c9f-a4db-7c8d7f730b04",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485047",
            "to_ids": true,
            "type": "filename",
            "uuid": "282d5ff8-36f1-4fa9-997c-7f3a3cec9631",
            "value": "s7y6u5y3.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  07/08/2025",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485047",
            "to_ids": false,
            "type": "text",
            "uuid": "c3df841c-8379-41a2-ac2c-ba5e9b88af79",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:9/66\nFirst Submission:2025-08-07T14:28:35.000000+00:00\nLast Submission:2025-08-07T14:28:35.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128329",
        "uuid": "f7ff4c35-cf05-4ca5-be7f-ed9a56a22e2c",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499218",
            "to_ids": true,
            "type": "md5",
            "uuid": "1b9dc435-4460-4990-829e-c821e8d65225",
            "value": "6bb1d8ba947613c25f63d44b1741475b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499218",
            "to_ids": true,
            "type": "sha1",
            "uuid": "abff803d-4c11-4424-b440-cdc6be4effb0",
            "value": "eaf9c12424ef90d7ba75cb72bb9fa5d0de0af63d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499218",
            "to_ids": true,
            "type": "sha256",
            "uuid": "7fc8ef87-b58b-4ee5-8ad4-35572137cc0d",
            "value": "dd66c8b9ed8177a6d1d98d819ee46c6a865d3301ac04741a399a43cfc1cd5411",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485068",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "6a936503-60d5-44e9-913d-967bde58b184",
            "value": "98304:gu9BnM2qH6nfDs8cCOBmnA/Yg3mM5uo/Kr9bshz:T9FJnfDBcCOzDEshz"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485068",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "b36497d9-35c3-4e24-8445-43a24a18bd1c",
            "value": "4923536"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485068",
            "to_ids": true,
            "type": "vhash",
            "uuid": "7a86f00e-16cd-4db0-a1d2-b3b6c84e5be0",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485068",
            "to_ids": true,
            "type": "filename",
            "uuid": "69540858-b6b1-4a64-ba1e-52900da31997",
            "value": "Plantsvszombiesfusionedition.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  30/07/2025",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485068",
            "to_ids": false,
            "type": "text",
            "uuid": "75690852-d748-42ff-9206-e5a1479cc8dc",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:6/67\nFirst Submission:2025-07-30T14:40:02.000000+00:00\nLast Submission:2025-07-30T14:40:02.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128353",
        "uuid": "55ed2d94-375f-4cdc-9de2-42d13e160a96",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499219",
            "to_ids": true,
            "type": "md5",
            "uuid": "ba13a412-e7bd-4d9a-b162-6bfb5b1cf63f",
            "value": "bf66f797047ad894bda1b2ec4c18dce7",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499220",
            "to_ids": true,
            "type": "sha1",
            "uuid": "b3a0ca24-cb4d-4b1d-85a9-759defb6e1f5",
            "value": "d812af24719d986021cb5c25af6bead439635491",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499220",
            "to_ids": true,
            "type": "sha256",
            "uuid": "446b8dea-0e5f-49eb-ac6a-676a5aaeb5b7",
            "value": "57ba7f60b1b8516198862e1e5ab129ee2d44bf9229b083f9f080bef4f59561f8",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485090",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "dbd191ad-56ba-44f7-9968-df1e3dbfa535",
            "value": "98304:JhZuxUD2ZvmOPFO7eadOggLnZeOo/Kr9rrXr:JhcKENaHgprXr"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485090",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "acc172f5-ad31-4433-ad12-c78da2eb20f9",
            "value": "4665488"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485090",
            "to_ids": true,
            "type": "vhash",
            "uuid": "b2276a7e-7756-4b91-9276-9eee63896cb0",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485090",
            "to_ids": true,
            "type": "filename",
            "uuid": "295dd8df-fd0b-4255-b680-09da12e061d2",
            "value": "xfg5fho02.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  17/08/2025",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485090",
            "to_ids": false,
            "type": "text",
            "uuid": "211b470e-6c23-49ed-b4e1-1f65f7b1de0a",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:11/67\nFirst Submission:2025-08-17T10:45:58.000000+00:00\nLast Submission:2025-08-17T10:45:58.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128374",
        "uuid": "41bfd23a-3687-4129-ac2c-4634297cdc47",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499221",
            "to_ids": true,
            "type": "md5",
            "uuid": "c4ce120d-0c49-4999-a0da-7ce905d12b36",
            "value": "ebb307cd48964a3b7fd5375d890ec521",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499221",
            "to_ids": true,
            "type": "sha1",
            "uuid": "8df9fa78-624b-4548-bed6-bb47a675cfdd",
            "value": "173e19fb46cfdfd6af3ba5712eff541525a8d060",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499221",
            "to_ids": true,
            "type": "sha256",
            "uuid": "2a6f7f8c-f21d-4499-aa59-1ec9350ff278",
            "value": "1934d3e083262d5333c8f2856d2482b3a02eb3960e70b0392b1eae2addb019d1",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485112",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "e161a073-9e97-434e-8b1f-751d390566ac",
            "value": "98304:g1mLdym1MRZVFaZ4xn7rGEkXRoo/Kr9ni5y:g1Cd1OaZ4xn/GEkwig"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485112",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "be3a7e48-7acc-4a00-9554-8ea8f59f2d0c",
            "value": "4759696"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485112",
            "to_ids": true,
            "type": "vhash",
            "uuid": "3bba1d88-1a06-4a42-a5dd-bff48dc8d637",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485112",
            "to_ids": true,
            "type": "filename",
            "uuid": "8967cabe-f9f1-4792-824a-f622ed732c9d",
            "value": "wq2ymz.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  08/09/2025",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485112",
            "to_ids": false,
            "type": "text",
            "uuid": "40d52fa2-bda6-44b6-9ecc-f0ff4b17230b",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:20/67\nFirst Submission:2025-09-07T04:23:23.000000+00:00\nLast Submission:2025-09-07T04:23:23.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128396",
        "uuid": "56ccd512-171c-40c9-b1ee-9120743144fe",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499222",
            "to_ids": true,
            "type": "md5",
            "uuid": "6bf461c8-7eea-4ba7-894f-5c4fa8fff680",
            "value": "775f49ac6e5b0921af7fad9be200dfec",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499222",
            "to_ids": true,
            "type": "sha1",
            "uuid": "3b0edfe6-34d4-46c0-9b5a-05385dc50b41",
            "value": "5730b2623c323d1ce61334116b9a1aacee78e1df",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499222",
            "to_ids": true,
            "type": "sha256",
            "uuid": "e93d4ad1-1fca-4a57-b2e7-76fa0b681c2a",
            "value": "4f3699888d0a52ae96b7d8f6ca28f9c51a4478092edb41be9ec08fd5f8010c1a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485133",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "885c907a-9c9c-4ec0-a8b7-baff4f0174b0",
            "value": "98304:iD1kYBlADRTCmtzNHxVy6de9Ko/Kr9nKE:ktWRVlxVy18KE"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485133",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "e500dba7-e1cc-4236-8587-eb3ac084c51e",
            "value": "3850163"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485133",
            "to_ids": true,
            "type": "vhash",
            "uuid": "fb32c4c3-3451-4f62-bbc1-0829a38b888b",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485133",
            "to_ids": true,
            "type": "filename",
            "uuid": "f32ac325-97f1-4d83-bf11-1255c3b2c091",
            "value": "40adhl.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  17/10/2025",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485133",
            "to_ids": false,
            "type": "text",
            "uuid": "7bd56104-1642-4a64-9918-776e782af2c7",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:20/67\nFirst Submission:2025-10-16T09:31:08.000000+00:00\nLast Submission:2025-10-16T09:31:08.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128417",
        "uuid": "2cf651fb-5d1d-402c-9b3b-7ef20358c35d",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499224",
            "to_ids": true,
            "type": "md5",
            "uuid": "d634ff85-c2d3-4c66-961d-b1993ecc0357",
            "value": "193c4a0dfa17e4f183402d503327bfcb",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499224",
            "to_ids": true,
            "type": "sha1",
            "uuid": "fc0dcb52-dce2-4b73-926d-8f04c1480a56",
            "value": "f5a639d0c3a83d8274b2daca4122b343b8bb0df7",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499224",
            "to_ids": true,
            "type": "sha256",
            "uuid": "41af53c0-8f1d-4581-b056-bfeef03e4915",
            "value": "40ad9c5f0e28a26e0b5d7a5758cad7a04c331d6cde49c23b604a287a7bb913e3",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485155",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "e27d5966-9f33-461e-af2a-90fd8173fe66",
            "value": "98304:6VhZ2hnEgW6sg7kh1SMJJND68w7h8Yo/Kr9rRo:6V2SPEMJJq7fRo"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485155",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "3ad9f52c-6220-419f-bf4c-93d86ade20e2",
            "value": "4222899"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485155",
            "to_ids": true,
            "type": "vhash",
            "uuid": "c2007286-a556-4dc2-ba19-aa746c005b8c",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485155",
            "to_ids": true,
            "type": "filename",
            "uuid": "a1292eed-fbde-4916-8796-ec7c36818a1b",
            "value": "0yga6ebx.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  17/10/2025",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485155",
            "to_ids": false,
            "type": "text",
            "uuid": "a7f29341-8e9f-4a6e-b401-2a5f2571939a",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:7/67\nFirst Submission:2025-10-17T05:32:13.000000+00:00\nLast Submission:2025-10-17T05:32:13.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128439",
        "uuid": "5688a36d-365d-418c-9dbe-4f2d05a88b95",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499225",
            "to_ids": true,
            "type": "md5",
            "uuid": "c069e69c-634b-4bfb-b52a-5eb3516dc11e",
            "value": "4598ce6b04ca2a84a6c5aa7e5cd8a717",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499225",
            "to_ids": true,
            "type": "sha1",
            "uuid": "9b3a65db-3220-484b-a3ee-bc173597afa8",
            "value": "eaf27c4af21276d7cc5bce3dbad30d89d7aae51d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499225",
            "to_ids": true,
            "type": "sha256",
            "uuid": "d51b451a-a8c9-41ba-966d-503df109b7b8",
            "value": "677713a7a7267b2a904ea8fb44d3fd37adc0ff5fe76a8978a3f0f44ccb6c3e38",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485178",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "1738feca-88c5-4a6a-839c-a0315e7082d8",
            "value": "98304:0j8X9CfDK1hsinchRAAoD0vVDwSYi1/ERE1go/Kr9vHh1:YDfD+hXna/hNDd1oHh1"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485178",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "4f5a41db-af97-422d-b761-42d730b52856",
            "value": "4661392"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485178",
            "to_ids": true,
            "type": "vhash",
            "uuid": "04f8b440-99f5-4f33-b652-c512a5d5b076",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485178",
            "to_ids": true,
            "type": "filename",
            "uuid": "abfdb815-d580-4592-9cab-15f91f5b7345",
            "value": "Neetchan.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  29/09/2025",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485178",
            "to_ids": false,
            "type": "text",
            "uuid": "4845d96f-0617-4bc8-9c5e-47e73fe1543e",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:12/67\nFirst Submission:2025-09-29T13:28:27.000000+00:00\nLast Submission:2025-09-29T13:28:27.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128461",
        "uuid": "488d392a-1119-49cc-a590-2df51ca57c73",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499225",
            "to_ids": true,
            "type": "md5",
            "uuid": "ad136753-c146-48e7-8b96-4fb89cbf14b7",
            "value": "fe0713812cc098bc358ad89ca5e35566",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499226",
            "to_ids": true,
            "type": "sha1",
            "uuid": "ccda37ff-e670-4ac1-b7e5-53d93f002a35",
            "value": "6cf491d862bfa8d46720cbebc539373970fc44ae",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499226",
            "to_ids": true,
            "type": "sha256",
            "uuid": "ee875abe-7b89-4120-a636-8b99944c598d",
            "value": "110f14087703c0899bde6ffa448adf5dbcc1a9c71f0b8419765718be4c04f1b5",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485201",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "e207434c-35f8-4907-8b54-8e031b34e484",
            "value": "49152:82iHYnP+EKRuroxEQi9ICa2f6wDIWSK9TAGVPICSpd7vo/Kr9/Hcnrk8:qYPHKRuroxEECam6wpJfVeo/Kr9/eA8"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485201",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "6a99da32-c990-4a2a-843f-6e2d9a8afc81",
            "value": "3407795"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485201",
            "to_ids": true,
            "type": "vhash",
            "uuid": "5c1990a4-6f35-4d7c-ad90-a5eab0a69657",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485201",
            "to_ids": true,
            "type": "filename",
            "uuid": "be97ae19-345d-4325-b9ea-8993ecb71e57",
            "value": "Fifa23.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  12/03/2025",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485201",
            "to_ids": false,
            "type": "text",
            "uuid": "21d4afb5-627e-4eb9-95f4-ea9e29c1c551",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:19/67\nFirst Submission:2025-03-09T09:43:05.000000+00:00\nLast Submission:2025-03-09T09:43:05.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128483",
        "uuid": "bf17ab9d-e422-4cdf-b567-664de5125404",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499227",
            "to_ids": true,
            "type": "md5",
            "uuid": "7e866b86-11fa-4553-828c-745d33c19ffc",
            "value": "72c7107a196cf3e5ab0b2ffd6a7036de",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499227",
            "to_ids": true,
            "type": "sha1",
            "uuid": "a164a6d3-862f-4aaf-98b5-f4ff3f413e38",
            "value": "25a865e7a389628accf00274a4e41681d311e7d2",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499227",
            "to_ids": true,
            "type": "sha256",
            "uuid": "24a3a018-ead9-4888-bf22-86383b03732c",
            "value": "c7e802374643cd20920b7b99292f791b537c9289a4723bba183441d442b08d44",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485223",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "9f242d18-7c95-4a08-8658-2bca25f63f7a",
            "value": "98304:8hYenqRFeoK6VapNUCGa0G4qkHk1pyVkEZTM/Neo/Kr9ryPg:8hnq6T6o8ZDqkE1pokYTMGyPg"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485223",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "90dadc68-1a16-4c30-9620-262cf2339191",
            "value": "4669584"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485223",
            "to_ids": true,
            "type": "vhash",
            "uuid": "871b73a0-102a-4c00-8724-ae26157a2cae",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485223",
            "to_ids": true,
            "type": "filename",
            "uuid": "8b78f5a8-66e3-498f-9859-9eccde56e49a",
            "value": "e38lh9.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  04/09/2025",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485223",
            "to_ids": false,
            "type": "text",
            "uuid": "e621a5f0-fdc5-414d-9f05-00f4c69f7693",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:20/66\nFirst Submission:2025-09-03T08:37:57.000000+00:00\nLast Submission:2025-09-03T08:37:57.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128505",
        "uuid": "e96e49e5-1d4e-44e4-979c-23e5743a26f2",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499228",
            "to_ids": true,
            "type": "md5",
            "uuid": "76d6e0cb-cacd-4feb-9575-0c00bacbd8e6",
            "value": "3543ba6897bdb41829b19508c0c611ea",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499228",
            "to_ids": true,
            "type": "sha1",
            "uuid": "db0b150f-50fb-4609-a15f-ac7351f79807",
            "value": "396bfef6f9a54b6ad866c1691f830420b0df7fc2",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499229",
            "to_ids": true,
            "type": "sha256",
            "uuid": "29be3cfa-e212-43bb-bdef-a1652ac4c045",
            "value": "de3f6b0cc2668804c7272e09531d821a948d5525a7485ac2f384a1995d63da2f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485245",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "8784712b-0285-432b-a482-ffa48faba3cc",
            "value": "98304:GhXv/3oWkCnFmLzZyWPqfsfajLzeExJXqo/Kr9rqjFj:Ghfrk8FmLzYysjeExJ4qZj"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485245",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "c868445c-8095-4656-9d74-4583c35c3a55",
            "value": "4665488"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485245",
            "to_ids": true,
            "type": "vhash",
            "uuid": "55091d9c-5695-4d97-a0c7-149d49530cf5",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485245",
            "to_ids": true,
            "type": "filename",
            "uuid": "3d68273c-89c6-4fc4-8f15-8ae9fd020ca6",
            "value": "Lilyneandanalchemist.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  03/09/2025",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485245",
            "to_ids": false,
            "type": "text",
            "uuid": "02f7601b-bb49-4941-a0e3-beec85fb4896",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:13/67\nFirst Submission:2025-09-03T07:21:11.000000+00:00\nLast Submission:2025-09-03T07:21:11.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128526",
        "uuid": "2020047a-bff9-435a-b4e4-93f1d68adecf",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499230",
            "to_ids": true,
            "type": "md5",
            "uuid": "2adaedc4-1c52-45eb-bdec-c2431f970787",
            "value": "cde08520473411073003893da9056396",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499230",
            "to_ids": true,
            "type": "sha1",
            "uuid": "d0181559-046e-41b4-a893-af44a279a8f3",
            "value": "2ea804e6aafa6259ed3533a12ccc274a8a7259f1",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499230",
            "to_ids": true,
            "type": "sha256",
            "uuid": "7eadad46-19cc-413e-8175-9e4c96b25cf0",
            "value": "3cfa58a0030f95ee35b105fbc1041b2c2d2944b6b795b2f1babbd771b23d7b9e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485266",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "37bb06d9-8080-4891-b311-344ab13b1055",
            "value": "98304:VSkELyLdObT6ZfasINL2h3dz1/6xSyKGWDTyqo/Kr9n/In:V8LyI3sSL2h3f/m9W9/U"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485266",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "b9ef33d6-e4b1-4e04-9b5b-acd306f267f9",
            "value": "4743312"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485266",
            "to_ids": true,
            "type": "vhash",
            "uuid": "c133780e-77ce-4500-a561-4a5e32bab1c1",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485266",
            "to_ids": true,
            "type": "filename",
            "uuid": "4820d21b-36bf-42e9-8ab0-95adf4cbf976",
            "value": "Deepsleep2.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  07/08/2025",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485266",
            "to_ids": false,
            "type": "text",
            "uuid": "b601cfe5-82b3-4ced-b1bd-3e15b4984a70",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:9/67\nFirst Submission:2025-08-07T15:51:52.000000+00:00\nLast Submission:2025-08-07T15:51:52.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128548",
        "uuid": "7bfad8c6-d2b5-44d6-9927-a88fb6387c2f",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499231",
            "to_ids": true,
            "type": "md5",
            "uuid": "58f70e52-7c33-4d62-8ccb-99eeae99eb94",
            "value": "051fa5f945b41d05a753293c685b20f0",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499231",
            "to_ids": true,
            "type": "sha1",
            "uuid": "09b3adf8-95d4-48f9-8ce1-a1339d53028d",
            "value": "a2004c3bc61fe91ffe9a06881e1ce32bf0d40348",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499231",
            "to_ids": true,
            "type": "sha256",
            "uuid": "3a4ce831-1e30-468e-beb8-87d958f07ddc",
            "value": "3d80419f8f29cdce901837acfb635831d3c0c84c7f4538bc5ff07e1eb4974ce6",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485288",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "06d1a331-258b-45dc-8397-54d0a65a0b70",
            "value": "49152:QzOEv9BnMdn2es5HaZnfD5T3F6763+Gag2hu0aCSpd7Do/KrLY9NNP:8N9BnMEH6nfD5T307HM2huDo/KrLYJP"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485288",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "9df36a29-4250-46e9-95b5-ac7398ebcd8d",
            "value": "3457696"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485288",
            "to_ids": true,
            "type": "vhash",
            "uuid": "9ba01734-929a-4f75-9e85-da6ebb6a43ec",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  27/06/2025",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485288",
            "to_ids": false,
            "type": "text",
            "uuid": "39555eba-7a0e-47e8-9ed7-36e79415f42d",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:24/67\nFirst Submission:2025-05-10T14:54:38.000000+00:00\nLast Submission:2025-06-26T06:20:45.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128569",
        "uuid": "2fa22a50-932b-4eab-9786-2d7e9afdf016",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499232",
            "to_ids": true,
            "type": "md5",
            "uuid": "691e0679-b31f-401a-b458-f5f0dc1f8973",
            "value": "6d1f010df8f2aabb710bb2b98edfae4d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499233",
            "to_ids": true,
            "type": "sha1",
            "uuid": "f198df74-df2d-47ce-9741-e06f23ea0fda",
            "value": "db755a3b3ce4b4c76a048ecb7c29a46df7f4bd42",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499233",
            "to_ids": true,
            "type": "sha256",
            "uuid": "8dfacb57-30dd-404e-8d73-780b3c81fca9",
            "value": "e4cc1b0bf6a261945e0cc401fc0d30235672fe1481647240ba49686ccd3678df",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485311",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "813ca2ed-a7de-40fe-a469-3835ecb08b14",
            "value": "98304:vTqnbLQzLZzAsD+ZQkuDhFEMZxUsCDPiubKVo/Kr9rCQ:boCLlqkftZxUTDViCQ"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485311",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "423eb230-a11a-471f-b351-ca4bbd3f37d6",
            "value": "4972688"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485311",
            "to_ids": true,
            "type": "vhash",
            "uuid": "5578a2f3-122e-4e7f-bf7f-f86a582c341e",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485311",
            "to_ids": true,
            "type": "filename",
            "uuid": "8cb8b3c4-4f1c-452a-80b1-cc7112f67c20",
            "value": "6ym4ltp7.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  17/08/2025",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485311",
            "to_ids": false,
            "type": "text",
            "uuid": "e58169f9-2e80-45b0-ab8f-2cd73930e568",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:11/67\nFirst Submission:2025-08-17T15:04:02.000000+00:00\nLast Submission:2025-08-17T15:04:02.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128591",
        "uuid": "f257c488-dd56-4829-b334-eea46151ac7f",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499234",
            "to_ids": true,
            "type": "md5",
            "uuid": "1e513755-0fc7-4963-92b7-24d043cdcb8b",
            "value": "0efa75183b0501ccb59e5e5b05a025fd",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499234",
            "to_ids": true,
            "type": "sha1",
            "uuid": "48176562-b009-4f77-8735-cc71f9fb4e4f",
            "value": "b809885c9e429483257b549fe214e21a347ca8c4",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499234",
            "to_ids": true,
            "type": "sha256",
            "uuid": "e6b4ef91-f26b-4d4b-943e-5658af6bddc5",
            "value": "e3789666d55ccff54898206f8689e1f266fd4fddd177e03c7e1ea8f796de5afe",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485332",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "07cd1c48-a9ab-440a-a3a1-c9290c02db1e",
            "value": "98304:o2HaH1i8DpbrcSgUhxwpe0VFKCTx2o/Kr9nGfG:oa27pvxBN0LhTWGu"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485332",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "525f3fee-cd1a-46d3-b2de-6073824c6ff2",
            "value": "4882576"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485332",
            "to_ids": true,
            "type": "vhash",
            "uuid": "c8914dc5-0de0-4d63-b03c-8152e66b73c4",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485332",
            "to_ids": true,
            "type": "filename",
            "uuid": "ea412698-1cf8-4250-9e72-ef3771c4125e",
            "value": "em6q2z7m3.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  19/09/2025",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485332",
            "to_ids": false,
            "type": "text",
            "uuid": "73d51a96-c932-4ccf-b0e6-224c1e394a5a",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:21/68\nFirst Submission:2025-09-18T11:17:06.000000+00:00\nLast Submission:2025-09-18T11:17:06.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128612",
        "uuid": "f792641b-e783-40de-bcd6-9e6ad0ff8f5c",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499235",
            "to_ids": true,
            "type": "md5",
            "uuid": "9bd2a9a8-9a47-41e2-84ac-bcbff475012d",
            "value": "187056497ebe19dcc9ebbc2c2f86fb79",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499235",
            "to_ids": true,
            "type": "sha1",
            "uuid": "67676990-6353-45c5-8133-1101dd48ceb3",
            "value": "914d1f65504885af695487774acf75fb76a136af",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499235",
            "to_ids": true,
            "type": "sha256",
            "uuid": "aa5357c9-a53a-44a1-90e7-a39af9b93b0c",
            "value": "913c4e4d885af55efb0aa5307704c67aa5ba17f3e45e1d9a8a44dde3617c9961",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485354",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "fd85a000-de48-4b4e-9ef8-99a2105205fe",
            "value": "49152:pCEPLRo9IyrpBI+4OFJ5/XZco0KI1ZobipCSpd7po/Kr9/TNioo:vRT+tFJ5/pcoEomo/Kr9/Aoo"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485354",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "ce25fe7a-b2fc-4407-8138-3b080f6e6d75",
            "value": "3309491"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485354",
            "to_ids": true,
            "type": "vhash",
            "uuid": "b39233e8-7766-40d3-9bf1-9f90aa581d05",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485354",
            "to_ids": true,
            "type": "filename",
            "uuid": "f6b4883a-5c22-4a3a-ad4a-31e8dd96ddb3",
            "value": "Ntrlegend.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  16/06/2025",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485354",
            "to_ids": false,
            "type": "text",
            "uuid": "f4635feb-4032-48c1-8ce7-9e08598b909b",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:14/68\nFirst Submission:2025-06-06T02:39:20.000000+00:00\nLast Submission:2025-06-06T02:39:20.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128634",
        "uuid": "fd33b5d0-db93-4b9c-bdb9-37275eba0926",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499236",
            "to_ids": true,
            "type": "md5",
            "uuid": "1715752e-4596-4892-8f5d-bc2c54a442d3",
            "value": "6898e6e69757b0394078319915281b4e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499236",
            "to_ids": true,
            "type": "sha1",
            "uuid": "9bbab0e2-fc6f-4be3-9384-59c474f4dae2",
            "value": "2da827919d4f01c898073ce3cd8c0c6f494309fe",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499236",
            "to_ids": true,
            "type": "sha256",
            "uuid": "c94d2a58-64e7-4247-8ab7-427b41924b49",
            "value": "d0c71a7fd076b90e535f1c1fdc40718d9eb0e79f6d04f45abfd1d7d8a649d16a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485376",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "b5ef89c2-63d7-4491-8fae-67ddecfbb509",
            "value": "98304:x+YK9ST/57OAtwmLFjuj1sROt6YAo/Kr9Xa/:xO9STRVBjuj1yOt8a/"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485376",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "1aca2634-74f3-45e2-88dc-316697cdf29d",
            "value": "4567184"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485376",
            "to_ids": true,
            "type": "vhash",
            "uuid": "64072703-830e-4aeb-a3d3-205ff976c515",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485376",
            "to_ids": true,
            "type": "filename",
            "uuid": "1f3bce17-e6b0-4677-b48b-2d87c673318e",
            "value": "mmx3266.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  01/09/2025",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485376",
            "to_ids": false,
            "type": "text",
            "uuid": "41298a1c-f5f6-4ce2-94d2-26d6a8ca8296",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:22/67\nFirst Submission:2025-08-31T07:31:44.000000+00:00\nLast Submission:2025-08-31T07:31:44.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128656",
        "uuid": "cba1d987-2ce7-457d-964e-6cb564e9fde5",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499237",
            "to_ids": true,
            "type": "md5",
            "uuid": "c7c84aec-54dc-4db2-a97f-f49bbef976ed",
            "value": "5346135f90edb339e0be03d5e5653d60",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499237",
            "to_ids": true,
            "type": "sha1",
            "uuid": "1cb3d893-01fe-4ac7-9501-945bcfa69f7b",
            "value": "b3b5d7437ae487c3ac7286b00e9ff630ab53cdaa",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499237",
            "to_ids": true,
            "type": "sha256",
            "uuid": "265589a5-471a-4f0e-b45d-aacd1e858c86",
            "value": "4bf05e49dccafe8c05a1268c420621f211234b13062e81f349fde28ba2ddd416",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485398",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "8a9ac529-9e4e-4bd4-9e8b-1d7eed34ea55",
            "value": "98304:ZSkELyelObT6ZoiUNr5doXm704Z/nie2blDB8uBuSTo/Kr9nU6H:Z8LyhXNVd8i/niltjUw"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485398",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "ccc2a066-3c7d-41c0-88d7-ec9b8932e722",
            "value": "4743312"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485398",
            "to_ids": true,
            "type": "vhash",
            "uuid": "f54374fc-b2ee-4e6e-a640-21d425384bdf",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485398",
            "to_ids": true,
            "type": "filename",
            "uuid": "0da675c3-2483-458d-899f-ec1a2f6c4b13",
            "value": "Deepsleep2tt.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  20/08/2025",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485398",
            "to_ids": false,
            "type": "text",
            "uuid": "cd9067ac-277d-4c43-a1bf-74d0d256478c",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:10/67\nFirst Submission:2025-08-20T14:55:56.000000+00:00\nLast Submission:2025-08-20T14:55:56.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128677",
        "uuid": "81962908-e696-4e09-babf-f98b965e847e",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499239",
            "to_ids": true,
            "type": "md5",
            "uuid": "69abe5dc-0c8d-4665-8734-3ecd9eba3f23",
            "value": "695484416ba461fb32c2d592128cc1be",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499239",
            "to_ids": true,
            "type": "sha1",
            "uuid": "56ef3d41-f01d-4fe3-b983-2a785151ddc3",
            "value": "182df583845ecc0b9fcd062d11be9e7b0e180572",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499239",
            "to_ids": true,
            "type": "sha256",
            "uuid": "9b583a27-75ba-4442-b903-9da665debb6d",
            "value": "f8ebe750bafd67406d96ce7d3c578fae5f8768b73c8d0e6a8dcd59a6eda94eed",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485419",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "a4475886-efe9-47ae-8a68-b4c5d74a13d7",
            "value": "49152:VH8SHAdl0wQU8Fc/fxBj1uWOg3UcIDL0+JH9SCSpd7+o/Kr9aPji3Fw:VH+KwfXAWBFIDYAdo/Kr9ae3Fw"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485419",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "ceac95e0-7c06-4625-a508-cfe2ce0b9726",
            "value": "3661748"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485419",
            "to_ids": true,
            "type": "vhash",
            "uuid": "81f2cbc4-b576-420a-a285-a974fd28a101",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485419",
            "to_ids": true,
            "type": "filename",
            "uuid": "8ccd0c1a-4904-447a-ba2a-2c4dd01656af",
            "value": "Succumbrewery.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  05/11/2025",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485419",
            "to_ids": false,
            "type": "text",
            "uuid": "05b0da26-ef27-4601-8235-1b5fc43ac7b1",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:9/67\nFirst Submission:2025-11-04T20:31:49.000000+00:00\nLast Submission:2025-11-04T20:31:49.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128699",
        "uuid": "0cdd517c-3155-44c6-b0ea-9297f82fba32",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499241",
            "to_ids": true,
            "type": "md5",
            "uuid": "30259825-f743-4549-9938-a4579a63dd75",
            "value": "0478a2aa9395f855f46567c753a5e4a8",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499241",
            "to_ids": true,
            "type": "sha1",
            "uuid": "f6bdd384-d24c-4414-bc2a-6a92e5001010",
            "value": "4219a95563ae2d6a376a18f06b5d26cefae99efb",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499241",
            "to_ids": true,
            "type": "sha256",
            "uuid": "1a894c06-d4d0-40c0-8f62-15d6a561e49e",
            "value": "79b9a0e5895fbc60a36c8393f2e6d9f7d70d491532578841aba5119d006dae0c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485441",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "4ed5c273-159b-4d18-a8dd-7d174b643513",
            "value": "98304:ERHK9FE9gi+HojqjQyP3CPkp+o/Kr9X+M:Ek9Ni+Ho+7v4+M"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485441",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "cdcb5973-2bf3-40d7-9a6b-5a718af7472c",
            "value": "4567184"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485441",
            "to_ids": true,
            "type": "vhash",
            "uuid": "b315f425-1d4a-4ff5-b81d-cd8dd0b65f32",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  01/09/2025",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485441",
            "to_ids": false,
            "type": "text",
            "uuid": "6d9ad3ba-4af5-4b86-8bc1-aea80b6f453f",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:22/67\nFirst Submission:2025-08-31T07:31:36.000000+00:00\nLast Submission:2025-08-31T07:31:36.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128721",
        "uuid": "2dc58753-ca5c-4991-a9b5-3b978776b7d7",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499242",
            "to_ids": true,
            "type": "md5",
            "uuid": "3f996e23-bfdf-4e1f-9884-97300713cb85",
            "value": "4648fcaba36ca3b74e59477bdd90faf4",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499242",
            "to_ids": true,
            "type": "sha1",
            "uuid": "7f69d4fa-18d7-4ba1-98d7-70c236cd12c7",
            "value": "1ea9b025326e32a50e67d34735b306bd8c7cca1b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499242",
            "to_ids": true,
            "type": "sha256",
            "uuid": "5037c47a-0d7a-4367-9c14-6e3152e33215",
            "value": "a6948eaef6f9f852c8ecf6f31b3defbbda5829ade95a2e199794258f2864dce1",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485463",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "36abdde7-d807-489d-8e1d-1b8ef69a43ce",
            "value": "98304:cXgbl/Tnu+sXg+cC9yV3pwWoQzFn6V9/Hno/Kr9nni:Kg6LcR6VlLni"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485463",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "65a15026-57ff-4a57-8ec3-6b23ff18aeef",
            "value": "5050512"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485463",
            "to_ids": true,
            "type": "vhash",
            "uuid": "de4f2f82-8108-4eb1-b944-840d259a7ec4",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485463",
            "to_ids": true,
            "type": "filename",
            "uuid": "aae2e938-7b5f-4e9a-bcfb-74c476a66395",
            "value": "lkzolo9y.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  11/08/2025",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485463",
            "to_ids": false,
            "type": "text",
            "uuid": "143fa012-4d96-4991-84e0-c987f91db630",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:9/67\nFirst Submission:2025-08-11T14:16:41.000000+00:00\nLast Submission:2025-08-11T14:16:41.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128742",
        "uuid": "80d98250-549e-43e5-898a-814bda5ac0c1",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499244",
            "to_ids": true,
            "type": "md5",
            "uuid": "dcf34795-e80a-4c80-8d73-c4cc1f056c87",
            "value": "f44e4cdc42d0b32ea4a5c15295efc478",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499244",
            "to_ids": true,
            "type": "sha1",
            "uuid": "d0f2ff4c-505d-4ce1-b6db-90ea4e117176",
            "value": "736a24d1c1b1f4b1df1b16f85454c3e8e4343f6b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499244",
            "to_ids": true,
            "type": "sha256",
            "uuid": "0d712722-2f97-4a83-8904-a427b207e981",
            "value": "0bfdec349b5058f51a916dd267a7861e1f493707bab2942f5fec98c33831cbab",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485484",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "fdfd3bf8-d8ea-4164-b8c0-4994bcb66985",
            "value": "98304:Nuk5KJOGqHdoisImWrsv8fXUUo/Kr9Xoj1v:Nu+KJOTsIprE8fkOo5"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485484",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "39d9de81-aa16-4fec-a442-86ca54d532bd",
            "value": "4931728"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485484",
            "to_ids": true,
            "type": "vhash",
            "uuid": "685f1efd-39d2-4ece-b786-e05a304432e5",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485484",
            "to_ids": true,
            "type": "filename",
            "uuid": "4560d505-643f-4d89-9ce2-8112f224507f",
            "value": "d8sfq7.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  09/09/2025",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485484",
            "to_ids": false,
            "type": "text",
            "uuid": "fa75841e-c48e-42ed-a533-aaf724b0ffaa",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:13/67\nFirst Submission:2025-09-09T14:07:53.000000+00:00\nLast Submission:2025-09-09T14:07:53.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128764",
        "uuid": "f62153a3-8a04-4d30-aa8f-076a2472e8ce",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499245",
            "to_ids": true,
            "type": "md5",
            "uuid": "f3b7f45d-6167-4138-8692-25280aafa3f4",
            "value": "b498d8fe8c4154b60ba2d7ad1b2095fb",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499245",
            "to_ids": true,
            "type": "sha1",
            "uuid": "a51ee8a3-0352-4a30-900a-378f71cc617a",
            "value": "cd460a8f8c85317d0b1a48a3b3c14140bc73b823",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499245",
            "to_ids": true,
            "type": "sha256",
            "uuid": "3a21694d-ba34-43c9-9589-0699e90ae7ab",
            "value": "a3dcb4da083716ffe25e4d2d47b121cb906cf5c01ad52ba99e074b5fe6edc5c8",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485506",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "cec9f1d0-60fd-455e-8aff-832edbfe23cc",
            "value": "98304:z1mLAJm7aJsGC058I1hhIFf8aZ9giPbo/Kr9nSC:z1CX7aJHeoI3gySC"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485506",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "b49dd1f4-426a-468c-aed8-fe1dcd0d9a2b",
            "value": "4755600"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485506",
            "to_ids": true,
            "type": "vhash",
            "uuid": "fea6ff77-5a86-4756-bd32-c6318de94ec9",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485506",
            "to_ids": true,
            "type": "filename",
            "uuid": "ed62d52d-0802-4d52-ac50-e4f6c33440de",
            "value": "Blondelittlesistersleeprape.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  20/07/2025",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485506",
            "to_ids": false,
            "type": "text",
            "uuid": "e8f1adbf-65b0-4f49-a23c-e8d3996de36f",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:4/67\nFirst Submission:2025-07-20T07:00:05.000000+00:00\nLast Submission:2025-07-20T07:00:05.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128785",
        "uuid": "2f80f04e-03b1-4d89-84a2-6e99a9c824ea",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499246",
            "to_ids": true,
            "type": "md5",
            "uuid": "50ddd290-a71c-47f9-8d97-0c62e236ed38",
            "value": "ffb58cff43ecfb3e86e6b392de5d16d2",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499246",
            "to_ids": true,
            "type": "sha1",
            "uuid": "2374e5a3-62ab-4ad8-99de-69d03d3020e4",
            "value": "dfb963c6f1d2a19a2f2a9dedf5ce29682fd05546",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499246",
            "to_ids": true,
            "type": "sha256",
            "uuid": "6977a8ab-2418-4899-8fa2-3b35447e8f6d",
            "value": "5aefd7f805b82fd8bcc8030c913d7db5a6aa770200c4150cc4d0943ece1fee7c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485528",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "cd1ac5fd-d7c2-4b31-81ee-e31b2a253ff0",
            "value": "49152:p5OkwVmGx+hIuFbr4HT8aGOqIQ7a42tt+ZtAp8scGCSpd7Omo/KrirxN1yc1:jbbEHTjGOux2t0zApimo/Krirn1yc1"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485528",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "4600f8e5-13cf-4aaf-a9c4-742ca2bf3832",
            "value": "3375776"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485528",
            "to_ids": true,
            "type": "vhash",
            "uuid": "660b4048-c177-4afd-8f0f-5b1c8cce06f4",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  11/05/2025",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485528",
            "to_ids": false,
            "type": "text",
            "uuid": "d1311cef-3ac4-45c4-9b66-9ae4d25b3d71",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:23/66\nFirst Submission:2025-05-10T11:45:23.000000+00:00\nLast Submission:2025-05-10T11:45:23.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128807",
        "uuid": "57e87924-5f8d-419f-a124-2ea0faecbc55",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499247",
            "to_ids": true,
            "type": "md5",
            "uuid": "4faae04c-9de7-4623-bc7f-1df71aee4c38",
            "value": "3e4a737b74479f22bf7902d7632f78dc",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499247",
            "to_ids": true,
            "type": "sha1",
            "uuid": "f8c8bffd-b8b1-4b16-b7f8-5578eac654ac",
            "value": "be46b4c9b53b8bb6212af143007b07e0c9db8885",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499248",
            "to_ids": true,
            "type": "sha256",
            "uuid": "6e83e035-4701-4581-bad4-7dd60ed851ef",
            "value": "2551d9f94711bb2e21855665a2ebc82f2ce330e1fb54329631af74ebfbb9f39c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485550",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "94a9c212-fa40-4d75-9030-96fe2a6d29db",
            "value": "98304:Q1rQBmvG1IhkVrHYFzYzp8jV7xFbMKTQS18FrvFo/Kr9b3e:OrJK8YUFO8J7F8BN3e"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485550",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "ae4e90de-a12b-410e-9118-0540981453bf",
            "value": "5021840"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485550",
            "to_ids": true,
            "type": "vhash",
            "uuid": "f219c84b-83c4-4069-a4f5-b0f04eac5618",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485550",
            "to_ids": true,
            "type": "filename",
            "uuid": "76733093-a57e-48a3-820e-9caf058d8711",
            "value": "gejs8.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  29/09/2025",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485550",
            "to_ids": false,
            "type": "text",
            "uuid": "937a8cb8-430e-4a90-a748-b024a29f55ec",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:20/67\nFirst Submission:2025-09-28T10:59:58.000000+00:00\nLast Submission:2025-09-28T10:59:58.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128828",
        "uuid": "f063d745-b4a5-4725-b4fa-c7577f135baa",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499249",
            "to_ids": true,
            "type": "md5",
            "uuid": "223de4c8-3431-47c8-8ed9-81c6570a3e31",
            "value": "50f3dda4698b6e0e9f449fa4fffd9871",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499249",
            "to_ids": true,
            "type": "sha1",
            "uuid": "0ff62969-50f2-4d9b-b39e-4dbfce88055e",
            "value": "f451ab5c29fdded550d59add3284e85c78ddb623",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499249",
            "to_ids": true,
            "type": "sha256",
            "uuid": "10b5f2b3-8e78-49a3-a3ff-527515bd6d1f",
            "value": "4f19b9b14613a4786d06215cc71d4736c8e987e4f02ffdc5824cd9a6087d9776",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485572",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "47db61da-a5be-4ece-ab47-939396c65aca",
            "value": "98304:puczMPS9rYaO68dMRW4APxnoZl7aX7o/Kr9X0KH:UczheD68KNTOH0m"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485572",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "3b0c34e6-ef63-41b1-b382-56f5684a51ed",
            "value": "4583568"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485572",
            "to_ids": true,
            "type": "vhash",
            "uuid": "a58a38fb-3b04-41dc-9cfa-5fbcea5b9aab",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485572",
            "to_ids": true,
            "type": "filename",
            "uuid": "f822b8ab-aba7-450c-9dff-f72c3c6f99cb",
            "value": "9shxg.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485572",
            "to_ids": false,
            "type": "text",
            "uuid": "c1e81d90-eb1e-4210-b87b-6a906a9d034b",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:24/66\nFirst Submission:2025-08-21T09:15:55.000000+00:00\nLast Submission:2025-08-21T09:15:55.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128850",
        "uuid": "66fbc636-4f41-449a-85f7-79ce6b19082c",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499250",
            "to_ids": true,
            "type": "md5",
            "uuid": "684cfa7c-c8ee-4a63-9a3a-737df0eb0f4f",
            "value": "18866cf0842cb47eddaa9234f80662e8",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499250",
            "to_ids": true,
            "type": "sha1",
            "uuid": "32850cb2-9c5b-4711-903e-914cd95b45b8",
            "value": "4337ebc790529098f9c4a9e6ac3fa2dbf5866e39",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499250",
            "to_ids": true,
            "type": "sha256",
            "uuid": "f42319c3-d79c-4f25-bf11-3f7e35c46202",
            "value": "21ced8f0f46bbb4b8390dc1a90842c25135a1763bd92a84305cd4604582740e3",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485593",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "54f0c40a-6987-4c5d-9131-7f42116d5069",
            "value": "98304:X8QK9yDnozpPl/J6d/LICnGQTwlnHNKG9o/Kr9XMriQ:Xk9yTKl/J63dTUHNKGZMrd"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485593",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "05a2a05f-819b-405c-9d93-397f84c1fcba",
            "value": "4563088"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485593",
            "to_ids": true,
            "type": "vhash",
            "uuid": "38ea22eb-cef8-409f-8b4b-66bb03cd7170",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485594",
            "to_ids": true,
            "type": "filename",
            "uuid": "6fe549a1-0220-4b5e-9837-d2fd414ace6f",
            "value": "mtg3pcf.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485594",
            "to_ids": false,
            "type": "text",
            "uuid": "94da187a-2f79-42ce-91a9-6d79558735f8",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:29/66\nFirst Submission:2025-10-29T18:18:32.000000+00:00\nLast Submission:2025-10-29T18:18:32.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128871",
        "uuid": "3201ff31-f8e0-4fb6-9c99-9cf79eaaed2e",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499251",
            "to_ids": true,
            "type": "md5",
            "uuid": "8e0851ce-e798-4641-9a6a-df4afce1a6e1",
            "value": "c921d459c4cf98f7043e9fb074cc114b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499252",
            "to_ids": true,
            "type": "sha1",
            "uuid": "77d19d86-4e13-4a37-9510-b391fcd9c2f4",
            "value": "bd5d1b5c2531837924d13ecc5672d459ea7f08c4",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499252",
            "to_ids": true,
            "type": "sha256",
            "uuid": "b10622f2-56d3-4c97-8179-27c952fad4c4",
            "value": "7979fc758697649b71fa48c3165bfdfef55bfc26b13b874511f4ecbb5c4a0cc8",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485615",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "e7e2a0b9-aa31-44c0-886c-a22dc7301b8e",
            "value": "49152:ZNtCJFlkgPHIo+b5DZ/agSNBchDQg2Po9rZdl8evtegCSpd77o/Kr9XsdCSik:sJFyPutBcj2WVd+evTo/Kr9X/Sik"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485615",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "4b453204-b7eb-4f84-85b9-305990417920",
            "value": "3624883"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485615",
            "to_ids": true,
            "type": "vhash",
            "uuid": "799c4edd-f816-4797-aad9-9bb1a41d584f",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485615",
            "to_ids": false,
            "type": "text",
            "uuid": "4e56f31a-c69e-4f5a-8c8a-36808eddd290",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:25/66\nFirst Submission:2025-11-05T07:24:54.000000+00:00\nLast Submission:2025-11-05T07:24:54.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128892",
        "uuid": "9b9da4ec-d247-4f4d-a0fe-b5942e4113d5",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499253",
            "to_ids": true,
            "type": "md5",
            "uuid": "5e3a3033-2e32-4c0b-b7dd-661320155dc1",
            "value": "0f59d3c1bac19b9207fba17ee095cd98",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499253",
            "to_ids": true,
            "type": "sha1",
            "uuid": "7c7a74f2-d603-43d8-be04-44fd0fb68668",
            "value": "3b046d7454e4f5adb55fed25007ebed74f60f062",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499253",
            "to_ids": true,
            "type": "sha256",
            "uuid": "865e41fa-54c6-493c-a57c-dd763fd6399c",
            "value": "56b48047788e7dbf02d3e2c41df0679f5d3f0350406378476df113b577e875af",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485637",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "51bbb3e7-6447-4a81-9ec5-c8911457354d",
            "value": "49152:aAYXvY+6l/OqHD0yP+diDzjUkhzHHxr8+LHXqCSpd7Go/Kr9/tmF7P:8Xgbl/TAW+sXgkBxr8+jZo/Kr9/E7P"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485637",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "f05396de-36c0-4287-beff-4d9a61486999",
            "value": "3485619"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485637",
            "to_ids": true,
            "type": "vhash",
            "uuid": "b039ab0d-6a26-486a-a5da-021a5ccefb1a",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485637",
            "to_ids": true,
            "type": "filename",
            "uuid": "9e566cd1-6872-4b26-b733-848622449728",
            "value": "v9lta9u.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485637",
            "to_ids": false,
            "type": "text",
            "uuid": "2e481b96-d4b0-4ded-bb44-69ba5ccbbc69",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:24/66\nFirst Submission:2025-03-08T06:11:04.000000+00:00\nLast Submission:2025-03-08T06:11:04.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128914",
        "uuid": "48c38182-e6fe-4fa6-b39b-1652ebd8cbd6",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499254",
            "to_ids": true,
            "type": "md5",
            "uuid": "6dc38652-d919-43a5-8626-97f784f0f780",
            "value": "c573aafcd6cebc92e1104930fa20ad16",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499254",
            "to_ids": true,
            "type": "sha1",
            "uuid": "9e0843d9-b1bc-4b31-a17b-77493fb38e99",
            "value": "bbfe3104192746732d5e37fb2bd852e3a7de32bd",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499254",
            "to_ids": true,
            "type": "sha256",
            "uuid": "2fba8ca2-2772-4487-8763-da017d690e6b",
            "value": "51c2121a6206d6f39f9c9287831490ab1163ff1a3b3a601a236a3b13e6612be1",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485658",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "66b3598b-ed96-4078-bafa-126175b2b789",
            "value": "49152:hKEPnbadIyrpyTjX8uAD3Irajfv0+YFedVmA5jfGfFjur+CSpd7No/Kr9/Xohw98:h7r8upajnrYFeVNStPo/Kr9/kw98"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485658",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "c15bf24e-e7cd-4bf8-944b-bc75d32de499",
            "value": "3309491"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485658",
            "to_ids": true,
            "type": "vhash",
            "uuid": "5bfd963f-377b-4935-97f9-defa12223ed4",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485658",
            "to_ids": true,
            "type": "filename",
            "uuid": "bb81570a-b71f-4e0f-8f31-ca7f5a4dbab8",
            "value": "Ntrlegend.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  21/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485658",
            "to_ids": false,
            "type": "text",
            "uuid": "82f584a7-f1be-4c57-8b86-b858cf61eb64",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:15/66\nFirst Submission:2025-05-21T11:05:32.000000+00:00\nLast Submission:2025-05-21T11:05:32.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128936",
        "uuid": "605d7b1d-fbc9-4fe0-b3b9-e21a03a02f05",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499255",
            "to_ids": true,
            "type": "md5",
            "uuid": "867e7eb0-316e-441b-9409-dfdf6b312a1a",
            "value": "e4fa88a50ce69e6ab0385a05d5a0dc13",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499255",
            "to_ids": true,
            "type": "sha1",
            "uuid": "cc92d45d-ce4b-4c41-809b-4698a43655e8",
            "value": "771e7cbe92392ee931acf081a11d5d211c98fb0f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499255",
            "to_ids": true,
            "type": "sha256",
            "uuid": "565771bb-bd15-4dc2-8bd5-fd04955768d1",
            "value": "b5fa6f952ee96e4860e3dae3dd54773dec35032c596c488ecbf38745f8e2d592",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485680",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "8d530675-62ed-46c7-891f-54d1b9414451",
            "value": "98304:3kwhYSTsnpPnIF9DwEOggpIOSoiuzsALe35YEvwco/Kr9XA6XJ8:vYSYhIF9igAI/uzDCAX"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485680",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "f04898da-0e8a-4cf3-9ed4-06f0c8277faf",
            "value": "4845712"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485680",
            "to_ids": true,
            "type": "vhash",
            "uuid": "8a4be50e-f882-4cd3-a0b1-1ea028b5dd10",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485680",
            "to_ids": true,
            "type": "filename",
            "uuid": "bef26d27-549f-4db4-b019-3957d37b3ab4",
            "value": "Valorant.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485680",
            "to_ids": false,
            "type": "text",
            "uuid": "b24e0615-c458-44bb-b73e-b46cdb6a8dc6",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/66\nFirst Submission:2025-09-12T06:55:54.000000+00:00\nLast Submission:2025-09-12T06:57:27.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128957",
        "uuid": "d577c681-bef1-45a3-a50d-4bcb5202e1b2",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499257",
            "to_ids": true,
            "type": "md5",
            "uuid": "dd7537a4-8981-4438-996e-8506cc954be4",
            "value": "863f3753f7be29d97aeb910edd5df2df",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499257",
            "to_ids": true,
            "type": "sha1",
            "uuid": "c04a1b3b-808c-41ea-89dc-1f51aeb5eee9",
            "value": "b96986c4042e31bcb209cab29ec8d739e2414a9f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499257",
            "to_ids": true,
            "type": "sha256",
            "uuid": "6b74eb91-2540-4704-98c2-d004bb4c69c4",
            "value": "bc36c1c96de0e934a29e6e2d4705a96bed8c1b66aa9dbc8ca669365f1b7409db",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485702",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "5c40c918-153b-46ca-a152-3c66b489c0c2",
            "value": "98304:chRHGQqkmQ3QizAwfPS3Kpbfo/Kr9rnLwj:chV0Q3QGAYS3KBnLwj"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485702",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "6fe250f1-2bbd-4ee8-af72-821abda4b065",
            "value": "4669584"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485702",
            "to_ids": true,
            "type": "vhash",
            "uuid": "47008ea9-980b-469c-9e99-afe40ec697eb",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485702",
            "to_ids": true,
            "type": "filename",
            "uuid": "1e56ea8c-6fb0-4c7a-ac9a-22a7a0694999",
            "value": "ytysfafyt.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485702",
            "to_ids": false,
            "type": "text",
            "uuid": "d8007384-03ec-4fb0-8643-60288d6116d8",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/66\nFirst Submission:2025-09-03T06:40:26.000000+00:00\nLast Submission:2025-09-03T06:40:26.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780128979",
        "uuid": "a2a36030-d19a-4b9b-a33b-2d3f3a0cab53",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499258",
            "to_ids": true,
            "type": "md5",
            "uuid": "d1bb6ad3-97fb-4305-819d-cc81b3814b19",
            "value": "9b811b1568f94f7f4dc97af6ac3859ed",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499258",
            "to_ids": true,
            "type": "sha1",
            "uuid": "fd644c26-a8ed-4646-bdb7-961113b0f464",
            "value": "afc01eb075e11ca2c79e8b7a6fbfcf30bb72ec01",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499258",
            "to_ids": true,
            "type": "sha256",
            "uuid": "e3f6499b-e862-42bc-bde8-982115a5ae65",
            "value": "8f334b2e9cd92540d5f842de13ffe6c44d56365e9ff8e07bb45be7ecac82a692",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485724",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "e9639598-e479-427d-bd8a-b1dfeed99fdd",
            "value": "98304:aSBQMahQolg03bZdUaSV39PWupCx7qY3WYZVzo/Kr9vuKw:wbmaCV39PWquqcHnub"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485724",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "519bbac3-fd8d-42d0-9d4d-78c759a97a62",
            "value": "4436112"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485724",
            "to_ids": true,
            "type": "vhash",
            "uuid": "327dc9df-35f7-4ee5-85a9-c415d70ed475",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485724",
            "to_ids": true,
            "type": "filename",
            "uuid": "a7568f7e-6e51-4a19-8d68-965cc8c16dac",
            "value": "ufcisy.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485724",
            "to_ids": false,
            "type": "text",
            "uuid": "44a3e76c-a77a-43e0-992e-ecaf12757616",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/66\nFirst Submission:2025-09-09T02:50:05.000000+00:00\nLast Submission:2025-09-09T02:50:05.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129000",
        "uuid": "a1f0b2ab-4d1e-4406-af4b-40903d13927a",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499259",
            "to_ids": true,
            "type": "md5",
            "uuid": "e2dc15bb-3d82-48a9-99b4-000992f5288e",
            "value": "b9362ed08a719225f97d799169e2d02f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499259",
            "to_ids": true,
            "type": "sha1",
            "uuid": "e805881b-0536-452f-9aba-460fbd9a2f2c",
            "value": "66365aa23a5cd398884ee5ce9730c13a365163c1",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499259",
            "to_ids": true,
            "type": "sha256",
            "uuid": "573242f4-ae79-4bda-b790-e8c9855e5c47",
            "value": "de3aaa898ba1a429505554a2cb5b857e69ce2a15044f4ae1df1f1afcf1bec774",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485746",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "cd5425c0-39f9-4847-8a41-edc6a46f7ec7",
            "value": "49152:0j0sUl0lZCnSL7QR/vbf2GkchCjnwn4grCSpd71o/Kr9/GX0X7vNLs:HP0uSL7svr28Mbwn4Ko/Kr9/Gm7vNLs"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485746",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "5572a22c-7450-4896-9f3c-df4c414ca796",
            "value": "3076019"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485746",
            "to_ids": true,
            "type": "vhash",
            "uuid": "c140588a-cfd2-49fd-9931-e43727bdada5",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485746",
            "to_ids": true,
            "type": "filename",
            "uuid": "82bbecc1-3c3b-4d51-ad5a-9936621705ac",
            "value": "Naughtypirates.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485746",
            "to_ids": false,
            "type": "text",
            "uuid": "ca41a841-96c4-4e8e-b06c-a269c53f9bdc",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:20/67\nFirst Submission:2025-05-25T21:57:11.000000+00:00\nLast Submission:2025-05-25T21:57:11.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129023",
        "uuid": "c820d8f4-145c-4282-8098-53c86629381c",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499260",
            "to_ids": true,
            "type": "md5",
            "uuid": "33242278-0e6b-4606-b347-2bf074837ae5",
            "value": "9adfb1f4b34d88d6cd23d86c012306dc",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499260",
            "to_ids": true,
            "type": "sha1",
            "uuid": "664f5b64-8c2d-40f8-b302-18de2dbff825",
            "value": "7f4bd46d6c99ae43bf797dca0d03f3e4288eb12b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499260",
            "to_ids": true,
            "type": "sha256",
            "uuid": "d24a6bb1-30a9-4a59-9c0f-f124d5e9bdf6",
            "value": "5a884fe267cfe47308869aaf8968a750e696a884d6f959d81be5e1f4d0724558",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485768",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "69ed85de-3d71-4a60-9952-2c2ae5c58f56",
            "value": "98304:JiRMXLWZPGFoiNIWHnBvujew0O7/Qo/Kr9XCVv7i:S8FXbn95OeCg"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485768",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "9d6b9eb8-580f-497f-bdc8-f58e64614b64",
            "value": "3674035"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485768",
            "to_ids": true,
            "type": "vhash",
            "uuid": "626964b5-2d39-4c32-be45-ecb98cdb0f99",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485768",
            "to_ids": true,
            "type": "filename",
            "uuid": "d143add2-2d1b-494a-ba29-254f514b3b56",
            "value": "82hci.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485768",
            "to_ids": false,
            "type": "text",
            "uuid": "fceafb73-da2c-4c56-8cdd-fdce0ba9a1bf",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:26/66\nFirst Submission:2025-11-03T07:25:21.000000+00:00\nLast Submission:2025-11-03T07:25:21.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129045",
        "uuid": "f98afab2-3cc1-4e33-9cd3-d75bbd19d0ad",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499262",
            "to_ids": true,
            "type": "md5",
            "uuid": "c4c0257a-1c14-4b45-bffc-bfd5c16929f9",
            "value": "2464e09c00b8fd5e5f4d79c61eef3663",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499262",
            "to_ids": true,
            "type": "sha1",
            "uuid": "d0e0cca5-f716-423d-b5c7-93d4b976f76d",
            "value": "e262237b5e577496427864aaa404d393578062b4",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499262",
            "to_ids": true,
            "type": "sha256",
            "uuid": "27d83cf3-eac1-49d9-841e-e98a9037dc45",
            "value": "fcf868e3763a63eea7d776b20377f1ac562cc9d5daabd815d695151f677d5883",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485790",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "10f77610-5c81-4594-a57e-3bd170cbc015",
            "value": "98304:Pvw/xKQJFZKO/8gQAxRSjTn6K6vpQfDko/Kr9/y12:XwbKO/WFOy12"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485790",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "91bbbb7e-0756-4230-ae5b-982dcbf386b4",
            "value": "4661392"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485790",
            "to_ids": true,
            "type": "vhash",
            "uuid": "da5124fc-1254-4d40-9bc0-3c1a6c7ee657",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485790",
            "to_ids": true,
            "type": "filename",
            "uuid": "9dbce695-ba85-49e1-85f6-914440403800",
            "value": "l8yq0t.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  23/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485790",
            "to_ids": false,
            "type": "text",
            "uuid": "4a7658c0-ba2b-4999-8288-b5d668623ac2",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:29/66\nFirst Submission:2025-08-26T14:27:04.000000+00:00\nLast Submission:2025-08-26T14:27:04.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129066",
        "uuid": "e7d619f1-34e1-425f-a203-5b4ce4219b7a",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499263",
            "to_ids": true,
            "type": "md5",
            "uuid": "6c3013bb-6644-4520-95cb-7befe0e14781",
            "value": "44bb1fbbbcb08a31615aeccfa8b65782",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499263",
            "to_ids": true,
            "type": "sha1",
            "uuid": "c3773644-3ded-4bc8-9408-4734856ec21e",
            "value": "105f19dc8e37846c31806d276b88955672087580",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499263",
            "to_ids": true,
            "type": "sha256",
            "uuid": "67ea3616-9f2f-4927-a1e7-4d71ef473d29",
            "value": "a102fd8904aef0347c2698c6cdeeababe0fe5ec7e5c9089a654901a3d2a61a38",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485812",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "02ee59a6-f79d-4e5b-9594-f2114d591426",
            "value": "98304:ruk5KJOGN+t9bdyiVea5r6Tzilf6RMCzEdysk8vo/Kr9XAR1I:ru+KJOxbdnV96TWsarhLzA4"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485812",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "dbd8c309-62bf-4b88-9bdb-234e76a0631f",
            "value": "4927632"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485812",
            "to_ids": true,
            "type": "vhash",
            "uuid": "0c5dffa0-4430-47c7-ae56-163cb2ed3401",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485812",
            "to_ids": true,
            "type": "filename",
            "uuid": "965ac5ea-9609-4b60-a274-edcb2d7f87b0",
            "value": "5pwn92r4t.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  21/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485812",
            "to_ids": false,
            "type": "text",
            "uuid": "7d5a4c03-d41d-4176-8f4d-6b35213281d9",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:26/66\nFirst Submission:2025-08-10T11:07:30.000000+00:00\nLast Submission:2025-08-10T11:07:30.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129088",
        "uuid": "47a1ae00-bbb3-47c6-ba80-aeaea7e9c240",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499264",
            "to_ids": true,
            "type": "md5",
            "uuid": "71a7ecbc-268c-436b-9ac3-ad01febfac10",
            "value": "9d13730dc7f0a543d4c4a1647a8c3afb",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499265",
            "to_ids": true,
            "type": "sha1",
            "uuid": "649e4f97-f5f2-43c0-acce-a4aded368d38",
            "value": "6db96d5390d5ffe6192e7a6d1ae155e9fd0ccda0",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499265",
            "to_ids": true,
            "type": "sha256",
            "uuid": "16b2fa28-9834-47e1-b816-317978199378",
            "value": "1789a1efd3c537c7c0ec97b0322a6adb740ec99940b81e0ad292f14ac638e884",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485833",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "7491a8cc-b8a4-49de-90df-557227b465cf",
            "value": "98304:WztO6qa1xPwUg+Rwhutwg6+Vx7c0ypwTo/Kr9Xyxv:+ua3wh+mhQ6Izbyxv"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485833",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "edb02c5e-d95a-4bae-b4f7-7e3fe3af72fc",
            "value": "4747408"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485833",
            "to_ids": true,
            "type": "vhash",
            "uuid": "9b3f2851-c148-4d39-8153-05ca951e8bc6",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485833",
            "to_ids": true,
            "type": "filename",
            "uuid": "9f20c05d-a4df-4de8-bcc2-6aa150853e14",
            "value": "Touchitrikka.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485833",
            "to_ids": false,
            "type": "text",
            "uuid": "3ac613be-74ad-4753-ba29-a31f1ed2f0b8",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:26/67\nFirst Submission:2025-07-30T15:14:54.000000+00:00\nLast Submission:2025-07-30T15:14:54.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129110",
        "uuid": "d91d8ea4-fcc9-4c6a-bfc6-9e3ab939e4ff",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499265",
            "to_ids": true,
            "type": "md5",
            "uuid": "b2c126db-1dfd-4221-aeca-67e1edf86afd",
            "value": "94014620147de1a46d07ad34b217369f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499265",
            "to_ids": true,
            "type": "sha1",
            "uuid": "4217a48c-ef09-40f2-b585-7ea00dd02928",
            "value": "f5ff37e1a951cc848bf744c8ab97b5776d41bbf5",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499266",
            "to_ids": true,
            "type": "sha256",
            "uuid": "54c5872e-dfe7-48bf-b0ef-d549243f96e5",
            "value": "43bec51ccdb1f575ef216e6ca059af5d8a98bc1c5bbcc770ea6894eb1dc146b9",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485855",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "9bbee21c-6a5a-42f0-8580-68b436edb2d9",
            "value": "49152:bSEKdqLTJM3Hm/MftZx+JoEA+44BZSj9vm8IPCSpd7vo/Kr9/bdIYf0:BZKmkftZxyoVj4BcBvmLo/Kr9/yYf0"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485855",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "bc4278c3-5258-43ba-a91f-3a59f455e973",
            "value": "3702707"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485855",
            "to_ids": true,
            "type": "vhash",
            "uuid": "9264157f-3671-43a9-a252-b18ae21c405c",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  21/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485855",
            "to_ids": false,
            "type": "text",
            "uuid": "a672c3be-66cb-4f99-98dd-dac58327732a",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:18/66\nFirst Submission:2025-06-10T03:58:33.000000+00:00\nLast Submission:2025-06-10T03:58:33.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129131",
        "uuid": "b42df24b-b4de-4eb5-a1b6-f5a2499b74f3",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499266",
            "to_ids": true,
            "type": "md5",
            "uuid": "5c0dcab0-aef3-47e3-b314-360762726aaf",
            "value": "44c7f1d58e6bfc800b563616cc228f2e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499266",
            "to_ids": true,
            "type": "sha1",
            "uuid": "37d938c8-bc85-434b-a4c9-8bda39e5d71f",
            "value": "690801f6639d4815bd073f0c4793715f87cce961",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499266",
            "to_ids": true,
            "type": "sha256",
            "uuid": "d31c913e-5bdd-4bc5-a2ed-f491d3242463",
            "value": "bfcddc87ef43a47971d67ad2f813fd68de8e22e84f76576d6376e78cc9e47f7b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485877",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "e6888c0d-6c70-4e5f-a3db-c7f4a06a053d",
            "value": "49152:RsxHYnmwWKRuroD1GpSpfWTD2QWqZEWzDCSpd7Jo/Kr9/ytWQ:KYmLKRuroDApSNWTCqZrJo/Kr9/5Q"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485877",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "cf3f7432-1363-47da-9cc2-b95afd042d36",
            "value": "3407795"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485877",
            "to_ids": true,
            "type": "vhash",
            "uuid": "e1782338-c846-4be1-b947-62ff53cd51cf",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485877",
            "to_ids": true,
            "type": "filename",
            "uuid": "434388db-3b9c-408a-9046-e6047a780e20",
            "value": "bfcddc87ef43a47971d67ad2f813fd68de8e22e84f76576d6376e78cc9e47f7b.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485877",
            "to_ids": false,
            "type": "text",
            "uuid": "2e0b98ae-0b46-4491-b3f5-67f070b7eef5",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:24/66\nFirst Submission:2025-03-07T14:10:55.000000+00:00\nLast Submission:2025-06-04T16:19:55.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129153",
        "uuid": "1265dc2f-c355-4b39-950a-2c5d858c55ed",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499268",
            "to_ids": true,
            "type": "md5",
            "uuid": "242a0edd-bb55-4154-bdb5-a77beffc247e",
            "value": "9f27336f24a86c3d77ba355a1520a822",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499268",
            "to_ids": true,
            "type": "sha1",
            "uuid": "f584d610-7442-43f3-b909-e3e8478afd57",
            "value": "4dcc71f5d4e4cb885dea9940db595db7473ebd15",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499268",
            "to_ids": true,
            "type": "sha256",
            "uuid": "e4699c48-7ae5-4435-bd7a-09130550c99f",
            "value": "9ee52b276a47113e02a284055e5724a31d76c8d1c1a3c6d7a37440d761d10aa6",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485898",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "7402a205-3a8c-47bd-aba8-7d7bba8e3cca",
            "value": "98304:WSkELyOtObT6ZINn61GyWGfcNRtB3RK51JlEswMJIP0802gJo/Kr9nEOcV:W8LyBPNn61GTGfc7tjK5ZCKS0nEOU"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485898",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "7f30b92f-a1f2-4231-8261-462c4fb285e3",
            "value": "4739216"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485898",
            "to_ids": true,
            "type": "vhash",
            "uuid": "92aa3979-aa66-4645-97fc-782e7a2456c0",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485898",
            "to_ids": true,
            "type": "filename",
            "uuid": "a6a01e29-3f80-4f98-bb14-0a54d2048512",
            "value": "Deepsleep2tt.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485898",
            "to_ids": false,
            "type": "text",
            "uuid": "ba30ec9f-537a-450b-999c-cae863f5114d",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:25/66\nFirst Submission:2025-08-13T13:30:40.000000+00:00\nLast Submission:2025-08-13T13:30:40.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129174",
        "uuid": "b3bb918d-ca76-47b3-9432-a8f466a96f45",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499269",
            "to_ids": true,
            "type": "md5",
            "uuid": "173b6dda-ef98-4a5c-8bc7-2d3e80e84f8e",
            "value": "76a81f30cacbba6a4d1bfb29891bee61",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499269",
            "to_ids": true,
            "type": "sha1",
            "uuid": "7e4e7bf1-1814-4b7d-9c26-17bb19b03462",
            "value": "612c14549acb2fa7f3b7a6f24de8f9af2e661601",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499269",
            "to_ids": true,
            "type": "sha256",
            "uuid": "b68f037a-c799-4448-9507-6d08b6c4e873",
            "value": "07089a53c79a03a1862a4013a5e75e166da097802af79639258f07267ef5c5d7",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485920",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "5b0de5f4-eb3f-401f-8202-f3a35eb9736d",
            "value": "98304:nqzxPVvMDOu3unS41CWiCjVZVPUy8ukHPS40Ro/Kr9rALf:uxNkDR3X41CIVP3ASBRAL"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485920",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "c41d70e8-5b22-4f55-a121-e8ebbae64d9c",
            "value": "4726928"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485920",
            "to_ids": true,
            "type": "vhash",
            "uuid": "5a9f1147-a6d2-4d0d-821b-30a5109a21bd",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485920",
            "to_ids": true,
            "type": "filename",
            "uuid": "3325979c-0374-4af8-92b8-9eb97d594e28",
            "value": "60y1jiz5.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485920",
            "to_ids": false,
            "type": "text",
            "uuid": "f99464bb-74ae-4c3b-b138-baab9f8de5f5",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:27/66\nFirst Submission:2025-08-20T17:11:15.000000+00:00\nLast Submission:2025-08-20T17:11:15.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129196",
        "uuid": "a1f4fa76-3237-4eb6-a54e-84d1a1cc9efe",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499271",
            "to_ids": true,
            "type": "md5",
            "uuid": "046b297b-4689-429d-91b6-75ef561fb93d",
            "value": "6e01fba3c98f541803a6b3c922e50ed4",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499271",
            "to_ids": true,
            "type": "sha1",
            "uuid": "344345ea-055a-490b-88af-bd9254e5760e",
            "value": "5fef995461fb230a7b23e502a3ee5373058b5147",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499271",
            "to_ids": true,
            "type": "sha256",
            "uuid": "27cc46e2-b841-42eb-87b3-7472970295c6",
            "value": "096ad9dac66c686fa053f8f0c48589b478ccc8ab543e29648280ebdc63cb27f8",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485942",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "c036b132-8ad1-48bc-8383-0974edc93a90",
            "value": "98304:6h0Frsjk9kdD2QtD+MHZHzOSKgaYo/Kr9r2IGCib5j:6hWukeBZ+MILgd2IEb5j"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485942",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "b10e072f-d324-4ecc-ac3b-c35e18c15b93",
            "value": "4665488"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485942",
            "to_ids": true,
            "type": "vhash",
            "uuid": "d5f7ad27-e920-4c0e-80db-b1a442840bb2",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485942",
            "to_ids": true,
            "type": "filename",
            "uuid": "528abf0b-6e60-4608-bed4-2b6cb4bb7bfa",
            "value": "qho6rcpvx.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485942",
            "to_ids": false,
            "type": "text",
            "uuid": "63ed5fc9-4786-4241-92e6-2a768c74b2db",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:26/66\nFirst Submission:2025-08-16T15:28:31.000000+00:00\nLast Submission:2025-08-16T15:28:31.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129217",
        "uuid": "94373876-1396-4fc4-811b-c188cdeca89c",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499272",
            "to_ids": true,
            "type": "md5",
            "uuid": "6dd90287-7d92-4e71-9449-60e34b6cdc63",
            "value": "be0c31d49d18aa92d0b52391825c2ce8",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499272",
            "to_ids": true,
            "type": "sha1",
            "uuid": "df8cd3a2-88d8-45b3-8c0b-fa0f2b984146",
            "value": "58b0c06c7622c284d7f54c02c4ec50bec6ef367e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499272",
            "to_ids": true,
            "type": "sha256",
            "uuid": "d1c9e3a1-336b-4c67-8a7c-39446f813c8d",
            "value": "51b494c63ba604486d754218195a774053de26097c1d4fbec109fe8e4306b5e9",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485964",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "2bb316dc-c1e9-4970-8e25-974cde471baf",
            "value": "49152:wDYnm6+cEt4oIk2eOLY+u8JE5ataCSpd7To/KrLYCaGT1z:8PrZ3vcuXvo/KrLYsTB"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485964",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "399642a8-649d-47f0-bbc2-68b196f376c6",
            "value": "3334816"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485964",
            "to_ids": true,
            "type": "vhash",
            "uuid": "68fe7271-4215-4fdd-b698-e7da2a20693d",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485964",
            "to_ids": false,
            "type": "text",
            "uuid": "97e1b942-7195-4fcf-92a5-7a267267e665",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:24/66\nFirst Submission:2025-05-10T04:40:15.000000+00:00\nLast Submission:2025-07-01T06:07:42.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129239",
        "uuid": "c21b72d2-f3e3-4f44-a1bd-c523bca9397d",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499273",
            "to_ids": true,
            "type": "md5",
            "uuid": "cd544cd6-8426-48c4-a3b7-f6d7cf6e223b",
            "value": "64f6fac79cc2a34f0db0acd728fc3535",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499274",
            "to_ids": true,
            "type": "sha1",
            "uuid": "a0d58c94-ab93-4173-ac6c-eb0efe1f87f4",
            "value": "3248c8182e756b76f091a9616ae423eacd78e2e0",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499274",
            "to_ids": true,
            "type": "sha256",
            "uuid": "599f2e89-0829-4938-8543-bc37b966e545",
            "value": "b35810c97b633d99a4bb111a3ecc2bc970713dc2a932351294f07c75c8af1e3b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779485986",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "58a69818-7ba1-472d-b0ad-171685e9bc4a",
            "value": "98304:fuAiWULchjaGfrMBX8QlAn71BfL/+YAXhi3xCo/Kr9/+gKX:G5LcEkriNMrLmRi3x0+X"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779485986",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "3c0b029b-75d2-4d69-9f51-6ceef3557c88",
            "value": "4628624"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779485986",
            "to_ids": true,
            "type": "vhash",
            "uuid": "1e0d1fd5-aaf3-41db-b8d4-4d849fa5532b",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779485986",
            "to_ids": true,
            "type": "filename",
            "uuid": "4cc6aeeb-bc83-42d7-affa-dd929d66f19f",
            "value": "Ntrlegend.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  21/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779485986",
            "to_ids": false,
            "type": "text",
            "uuid": "c9ebebdc-d57b-4ac8-8ec9-d6181ea379e8",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:18/66\nFirst Submission:2025-06-21T10:10:16.000000+00:00\nLast Submission:2025-06-21T10:10:16.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129260",
        "uuid": "123351ba-3240-4555-b083-3de7e89ad232",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499275",
            "to_ids": true,
            "type": "md5",
            "uuid": "9fb3d711-8300-45bd-8830-49b9a22034e7",
            "value": "6d9b80602bd989afc2468be03296ea36",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499276",
            "to_ids": true,
            "type": "sha1",
            "uuid": "c9776f26-ce85-4a95-a7e8-aede37930a81",
            "value": "660a6830fc15871c71101645f742c8c969d50102",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499276",
            "to_ids": true,
            "type": "sha256",
            "uuid": "5a2eec64-12e6-47bc-b1bf-8f3dfc4a4ebf",
            "value": "a7f3a2a910ab059fc8f6cbab40c5d546134df48d532374c20a98466ba12a4500",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486007",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "09837417-9248-4306-b221-317cbbfb8568",
            "value": "98304:XogMQbDyLj9P6hnrkFVu8/N8XaDf4Ao/Kr9XiW8n:b/iLj9yhrkFBNOab1iX"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486007",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "58ed4e78-d7c3-43ec-a4f2-a2ace08e9e92",
            "value": "4771984"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486007",
            "to_ids": true,
            "type": "vhash",
            "uuid": "b84d5187-e364-4a3f-95e6-32434eb73954",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486007",
            "to_ids": true,
            "type": "filename",
            "uuid": "165d0e91-e589-4271-bb3a-93ff5b4e2d0d",
            "value": "165i1xfsr.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486007",
            "to_ids": false,
            "type": "text",
            "uuid": "a76358ac-648a-42f2-8b34-57e97f03376b",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:27/66\nFirst Submission:2025-09-16T08:53:55.000000+00:00\nLast Submission:2025-09-16T08:53:55.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129282",
        "uuid": "a7e6a310-d24b-40ed-b286-b8db46e2728b",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499277",
            "to_ids": true,
            "type": "md5",
            "uuid": "b6dc917a-8ade-4cfe-92eb-f8d149b39532",
            "value": "38fa1af7866698c8a584378a2ed69308",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499277",
            "to_ids": true,
            "type": "sha1",
            "uuid": "77679e2d-85a2-43e1-a60f-676acdb5be8f",
            "value": "b691321cf806383020bcfe38694a2f78fdd8b0e6",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499277",
            "to_ids": true,
            "type": "sha256",
            "uuid": "a4380473-6977-4823-96f9-d1d7a640325d",
            "value": "29ce3542429fec5869cf3fc3aadfbe0fbe21a9a2e3013e3f15163a35a7b12e7a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486029",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "1f0a1384-af92-40d9-872e-7e28eac78afe",
            "value": "49152:4K/30Dhdjy0ak9TjxYapPdv2zIT1wCSpd72o/Kr9/AqPss:XCPy1k93xXzv2zITvo/Kr9/Lss"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486029",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "ded80b8d-a74d-4c22-a87b-30bf6260a71f",
            "value": "3112884"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486029",
            "to_ids": true,
            "type": "vhash",
            "uuid": "97facf24-ff97-47d9-b786-35b38f725a00",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486029",
            "to_ids": false,
            "type": "text",
            "uuid": "4f588461-454a-471b-a7fe-7735ecb14ed7",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/66\nFirst Submission:2025-06-18T03:17:48.000000+00:00\nLast Submission:2025-06-18T03:17:48.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129303",
        "uuid": "ee5d1a33-3ab4-48a0-babb-5a0c72121c3b",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499278",
            "to_ids": true,
            "type": "md5",
            "uuid": "5abe225e-ba25-42c8-9eeb-31959492c786",
            "value": "2ea2afccca69678600408582dd98fcea",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499278",
            "to_ids": true,
            "type": "sha1",
            "uuid": "c38fd9c9-4e36-4e6f-8e72-573793437055",
            "value": "76faddd8b05e23e8db2d1c8f22f6859a3e315ba5",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499279",
            "to_ids": true,
            "type": "sha256",
            "uuid": "a2eafa24-d757-44a0-99b8-4484775ceda8",
            "value": "12a47e39bce4fb275fdbedf2ceba06af28dbc8ec014f1a5a8f6e67c4c9635a39",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486051",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "4e5f3b5f-0234-47bd-8e83-1266287ff6b1",
            "value": "98304:ISkELyxZObT6ZY6UsUu2J78d4f/o/Kr9ntxPl:I8LyO96NUu2w4Ltn"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486051",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "a3cc29ae-690e-4df8-a982-c9b0b95ea232",
            "value": "4739216"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486051",
            "to_ids": true,
            "type": "vhash",
            "uuid": "8339c836-7742-4df6-a3cc-2f92a5f92649",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486051",
            "to_ids": true,
            "type": "filename",
            "uuid": "f45a2316-c3b8-46ae-b4b0-3968a9f941e6",
            "value": "Deepsleep2.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  23/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486051",
            "to_ids": false,
            "type": "text",
            "uuid": "3c68528f-7077-4a6a-912c-f2dc1af0063b",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:29/66\nFirst Submission:2025-07-17T16:42:53.000000+00:00\nLast Submission:2025-07-17T16:42:53.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129325",
        "uuid": "a2b53441-282e-4459-a461-f27bb3d30685",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499280",
            "to_ids": true,
            "type": "md5",
            "uuid": "3906d5c5-4ffb-4c77-847e-0f1e553cbb8f",
            "value": "286f660b3a8c055dc5b0c59cb00bbb15",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499280",
            "to_ids": true,
            "type": "sha1",
            "uuid": "ee916107-a1b2-453a-bdac-b46fd2a0b193",
            "value": "55b5646426c0ccba2d9820abfa000a872682b69c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499280",
            "to_ids": true,
            "type": "sha256",
            "uuid": "9a6ade61-99f1-4247-98eb-a980175429af",
            "value": "4e206fa1ee40499cc4297fae0b32402e3c36016624bfa0c00c13a40c4f355051",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486072",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "adee229f-9af6-40a2-8cce-54a5f046a5df",
            "value": "98304:PnJ5HzQeT/DiE9q7AMJy6i73S8P5sIbl24xdyZnarO+tMQXGeo/Kr9XfJF:PJpz5T+E9q7Asy68nb3doaC+3ff"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486072",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "bacf9972-46f5-490a-9fb4-683f9d2e0892",
            "value": "5304464"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486072",
            "to_ids": true,
            "type": "vhash",
            "uuid": "550ad14d-56f4-4d6d-a770-9ef46dcb382e",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486072",
            "to_ids": true,
            "type": "filename",
            "uuid": "29a67f20-5876-419b-9380-2d35e1458a12",
            "value": "om7yjg05.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486072",
            "to_ids": false,
            "type": "text",
            "uuid": "fb01ca46-694a-48c5-9054-575ba889c153",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:27/66\nFirst Submission:2025-08-18T17:49:05.000000+00:00\nLast Submission:2025-08-18T17:49:05.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129346",
        "uuid": "df48c739-80e0-4154-b8fe-88348f79df2c",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499281",
            "to_ids": true,
            "type": "md5",
            "uuid": "849d5d6f-0ef8-4ddc-b1f0-eecee4b53785",
            "value": "02e5739966c558aa56b90e327d2473de",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499281",
            "to_ids": true,
            "type": "sha1",
            "uuid": "9ced3b25-1c94-4de3-8d0a-91fda555b748",
            "value": "93a2e7a212ab71d63c393951e7ab4b252daf9924",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499281",
            "to_ids": true,
            "type": "sha256",
            "uuid": "c6afcb14-382b-4217-a161-8c79ec5b8b33",
            "value": "fae29a48af3a6908f8ce26dbdf860d8680a024d4951d8c0dddf7818db75c4886",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486094",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "f7343170-c455-4037-b571-3f2d217b019a",
            "value": "98304:A9danTXnPW3nrA/mixjNX7MHcw29AHwOIhpo/Kr9rqz:A98zP0r0midNQcwwAHrIXqz"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486094",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "0f0d6447-4352-4554-9803-3ab13eeb48d5",
            "value": "5099664"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486094",
            "to_ids": true,
            "type": "vhash",
            "uuid": "034d3c6f-865b-4c7d-9d43-e2a118d5b553",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486094",
            "to_ids": true,
            "type": "filename",
            "uuid": "741682e0-34e4-42d6-b8bc-c0288e42e203",
            "value": "fae29a48af3a6908f8ce26dbdf860d8680a024d4951d8c0dddf7818db75c4886.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  23/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486094",
            "to_ids": false,
            "type": "text",
            "uuid": "a3a6f0aa-8d64-4e0d-afaf-94edc332a251",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:29/66\nFirst Submission:2025-08-27T11:02:04.000000+00:00\nLast Submission:2025-12-31T08:29:30.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129368",
        "uuid": "3382a9b5-5db6-4fd1-bba2-0adda2b78568",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499282",
            "to_ids": true,
            "type": "md5",
            "uuid": "ed56454b-fedf-4a69-8344-0fea6891f2cd",
            "value": "39b7ae6421027f64cd826e95a5325c75",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499282",
            "to_ids": true,
            "type": "sha1",
            "uuid": "f38daa0e-9eb1-4cb3-9772-044da003d895",
            "value": "c102418f0812f963bc64c0625f9905c262202cbe",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499282",
            "to_ids": true,
            "type": "sha256",
            "uuid": "45b388c3-bf90-47df-a673-fc30d7dbfec6",
            "value": "2315c27a7553bbfe8b6a7e763b263390c6c10727efc1184eca279d4fd654d8dd",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486115",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "faef8242-a1e1-43da-8492-39e9bcdf298f",
            "value": "98304:RkCO3qVza+Yrocz2hyRs6tcYcKrWOB+hQTHIL3jMKMRrafo/Kr9viW:R2ez8ocz2ANtjrWg7HATMKMRra7iW"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486115",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "57b43e1f-83cb-4e5c-ae7f-eb87ef7c9604",
            "value": "4874384"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486115",
            "to_ids": true,
            "type": "vhash",
            "uuid": "fb4d2efe-6c28-4fd4-be40-d5b2a5698ba3",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486115",
            "to_ids": true,
            "type": "filename",
            "uuid": "a913c0cd-1419-412b-99b3-46e85b88e373",
            "value": "pcsb3.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486115",
            "to_ids": false,
            "type": "text",
            "uuid": "b58a56f6-fbcc-404a-baa5-5acc95492a07",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:27/66\nFirst Submission:2025-09-04T09:47:01.000000+00:00\nLast Submission:2025-09-04T09:47:01.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129390",
        "uuid": "9fa45796-3e53-4868-ae89-c535409204b7",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499283",
            "to_ids": true,
            "type": "md5",
            "uuid": "2e3d47e6-7887-44e5-9cd3-488e38ea5644",
            "value": "5f3a04babe025c9c175d42379897a7d2",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499283",
            "to_ids": true,
            "type": "sha1",
            "uuid": "c6526cff-c5ba-46ef-b3fe-5c35c68410bc",
            "value": "b41aa9174869d9c184e4c9bdc8bf3dcfa8ee0ac0",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499283",
            "to_ids": true,
            "type": "sha256",
            "uuid": "4ab5c22a-fd95-4214-9d80-7f425bb7a278",
            "value": "2f4df00d0ba500353d668d8b0832b51151d13d4fe68793f0fb84f689561c2c8f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486137",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "918b9fba-67ba-477d-82dc-1a5b59df8c89",
            "value": "98304:BJFZbRcqsDfD0evVyeObEZxYL7eyYo/Kr9X7pkc:BpofAaVybbyYy7H"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486137",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "4f9d5130-6e56-401a-931d-67eeee474852",
            "value": "4718736"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486137",
            "to_ids": true,
            "type": "vhash",
            "uuid": "6432068d-ca9e-4ee4-85a4-bc8e047c0c5f",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486137",
            "to_ids": true,
            "type": "filename",
            "uuid": "467522cf-3d08-4163-b43d-1a0620590411",
            "value": "9cxetg2lv.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486137",
            "to_ids": false,
            "type": "text",
            "uuid": "9ede9a6b-693c-4cbf-b8d3-a193d868027c",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:26/66\nFirst Submission:2025-08-15T15:42:20.000000+00:00\nLast Submission:2025-08-15T15:42:20.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129412",
        "uuid": "c992f5e3-d4c2-40e6-b9d4-430e30b9fc65",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499284",
            "to_ids": true,
            "type": "md5",
            "uuid": "27713f73-3d8c-4be8-a1a7-da0871db6233",
            "value": "eadd92707a854f9f9450412d51680ca3",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499285",
            "to_ids": true,
            "type": "sha1",
            "uuid": "af3b8410-6a5c-4772-9d24-1d99a0af4f81",
            "value": "9349c99ea224dda7b11b6eebbb0ca20984158197",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499285",
            "to_ids": true,
            "type": "sha256",
            "uuid": "1c69168b-2df2-428b-8d10-250c952e4197",
            "value": "7cd655c5f1a99f0d3dde7eccdd96f96fb4b023bccefa129eee89a34e9b0429a9",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486159",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "62620d7c-9fc5-43d7-9e6d-95ee6d2876b0",
            "value": "98304:CVLMUSSXjJRX+T0XpGu8eOu5tpTKNo/Kr9XAUNw:agoRrppt5tp+pACw"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486159",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "2788c9a3-05e7-42c6-a541-ceddd2ad1880",
            "value": "4771984"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486159",
            "to_ids": true,
            "type": "vhash",
            "uuid": "14139b68-4d71-49e1-b633-88052c091ad6",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486159",
            "to_ids": true,
            "type": "filename",
            "uuid": "1e9d42dd-2e5a-43d4-95fc-37acf37129a2",
            "value": "2jqkt.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486159",
            "to_ids": false,
            "type": "text",
            "uuid": "99ed234f-4d62-4aa1-a600-f5ef3d2f8a01",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:22/66\nFirst Submission:2025-09-04T04:21:14.000000+00:00\nLast Submission:2025-09-04T04:21:14.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129433",
        "uuid": "e2383bf8-0b3c-4f8c-8959-a89909ee32f1",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499285",
            "to_ids": true,
            "type": "md5",
            "uuid": "cf6855b4-3374-4d50-b2b2-661c75a0e705",
            "value": "3edd1e69bf8feabc9e4e06eee4171a08",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499285",
            "to_ids": true,
            "type": "sha1",
            "uuid": "67c19be6-abe7-4ae2-a563-de68e4865a92",
            "value": "49bf59a5570f07a0257147cf8d083b0cbc8bca18",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499286",
            "to_ids": true,
            "type": "sha256",
            "uuid": "445af949-4e51-4c42-8d0e-dc9ec6acab1c",
            "value": "f535109ceac3c72d8fccc864c3e1dbdfaece89a1932df090bc9bb3d2f193e49f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486181",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "977ddadb-0ff4-4785-9936-6f3da2163a2d",
            "value": "98304:5zUT6Wav0om7OqgDXWkRJlTODQtT+XSu17kz3yQ/X8tQEwo/Kr9X5p:F/hqOtZJlTODkyd1YztX86v5p"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486181",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "3d0dde92-65e6-40b1-8c4a-256f9cbb90d7",
            "value": "4747408"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486181",
            "to_ids": true,
            "type": "vhash",
            "uuid": "bf270f49-dfb8-41ae-8d33-373ae2faca7e",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486181",
            "to_ids": true,
            "type": "filename",
            "uuid": "1ee842cf-700d-435b-a5e5-712cba6ba9f5",
            "value": "ckjojee.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  23/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486181",
            "to_ids": false,
            "type": "text",
            "uuid": "541cf7ad-0995-401b-9bd5-a089be74ec45",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:25/67\nFirst Submission:2025-08-06T14:05:04.000000+00:00\nLast Submission:2025-08-06T14:05:04.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129454",
        "uuid": "c051e0e7-641d-420e-b7f2-ed70bed4354c",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499287",
            "to_ids": true,
            "type": "md5",
            "uuid": "7a1d3e0d-3643-47b4-b644-afbf31e3ac7b",
            "value": "c9528583c28b2c54d94151ddb6eed153",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499287",
            "to_ids": true,
            "type": "sha1",
            "uuid": "4196828a-bb79-4a85-832e-afb1353f226e",
            "value": "7a3c6b3184517af2df1cb8a2ded499cdbb2b1519",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499287",
            "to_ids": true,
            "type": "sha256",
            "uuid": "04ef8c67-41b5-40ff-aa36-24234bbae2ca",
            "value": "133028d18407fc7d6dfaf4a0e5fb0e9fec4237c092b85b704d50b0df5a96b82c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486203",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "74dd850e-5fd7-4efd-b855-e954d12c4d6f",
            "value": "98304:GKgK9UsKRD20w3UL63Q8Vrvytejlyiq5D0EEz3lV1Wo/Kr9XenY:Gq9ULRC0w3U+g85RAjq1rl/YenY"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486203",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "7ad21382-4332-4c1c-894d-1d78f36fa7a6",
            "value": "4563088"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486203",
            "to_ids": true,
            "type": "vhash",
            "uuid": "7c544cef-ea85-4e74-accc-8e3f0c68a3d2",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486203",
            "to_ids": true,
            "type": "filename",
            "uuid": "8dfd4af9-50fc-4166-9a93-8cc6697d41c6",
            "value": "ubcp2h0zy.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486203",
            "to_ids": false,
            "type": "text",
            "uuid": "6af13850-20b6-4205-92b3-f6516d2ae7b9",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:27/66\nFirst Submission:2025-10-28T19:40:08.000000+00:00\nLast Submission:2025-10-28T19:40:08.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129476",
        "uuid": "58927223-ec9f-42aa-9a76-2710431b66fd",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499288",
            "to_ids": true,
            "type": "md5",
            "uuid": "b072338f-fb9a-4436-be44-946c31228d48",
            "value": "264f1a6ac68630da2e9c4c4b881f4e33",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499288",
            "to_ids": true,
            "type": "sha1",
            "uuid": "85add948-0a5a-43f1-869e-7dfc0513fd4c",
            "value": "5a0e7523ff122ca887dcbae232032f8129d72ea6",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499288",
            "to_ids": true,
            "type": "sha256",
            "uuid": "882d8a61-0461-44b7-bd78-7c2022fbd1d8",
            "value": "1092d8253ab4800f1840a4e62fc1a6202193e82b87a98e9dfc564c1028496ff8",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486224",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "cde02015-7e91-4578-a12a-130f79fc7719",
            "value": "98304:vUdXre+01K6GqkJ1SOOA5P0hNyb4ec4/so/Kr9nH84:vUpQ1KNXJ95PONm+HB"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486224",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "8f0a95d6-c950-443c-8051-42890999cbc5",
            "value": "4743312"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486224",
            "to_ids": true,
            "type": "vhash",
            "uuid": "7b927df1-d3a2-4cdf-8b79-7dc0f0d390f2",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486224",
            "to_ids": true,
            "type": "filename",
            "uuid": "6cfcc479-81fa-4a63-8899-58714e9806ca",
            "value": "jhuj67lb.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486224",
            "to_ids": false,
            "type": "text",
            "uuid": "e093d874-f03a-4459-b3b8-653ea4b44cec",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/66\nFirst Submission:2025-09-05T10:59:02.000000+00:00\nLast Submission:2025-09-05T10:59:02.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129497",
        "uuid": "fa02fb77-decb-497a-b9c0-b9f6b5ff046a",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499289",
            "to_ids": true,
            "type": "md5",
            "uuid": "8c2d97ac-cb56-4bab-b8f7-3d1f9ef1b492",
            "value": "092ac951bec8280fd7a3976f54bd4ecb",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499290",
            "to_ids": true,
            "type": "sha1",
            "uuid": "c3c9a27a-fc17-4fb7-bcc3-b29ad4d62599",
            "value": "f521d157279e87e3d44233848724ae5fd7b234cc",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499290",
            "to_ids": true,
            "type": "sha256",
            "uuid": "cadf688b-5673-4c39-9a60-74f7f3a42f04",
            "value": "6968366d6cedf4458117dac668f3c7300e0c427db941de55bf5414c31a74529d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486246",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "547bd20d-b24c-4d8e-80e5-38e61beb951d",
            "value": "98304:d1rIYmvG1IcPJPpv6jIv2L4pyF3+MDmPjiq1/Qm15Y1r/LUtpRKxAIDo/Kr9bcC:vrAKJjv6jIJMTq1Im8AxefjcC"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486246",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "79800798-936b-4c8a-9422-182ca4f36be4",
            "value": "5021840"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486246",
            "to_ids": true,
            "type": "vhash",
            "uuid": "7ce17b31-4e87-4a9b-bb97-8cd2fc7a9bbc",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486246",
            "to_ids": true,
            "type": "filename",
            "uuid": "69c09ad8-92dc-4474-99b6-18913b1b3060",
            "value": "Raft.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486246",
            "to_ids": false,
            "type": "text",
            "uuid": "b5b4527c-63a5-49d6-a271-061da22d41b0",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:25/66\nFirst Submission:2025-08-18T07:04:07.000000+00:00\nLast Submission:2025-08-18T07:04:07.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129520",
        "uuid": "2043151c-54cd-4287-9658-42c0a9682113",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499291",
            "to_ids": true,
            "type": "md5",
            "uuid": "7a3ba19d-918f-45c6-a644-17d4958ef2b4",
            "value": "f5c401690dacbd58a27509db3fa5d3f4",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499291",
            "to_ids": true,
            "type": "sha1",
            "uuid": "a1cfa857-1d38-45e0-9b73-180f298a7846",
            "value": "b6c38aaeffd4a0ee61bc98dd732a0bb4836d31d9",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499291",
            "to_ids": true,
            "type": "sha256",
            "uuid": "25c807fd-3f5a-4d02-9594-e45059ccf88a",
            "value": "53acefceed6b3ac27060965627b872080666a5b2b45b218454c171cd34e56848",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486268",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "a8bdc4ff-9c7d-46fa-89dd-1f47b951f352",
            "value": "98304:hmczYbXMOJubx+iY7502VFa09PfCgyTZho/Kr9Xanx:UczYbBJul+iY75Lo4YV1ax"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486268",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "71a74669-2f8a-474b-bf4a-654a3a5c2c20",
            "value": "4583568"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486268",
            "to_ids": true,
            "type": "vhash",
            "uuid": "99f8e454-035d-4290-825c-f72c884264d1",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486268",
            "to_ids": true,
            "type": "filename",
            "uuid": "c0b6bb92-63ac-4e76-a05a-96381d813f4c",
            "value": "mwcdbh3dw.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486268",
            "to_ids": false,
            "type": "text",
            "uuid": "f142cca0-971c-446b-8d53-c87ccfb05978",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:30/66\nFirst Submission:2025-08-31T07:30:15.000000+00:00\nLast Submission:2025-08-31T07:30:15.000000+00:00"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1780129520",
            "to_ids": true,
            "type": "filename",
            "uuid": "616cb87c-3588-43d2-a69e-29bc1312f67f",
            "value": "mwcdbh3dw.exe"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129541",
        "uuid": "324f14a5-516a-4d6c-a25b-3f6dbabb9ade",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499292",
            "to_ids": true,
            "type": "md5",
            "uuid": "9a94a000-bea6-4460-bc20-2f7bce9613cf",
            "value": "046f6dc46f93176c7fe3f6d127b4a07a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499292",
            "to_ids": true,
            "type": "sha1",
            "uuid": "40fe575b-9533-4d1c-bdb3-6f0546c305eb",
            "value": "aa8493bdd1882626366258a9f3460d3023f6f77b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499292",
            "to_ids": true,
            "type": "sha256",
            "uuid": "4aee2735-068c-46d5-8235-0f8305940191",
            "value": "56d64e4abb8973c56181162a0f93ed2ff169954d618658310b28569150500fd6",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486289",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "a96550a8-ac80-42f8-8335-e7ead45c7231",
            "value": "49152:6Mk8Vdw0Ej8i738hGdqfxCvS86Kvz+9aE46i20BBZfHgQ7Hso/Kr/WMFuQIn:0OdwD7IiKCj9Y0Bhso/Kr/WMkV"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486289",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "a6940241-36e2-4cc2-ac67-32df69f0eb31",
            "value": "3067104"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486289",
            "to_ids": true,
            "type": "vhash",
            "uuid": "ab77036c-192a-494f-ae6b-55b51ac7cd21",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486289",
            "to_ids": true,
            "type": "filename",
            "uuid": "2976ca61-4eed-43d7-8c6e-d7943de37d4e",
            "value": "cflwiz0i.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486289",
            "to_ids": false,
            "type": "text",
            "uuid": "a1bb1783-4f9c-4c7a-92a6-d33f3b30bb7f",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:23/66\nFirst Submission:2025-11-08T07:18:49.000000+00:00\nLast Submission:2025-11-08T07:18:49.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129563",
        "uuid": "649adcca-b230-4ea5-9aad-957bf26fc668",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499293",
            "to_ids": true,
            "type": "md5",
            "uuid": "e00d176a-5936-43ed-bc21-e4011670ff9e",
            "value": "4cb054ca772afbbd6372bb4affe9836b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499293",
            "to_ids": true,
            "type": "sha1",
            "uuid": "6ef7bdd6-7bde-4b67-8661-9d5a1c1c63f9",
            "value": "c0b28509ce12a367de269d2f3aeee954a4433982",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499294",
            "to_ids": true,
            "type": "sha256",
            "uuid": "51599218-9ea5-443e-9bb6-f2d4db741e0b",
            "value": "e5213278c4da9b98374dace6ddd5d7bf63ef1d75ea8c26c65fb86a8e59eeb9a5",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486311",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "4528cf51-bdd4-4e31-9068-aeeb7d7a77c0",
            "value": "98304:fJFoa4SJFzNPh6+uZK2t+asbiL5o/Kr9XLU:fD4SxP0+uYJWJLU"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486311",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "9ceae809-e644-4f1e-b318-b37d359c589f",
            "value": "4722832"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486311",
            "to_ids": true,
            "type": "vhash",
            "uuid": "89b847dd-bad3-4aef-a326-a917f29cc008",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486311",
            "to_ids": true,
            "type": "filename",
            "uuid": "1ecb6a85-0fa8-42b3-af45-06afc483cbc8",
            "value": "tveb3jt.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486311",
            "to_ids": false,
            "type": "text",
            "uuid": "59b664e5-0f7c-4561-8af5-cd979c1da154",
            "value": "apk\r\nType Description: Android\nMicrosoft: Program:AndroidOS/Multiverze!rfn\nVT Total Detection:29/66\nFirst Submission:2025-09-10T17:55:05.000000+00:00\nLast Submission:2025-09-10T17:55:05.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129585",
        "uuid": "e1878df6-8e19-4f2a-ab96-cd75974fbfa8",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499295",
            "to_ids": true,
            "type": "md5",
            "uuid": "1388601c-638b-4f87-97c5-e7dbd721a29b",
            "value": "1c63cfa3e2b95b569e5816765b864751",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499295",
            "to_ids": true,
            "type": "sha1",
            "uuid": "221f1663-f652-4cec-9b33-ae73da7dfb6a",
            "value": "7b44e3cc1e5985d2bb3ceae552f6fdb441d820de",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499295",
            "to_ids": true,
            "type": "sha256",
            "uuid": "7c85ce4d-c74e-4ff0-9efe-e452da9c918a",
            "value": "118633273df0be34d39bc53d58361ab64287669dc1ae23990735b5fb4732c37b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486333",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "fbeb6489-8214-4746-af4e-ff017be94f97",
            "value": "98304:+JPG0qrZcH9l9V9GPZFkGnh/rQpZ3qo/Kr9bUkO:cO0qrGd3vOo+Ud"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486333",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "65d8e28d-4ea1-401b-b5f6-39a18c9b8930",
            "value": "4747408"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486333",
            "to_ids": true,
            "type": "vhash",
            "uuid": "db9bf68e-df95-4846-8bf2-47adb1c98381",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486333",
            "to_ids": true,
            "type": "filename",
            "uuid": "45158d9f-6d70-4f4b-8188-4b61279ceafc",
            "value": "r20l0x4.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486333",
            "to_ids": false,
            "type": "text",
            "uuid": "3d2f2c87-4e67-4715-90ce-9bb72ecc7d8e",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/66\nFirst Submission:2025-09-01T00:46:28.000000+00:00\nLast Submission:2025-09-01T00:46:28.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129606",
        "uuid": "11687301-d1b7-45f2-9067-e4b03cfd87c0",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499296",
            "to_ids": true,
            "type": "md5",
            "uuid": "ecca0daf-28cd-417a-bbe3-71e878282343",
            "value": "c82e4f4ebc1f1ba32fa18a050c60383b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499296",
            "to_ids": true,
            "type": "sha1",
            "uuid": "47665d22-83d3-4cfb-a48e-b3b51ce9a387",
            "value": "6f4d2a8691207b3cf143ff0cefacbc85f37a2e4b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499296",
            "to_ids": true,
            "type": "sha256",
            "uuid": "26e4071c-b277-41f6-9888-1c9eb48e0c6e",
            "value": "696e4d46ed8cd35686a9633a368af787855e6615106a2cd66c5244a740915fe7",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486354",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "4d482e84-89c0-448a-918c-c6aef1369679",
            "value": "98304:W1rWMmvG1ITTu3+He14v85WfNc0o/Kr9b0HKM:4rKKZlUp0F"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486354",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "a2e086bd-6f16-4715-8562-753d2898cd8f",
            "value": "3927987"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486354",
            "to_ids": true,
            "type": "vhash",
            "uuid": "091688d7-ca2a-4a25-92b4-7aee8b78581d",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486354",
            "to_ids": true,
            "type": "filename",
            "uuid": "8e65dc25-e715-44d5-8508-ababfcd1cd91",
            "value": "cs0m0g4p.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486354",
            "to_ids": false,
            "type": "text",
            "uuid": "fb836c51-8b01-4d9d-bd5e-134805adf6ae",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:26/66\nFirst Submission:2025-10-17T03:42:00.000000+00:00\nLast Submission:2025-10-17T03:42:00.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129628",
        "uuid": "f0a0d4e3-0e2f-41e8-a3ca-0880d32ef31e",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499297",
            "to_ids": true,
            "type": "md5",
            "uuid": "69610732-c939-4d36-8865-bd1bcc173d22",
            "value": "410efb1341dff33456ecd5fc3954070a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499297",
            "to_ids": true,
            "type": "sha1",
            "uuid": "254c2fa5-60d4-4b00-a255-3ac76d6b2232",
            "value": "55533c2dd943e90813ebfc5d324dbce30c3f2fd2",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499297",
            "to_ids": true,
            "type": "sha256",
            "uuid": "10e25a09-2008-4440-b4a4-df7f78d22832",
            "value": "59b33113ca48ad8f1c3619a8c0562068740623e64049dd569f464499e3f008fa",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486376",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "22151f24-ff64-4280-9e5e-ddf783e1ba59",
            "value": "98304:zuk5KJOGaBLfLwGT9c2CxgBzcZ1OHZ+AaZy8vtho/Kr9X6q5v:zu+KJOFfkzhOmAwA18vP6q5v"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486376",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "e42b47eb-2c16-45f1-9229-bd92f1b9f691",
            "value": "4927632"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486376",
            "to_ids": true,
            "type": "vhash",
            "uuid": "b9b7d3b1-fc8d-4ea1-9519-43ecd653c769",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486376",
            "to_ids": true,
            "type": "filename",
            "uuid": "68c1d4da-5766-49fd-adee-81e08dfb0a83",
            "value": "gqgn7gp.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486376",
            "to_ids": false,
            "type": "text",
            "uuid": "0e1ba5de-43e2-4cac-81e6-15b3c792b110",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:27/66\nFirst Submission:2025-08-13T09:09:51.000000+00:00\nLast Submission:2025-08-13T09:09:51.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129649",
        "uuid": "50e7655d-6efb-4b0c-a4ab-71c329a281fa",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499298",
            "to_ids": true,
            "type": "md5",
            "uuid": "3e3eb51b-ed4d-46f6-a517-6a992b88a6d4",
            "value": "4f789d7bdaa839e1d9cbbaa03e9fe182",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499298",
            "to_ids": true,
            "type": "sha1",
            "uuid": "e6931256-fd86-4973-add3-8a2d062c198d",
            "value": "0715dc4a1213fb3b4d1e6d011b7c96afef2bbdf4",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499298",
            "to_ids": true,
            "type": "sha256",
            "uuid": "dda03ba0-015d-4346-bda8-7a37b33ad8ef",
            "value": "735b69b19334c14bc652ccc7eabc8c744b444b93f15d54a8767bc18a589ffa48",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486398",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "3f8dcaf1-38c9-4977-b93f-5a9f75d96d7c",
            "value": "98304:BjHe9CfsXMmwRncKLRLEBxzxkZRR7tto/Kr9v78O1w/:lTf2KFqzxkdtJ7P8"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486398",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "3b6acf37-1497-4a8e-908e-7178fc43ba35",
            "value": "4661392"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486398",
            "to_ids": true,
            "type": "vhash",
            "uuid": "0738aa98-80e4-44d7-aec1-50a008ccb82e",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486398",
            "to_ids": true,
            "type": "filename",
            "uuid": "c692c491-b546-4e10-a1c1-376f2d71e83c",
            "value": "61eua.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486398",
            "to_ids": false,
            "type": "text",
            "uuid": "2ca70961-4289-4845-9421-a7b9050f051a",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:29/66\nFirst Submission:2025-08-08T05:24:56.000000+00:00\nLast Submission:2025-08-08T05:24:56.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129671",
        "uuid": "7de89c0d-0eb7-43a5-8d09-e9585499a2ad",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499300",
            "to_ids": true,
            "type": "md5",
            "uuid": "6760f75d-ee41-4836-9816-a7c5aae5c5cb",
            "value": "e9897a03230bfbc5c86b6f692a08e5ff",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499300",
            "to_ids": true,
            "type": "sha1",
            "uuid": "e863a0dd-93be-4c1f-8f15-4fd85be9b670",
            "value": "4d1478187d6c627c91638de793a9bfca41dc6c0a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499300",
            "to_ids": true,
            "type": "sha256",
            "uuid": "d197eaf1-a6d0-496f-b5b4-56ac4c53bb8c",
            "value": "99d70a48d1a82d10f080016b55e50119eab0386631ca9126b207d5cec044f8ce",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486419",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "df8d56f4-9f7d-43cf-9f08-18f45b7ea038",
            "value": "98304:BcA8141PkwAoC8QVLJQhzF9LHNnUo/Kr9X7A:BcD41Gx8sLGFZRO7A"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486419",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "182d4132-9523-4d35-99ed-557a681f536b",
            "value": "3833779"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486419",
            "to_ids": true,
            "type": "vhash",
            "uuid": "c047e284-7ef1-42c8-a5b1-b4a1c4ff8a2e",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486419",
            "to_ids": true,
            "type": "filename",
            "uuid": "e4ce1963-ce14-4828-8675-3bce979981e3",
            "value": "ivuwwv9.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486419",
            "to_ids": false,
            "type": "text",
            "uuid": "dd78a2d5-29b6-43dc-a18a-de174e92f2a4",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/66\nFirst Submission:2025-11-03T07:26:17.000000+00:00\nLast Submission:2025-11-03T07:26:17.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129692",
        "uuid": "17a4409c-a57e-462c-a870-76637b04c9c2",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499301",
            "to_ids": true,
            "type": "md5",
            "uuid": "af03ae33-7788-4d16-b4d0-fa737b9c2446",
            "value": "1fc6cb4b583ce33f6225bea031231561",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499301",
            "to_ids": true,
            "type": "sha1",
            "uuid": "9fe46e05-2e0f-4c00-bd03-e79f206cb510",
            "value": "163e8fa2f6a363c48e58000dc8e42672bb4eaf02",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499301",
            "to_ids": true,
            "type": "sha256",
            "uuid": "e3e46b2f-dd72-4676-b440-3521695be931",
            "value": "ffe0856b6d50524a5457205a418afd752fbc8ffe1b7ba676c1c400d5f937e65f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486441",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "cb9667dc-ac7f-4572-9eab-c0932914a0c0",
            "value": "98304:/z+JqF3/hgmfNGXHXCW6/W9Y3gLVo/Kr9/do:rLFnNOXJ6DgVdo"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486441",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "2b3ee179-f4e2-4462-851d-48a79ecaf64e",
            "value": "4661392"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486441",
            "to_ids": true,
            "type": "vhash",
            "uuid": "79400419-7005-4d59-b7d4-b70122460fc1",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486441",
            "to_ids": true,
            "type": "filename",
            "uuid": "4e0127b7-0f82-48d4-9760-a81a6daeb702",
            "value": "3qheys.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486441",
            "to_ids": false,
            "type": "text",
            "uuid": "7af53d84-416d-46f9-b03a-98f75e32e473",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/66\nFirst Submission:2025-08-12T06:46:37.000000+00:00\nLast Submission:2025-08-12T06:46:37.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129714",
        "uuid": "0d3e83ff-3f98-46a9-8220-d3132c974e92",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499302",
            "to_ids": true,
            "type": "md5",
            "uuid": "128f3584-d143-4984-a114-42e2fec89fcf",
            "value": "7420fe3c2550a0ca763d507531572a28",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499302",
            "to_ids": true,
            "type": "sha1",
            "uuid": "0440c007-a992-447b-ae64-ccf271dec8da",
            "value": "98f758966de031980637860275067797babbe0a3",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499302",
            "to_ids": true,
            "type": "sha256",
            "uuid": "7b910e04-ca04-4ae6-849d-a1e959cec6fd",
            "value": "13d96fede8e9050f5793e0a1e7fb6380374364fc060a085771d0ef7155c38883",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486463",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "b1e595ff-a2b5-4242-8d64-e71363058882",
            "value": "98304:uHDbDr4x0uFH/0vI4FVSvtvZtWjk4A+IKn3bCo/Kr92svqfO:uHQqw/vt+XA+IqbxsvH"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486463",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "736401d5-6c6f-404f-ad4a-5ca538f87a63",
            "value": "3841972"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486463",
            "to_ids": true,
            "type": "vhash",
            "uuid": "c292f18c-465a-440c-a72c-48880e923652",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486463",
            "to_ids": true,
            "type": "filename",
            "uuid": "e55181e4-f11b-4796-9e40-42c93496dc92",
            "value": "13d96fede8e9050f5793e0a1e7fb6380374364fc060a085771d0ef7155c38883.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486463",
            "to_ids": false,
            "type": "text",
            "uuid": "5b67317b-f441-4298-8b4d-7fb525553bc0",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:25/66\nFirst Submission:2025-11-03T13:29:17.000000+00:00\nLast Submission:2026-02-06T16:59:31.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129736",
        "uuid": "6a890204-a7a3-4606-bc44-41c65f5ddbdd",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499303",
            "to_ids": true,
            "type": "md5",
            "uuid": "6eca4d81-c386-4e84-bd89-4f1348d14003",
            "value": "594aeeee1e9fe61ae6fb1442e5bfb2fd",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499304",
            "to_ids": true,
            "type": "sha1",
            "uuid": "7e71fc26-3dcf-46c4-8194-ea51e4beb0c6",
            "value": "542a4e86c711b1a0f4d1afb1042db1a0977a966f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499304",
            "to_ids": true,
            "type": "sha256",
            "uuid": "c00b30be-7752-45f9-b318-bc862de35c3f",
            "value": "77a4d7eb427ee9967ad45609756d37973447d00cb126fe8e6b64a8f08104815e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486485",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "7141e3ee-4911-44d1-98a3-3235928d14a3",
            "value": "49152:cgN25SpZJc7IgUP2ESnSQRUsbz5miSUljVH0N4B6iRA98dZnCSpd7So/Kr9nNgje:b1DfBk4sP53vjVUNk6yxeo/Kr9nge"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486485",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "1048da07-674c-4149-8c65-91e40298844f",
            "value": "3850163"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486485",
            "to_ids": true,
            "type": "vhash",
            "uuid": "30e6e098-7be8-41c8-a46b-b1438f70a6f4",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486485",
            "to_ids": true,
            "type": "filename",
            "uuid": "4da95000-fe59-4519-b970-f58f1867df27",
            "value": "vl6ku2.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486485",
            "to_ids": false,
            "type": "text",
            "uuid": "3dfdb256-f1e0-42a9-890e-9544e191b0d9",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:27/66\nFirst Submission:2025-11-03T07:25:54.000000+00:00\nLast Submission:2025-11-03T07:25:54.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129758",
        "uuid": "74eb70c1-2a49-4950-aaec-8710037d5746",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499304",
            "to_ids": true,
            "type": "md5",
            "uuid": "a9a94fd6-7b9d-4965-8bbd-f033da15bbcd",
            "value": "f4c4aba2bec2e060c616dbae14a82d4d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499305",
            "to_ids": true,
            "type": "sha1",
            "uuid": "fa2d82cf-93a0-4fa7-89bb-63540275379a",
            "value": "802431f01b585cdd073d4e926d9925e98ed0ada1",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499305",
            "to_ids": true,
            "type": "sha256",
            "uuid": "7c2be8e2-3815-4370-8276-3f60b6796dea",
            "value": "91bdabfa5b7337341ac2cae0621da571a7c11deb20d6f51a2f233af4ecd6261f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486507",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "13076dce-1cd5-4a38-804f-915755f8a657",
            "value": "49152:y1Ew6+ETOtM42GciJuH/HcjCnSadLZYw5CSpd7co/Kr9/qgRC:5wrE4wG7JiHCBadLZqo/Kr9/9C"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486507",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "578de623-214e-4ff3-92cb-f907fb35331c",
            "value": "3448755"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486507",
            "to_ids": true,
            "type": "vhash",
            "uuid": "47b37123-57b5-4e73-b564-f975606f4bea",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486507",
            "to_ids": false,
            "type": "text",
            "uuid": "ec7ec9d9-b33f-4dc4-9c5e-4a1cc55107d4",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:24/66\nFirst Submission:2025-07-01T05:50:33.000000+00:00\nLast Submission:2025-07-01T05:50:33.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129779",
        "uuid": "bef49f02-6b9d-4c49-ac35-0d718d0af7dd",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499306",
            "to_ids": true,
            "type": "md5",
            "uuid": "fce46a6c-bce5-4a0a-83da-7c89df1c417d",
            "value": "6ff89731e5afd4a49eab95ee2d8f3b02",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499306",
            "to_ids": true,
            "type": "sha1",
            "uuid": "b15a1b44-e2fe-4817-a19a-ae16ae3aed3d",
            "value": "6c25a6a96221c25de52c61e16c8a9cb2bc30319b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499306",
            "to_ids": true,
            "type": "sha256",
            "uuid": "c3812b56-9c00-4709-89d9-c38394772a9e",
            "value": "0716d83aef0b789fa4115845debaac653c224aa3b68624b9e17c2f6456374f37",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486529",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "279306d3-abe0-4627-96b1-aa7af675cbf6",
            "value": "49152:Yts6++v2tBrl7xUmIGdC8BHUxkhfICgKsnd8LUYCSpd7lo/Kr9/cOTi:Rr+cBrlpBLHmHCId8bo/Kr9/Pi"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486529",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "c8812653-f473-413c-8733-5513ba990ee3",
            "value": "3448755"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486529",
            "to_ids": true,
            "type": "vhash",
            "uuid": "b2f435a7-1963-4e9a-9433-8a648901ce02",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  23/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486529",
            "to_ids": false,
            "type": "text",
            "uuid": "17ff6e89-a448-4b0a-b97c-a8f871aae999",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:24/66\nFirst Submission:2025-05-28T06:10:27.000000+00:00\nLast Submission:2025-05-28T06:10:27.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129801",
        "uuid": "d4b2eb34-4b1c-44c9-b485-49fa37972058",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499307",
            "to_ids": true,
            "type": "md5",
            "uuid": "d9636730-fe8a-4f7a-8389-588b596fe8bc",
            "value": "a4f24cffd229b7341923ff85e5495f10",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499307",
            "to_ids": true,
            "type": "sha1",
            "uuid": "9a511c33-9190-4cdc-8e99-98d473ba53a9",
            "value": "2113cb36274a8b37d1e39c9ff1c6db4ce0b94be2",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499307",
            "to_ids": true,
            "type": "sha256",
            "uuid": "9102211f-9c6d-48f8-97df-0907b40b085e",
            "value": "71e887a022d11f910b87d0556206230d0a4079389f3608085b3664f05db7cd2c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486550",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "9b44810e-f6c9-4755-90ff-70dc66bafa33",
            "value": "98304:wgnHLQV3aOjQ4sg22ntHu5MIKu9oO5JPCQYcKAo/Kr9vCS:1nrPOzjtJioO5BSsCS"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486550",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "5e1984e9-8406-4acd-a9e7-3526c3c0b69f",
            "value": "4620432"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486550",
            "to_ids": true,
            "type": "vhash",
            "uuid": "0cbe5e86-0994-4d96-baea-43a0b8177da4",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486550",
            "to_ids": true,
            "type": "filename",
            "uuid": "833df77f-55ef-48a6-b986-d7bf50a55314",
            "value": "z2509bfe2.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486550",
            "to_ids": false,
            "type": "text",
            "uuid": "d0455a54-023d-4cf4-b31b-4b0af26ec6fe",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/66\nFirst Submission:2025-09-04T18:58:18.000000+00:00\nLast Submission:2025-09-04T18:58:18.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129822",
        "uuid": "28278186-8d64-4d6e-9bd0-9b12f8f22493",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499308",
            "to_ids": true,
            "type": "md5",
            "uuid": "8e683884-479b-435e-a391-f1b49c2b43c3",
            "value": "af0fac752b97b1cab8374a2cf2f5549f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499309",
            "to_ids": true,
            "type": "sha1",
            "uuid": "e38c9b47-18dc-4535-945f-25efac82a58a",
            "value": "5c77eba058066064fe0e2368179681a6fd7d0fad",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499309",
            "to_ids": true,
            "type": "sha256",
            "uuid": "0659dc4f-37a4-46b0-8160-afb3a8a31a56",
            "value": "69ffeadf11e9599b779ec00712f0f5485362fd06488ae9611988944d953a7636",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486572",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "01b8f48d-a9d8-43c3-8106-ecd681d37b6b",
            "value": "49152:/SEPNT4ZIyrpHBKwDaq4Zs7gDz8MO2IUHntYJQCSpd7Lo/Kr9/bmD5FlF:JtfQP7gDQMO2IUNYSo/Kr9/U5Fv"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486572",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "bc93d3af-a2a8-44cd-ad3e-45a6031200d6",
            "value": "3309491"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486572",
            "to_ids": true,
            "type": "vhash",
            "uuid": "aa51b861-41c0-4722-bf91-062c5674c9fc",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  21/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486572",
            "to_ids": false,
            "type": "text",
            "uuid": "98974f8e-6cae-40f7-a1dc-f97bd303f477",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:21/66\nFirst Submission:2025-06-01T08:37:29.000000+00:00\nLast Submission:2025-06-01T08:37:29.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129844",
        "uuid": "db55fe82-253e-43d2-8595-87238851d896",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499310",
            "to_ids": true,
            "type": "md5",
            "uuid": "2821f17d-4548-46e2-983f-6abdebf2a3f7",
            "value": "f76e85c652e5c6aa59daf292f5e1276f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499310",
            "to_ids": true,
            "type": "sha1",
            "uuid": "fc380789-25aa-49b4-aa3f-6f9f93ce641c",
            "value": "9ab060201d89c267e08b6b1c195df175fffca8b2",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499310",
            "to_ids": true,
            "type": "sha256",
            "uuid": "796f7fcd-7150-41c7-94e1-a136b6c6476b",
            "value": "3aafc361a4838b6afa40eecacf9dfdcce941044b9d05f52a542fe83b3e1eb57c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486594",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "9ea6d4eb-17ff-4368-9ac5-2361c73ceaa4",
            "value": "98304:7C4MW9cgZd/klK22toDyQH8SE32o/Kr9/Wd+M:u4M8cWi2KeY0QWj"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486594",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "5c3e5b21-67a6-4e31-a7b5-034fc3277b47",
            "value": "4628624"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486594",
            "to_ids": true,
            "type": "vhash",
            "uuid": "d62f167b-e124-491e-9dbb-c651ae7ddf7e",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486594",
            "to_ids": true,
            "type": "filename",
            "uuid": "4890b7e2-e384-4b75-845b-3165613df0af",
            "value": "Ntrlegend.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486594",
            "to_ids": false,
            "type": "text",
            "uuid": "0765036e-5b90-4820-8a3b-cc7acd8db6d8",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:24/66\nFirst Submission:2025-06-21T09:48:14.000000+00:00\nLast Submission:2025-06-21T09:48:14.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129865",
        "uuid": "894ed422-08be-4c69-819b-1b7edb545b95",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499311",
            "to_ids": true,
            "type": "md5",
            "uuid": "3202304b-d0a7-403e-bc96-6be37f53c3db",
            "value": "4483beff90db3a90bd3092d3967fd2ef",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499311",
            "to_ids": true,
            "type": "sha1",
            "uuid": "76654846-2bbd-4d75-963c-7112e8db9843",
            "value": "2c280d04e81913f0f92397cd821dd1a267b49fc8",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499311",
            "to_ids": true,
            "type": "sha256",
            "uuid": "4f7636c7-b207-4a7f-9680-a84f0fc97bc5",
            "value": "94f6d16b3ed46c8b23378081582467b1b9ec8fff120b1dc98a2aa1a41622a824",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486615",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "d81467e7-16e2-49ed-ba18-ef847254853f",
            "value": "98304:qoqnbTqzLZLoJa6Lkf+v4BCWtJgRteO2+vRt9+o/Kr9rocb:qooQLRMgJgHeOvt6ocb"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486615",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "cd5570ea-d040-4492-b9a2-335667da5e01",
            "value": "4972688"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486615",
            "to_ids": true,
            "type": "vhash",
            "uuid": "8b9575da-3873-490b-9be3-f26cb092a18a",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486615",
            "to_ids": true,
            "type": "filename",
            "uuid": "32b12b61-8ba3-41c5-abb4-c63d45aa6339",
            "value": "g3vrgr3.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486615",
            "to_ids": false,
            "type": "text",
            "uuid": "a5d989d4-62f2-4897-9543-1e9e0019d9d5",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:24/66\nFirst Submission:2025-08-11T11:11:48.000000+00:00\nLast Submission:2025-08-11T11:11:48.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129887",
        "uuid": "47cc52ee-7f93-4934-b13a-e1c2c88edd27",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499312",
            "to_ids": true,
            "type": "md5",
            "uuid": "e6e0ba77-cfb9-4103-9198-bea40a5a594e",
            "value": "09a7bde84262208bc97322a089262b56",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499312",
            "to_ids": true,
            "type": "sha1",
            "uuid": "426ebb8f-3a45-416c-8165-99505d0394ff",
            "value": "26a4bcf27fa005d6ef7bd5bb577e647e132d3df9",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499312",
            "to_ids": true,
            "type": "sha256",
            "uuid": "908e2b5b-2acf-4291-bd2d-2d937c26b02e",
            "value": "fa661d9c4fc28e2d60846cf4b399c0f73acb6585bb151e4bfe6a56700157ebd3",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486637",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "b59a32c5-9001-420a-b898-4265381d96a1",
            "value": "98304:ckHOYSTsPiFqQbjj7w/s0B3OzgGv1o/Kr9X2u:0YSY6xski82u"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486637",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "66ef90bf-6c9d-4db8-b7c9-9c81106abf47",
            "value": "4845712"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486637",
            "to_ids": true,
            "type": "vhash",
            "uuid": "733d02dd-d264-4dda-a777-aae3948d2660",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486637",
            "to_ids": true,
            "type": "filename",
            "uuid": "28178d50-424c-4391-be1f-8290613e6d7d",
            "value": "nfbs5.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  23/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486637",
            "to_ids": false,
            "type": "text",
            "uuid": "f6b16c17-6550-4c36-9319-4df7fb7a0ca8",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/66\nFirst Submission:2025-09-08T12:36:12.000000+00:00\nLast Submission:2025-09-08T12:36:12.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129908",
        "uuid": "c62c4cfc-e8e5-47d8-8126-702c42a760d0",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499313",
            "to_ids": true,
            "type": "md5",
            "uuid": "c4eb3bae-f75d-4882-b7ef-efa6b63a11a7",
            "value": "4595ce58f39b04a60da45ebfd9967877",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499313",
            "to_ids": true,
            "type": "sha1",
            "uuid": "cfd88d71-a892-4c25-865b-6103726a7066",
            "value": "6dcd1d824241369228918f3c5b426eda49b37178",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499314",
            "to_ids": true,
            "type": "sha256",
            "uuid": "2d42077e-c7c4-459b-939e-57858057111a",
            "value": "444f1398a91d31b73ff72ab2aec1863473408b5af70d1a7b75f20080bc87e2f0",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486659",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "7237dc19-8159-4b47-86ef-b494c6444498",
            "value": "98304:i7/6BuecCkFeVjBbKDZQ3XzZ9IKucH5QUo/Kr9XNLw:iwT5Tm2XvQcmON0"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486659",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "61628b96-146f-44e6-bd64-a086ea32a3e8",
            "value": "4993168"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486659",
            "to_ids": true,
            "type": "vhash",
            "uuid": "69aae9db-952e-4615-8636-1177154a7cf7",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486659",
            "to_ids": true,
            "type": "filename",
            "uuid": "6bb776db-8a24-4b72-bf90-65014d3ed967",
            "value": "uek7t.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  29/09/2025",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486659",
            "to_ids": false,
            "type": "text",
            "uuid": "46230d6f-9abc-43be-8050-230b2982666c",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:12/67\nFirst Submission:2025-09-29T02:21:32.000000+00:00\nLast Submission:2025-09-29T02:21:32.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129930",
        "uuid": "bf607def-57d2-4aea-a769-a6ea5bf3d7c9",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499314",
            "to_ids": true,
            "type": "md5",
            "uuid": "c351d346-d5c0-4bd5-9c40-ed29cb50d08a",
            "value": "181cde59295d8e060bee1ae43cd68a84",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499314",
            "to_ids": true,
            "type": "sha1",
            "uuid": "7a886518-77f5-4a06-98a3-739ba51a713a",
            "value": "c34a6c78437d0324ecb529381c830a9dc254e6b9",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499315",
            "to_ids": true,
            "type": "sha256",
            "uuid": "73a69442-c4cb-4bf9-95bb-3a798d69a380",
            "value": "b53426a9e6ebe383ec9ba193d7e0feb84a2aa6ac32c592165bb9e0ec3c39d524",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486680",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "a6ef1439-5561-4667-8439-56638a92ef3e",
            "value": "49152:ojOh+JkpzyF9k0UWK4f4EtnRDEXviX8v+yCSpd7wo/Kr9/flCFK:+JkZTavRoiswo/Kr9/8M"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486680",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "93331098-6bea-4b73-a48a-6beefafeb0f9",
            "value": "3375027"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486680",
            "to_ids": true,
            "type": "vhash",
            "uuid": "cf59b9b9-7204-406c-8cf7-746512c5c891",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486680",
            "to_ids": true,
            "type": "filename",
            "uuid": "51385b94-b063-4035-94cd-6df982ff3a0e",
            "value": "Wetnightmares.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  11/03/2025",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486680",
            "to_ids": false,
            "type": "text",
            "uuid": "c27502b5-2aa7-4400-b566-23c177173a6d",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:18/67\nFirst Submission:2025-03-06T02:24:32.000000+00:00\nLast Submission:2025-03-06T02:24:32.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129953",
        "uuid": "dcc438b1-cc8e-44fb-8ff1-746c5e467521",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499316",
            "to_ids": true,
            "type": "md5",
            "uuid": "54bef8a6-74ff-4743-825d-2c137afd6af0",
            "value": "45de8c6b4cac7546c389e942d0ee3a40",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499316",
            "to_ids": true,
            "type": "sha1",
            "uuid": "eb9ebac9-a07c-45fe-852a-a5bb20b9e698",
            "value": "10442c6ce3f283ce8c8c5a6c9bbd0f6f147614fe",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499316",
            "to_ids": true,
            "type": "sha256",
            "uuid": "18e6bc85-806a-423d-ba52-cd985c399761",
            "value": "819ad25dacb2fe89fc35913cb4ac7dfadb7ab084c749bf801eae3d9513aa47fb",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486702",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "3606cc4f-9abe-47c5-8c91-4c864dcf4d44",
            "value": "98304:lSkELyMJObT6ZEVZ8zqLiyYZezZCjX/o/Kr9nuOX3A:l8LyfNA0cUzguOXw"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486702",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "08cea705-5bd6-4568-a492-a5306c5b5740",
            "value": "4739216"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486702",
            "to_ids": true,
            "type": "vhash",
            "uuid": "8cbf7024-318e-4e67-81f2-9947fb8cf6b6",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486702",
            "to_ids": true,
            "type": "filename",
            "uuid": "a550ffc1-8bbe-4ad0-a542-ce5be01e49ef",
            "value": "Deepsleep2tt.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  16/08/2025",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486702",
            "to_ids": false,
            "type": "text",
            "uuid": "71ef7ea7-c24f-4557-9668-e1f3c0255134",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:11/67\nFirst Submission:2025-08-16T05:17:32.000000+00:00\nLast Submission:2025-08-16T05:17:32.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129974",
        "uuid": "fe318f71-5075-42c6-aa0d-4d023be1af95",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499318",
            "to_ids": true,
            "type": "md5",
            "uuid": "c3707a83-c1d9-49c0-a5e6-3cf5ae2f6bcb",
            "value": "fe3a1367fafd49a35e0b99aa3f9ce60e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499318",
            "to_ids": true,
            "type": "sha1",
            "uuid": "b6f72fb9-d724-4dc6-b02d-2f8edd0bb2ac",
            "value": "446b890bec38694dd185e08fc2e37b7801a4637c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499318",
            "to_ids": true,
            "type": "sha256",
            "uuid": "9ce58d4e-83cb-4202-b674-f30c68e7fe2a",
            "value": "c4a5eb32a08e92bdd18be1815bd189b7d8d414221de07937c5d4729a7752558c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486724",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "06fa5131-a362-4d1b-a782-11728ba12ee0",
            "value": "98304:FCJUbAawYM6PSDY4bZBTVZ3x1O8ftRrRvmH8:cubAa7M6PyY4bZBTVrh28"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486724",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "5eaa76e9-67b2-40fb-9f2b-cef063334d43",
            "value": "4567754"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486724",
            "to_ids": true,
            "type": "vhash",
            "uuid": "75981bad-aced-416b-a2eb-2c3758e29c06",
            "value": "a2c500e7480db8b0368d3c15c0bbccca"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486724",
            "to_ids": true,
            "type": "filename",
            "uuid": "2ab849f0-e44a-4fd7-9825-8af8349b9def",
            "value": "Melancholianna.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  29/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486724",
            "to_ids": false,
            "type": "text",
            "uuid": "6019841b-1733-4955-9858-dd9142cc0047",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:25/68\nFirst Submission:2026-03-20T13:47:57.000000+00:00\nLast Submission:2026-03-20T13:47:57.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780129996",
        "uuid": "54a1cc20-5a28-4446-9387-371bd17b24e1",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499318",
            "to_ids": true,
            "type": "md5",
            "uuid": "60337795-7389-4f72-b407-5761acfa50f5",
            "value": "5bcc864e91d8600a5523c9440c6f3498",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499319",
            "to_ids": true,
            "type": "sha1",
            "uuid": "183eadda-e7a8-42b5-b0bd-d707b0bdc45a",
            "value": "cda38ed676519787f09098631ea3666e6dddedad",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499319",
            "to_ids": true,
            "type": "sha256",
            "uuid": "ba8dbbea-49fc-401f-ac23-bcf629bfb30f",
            "value": "62c464f2aaede2751fb77774b2eb06e2955171145b9aa3a148cb707bf7705412",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486745",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "4cc967f4-88d3-4c2a-85c9-a62b7ab983c3",
            "value": "98304:ENuJYlpaMkfUD2LC4dxEfvVSo3oTwrCubv:MdpPko2eiEfvVSoLbv"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486745",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "015849e3-5979-45bb-980a-dd438d019b1c",
            "value": "4023681"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486745",
            "to_ids": true,
            "type": "vhash",
            "uuid": "b7ff0c0f-760b-458d-a227-b0a735d0d6a9",
            "value": "20a3f0e6887657352c632695bb9f9c13"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486745",
            "to_ids": true,
            "type": "filename",
            "uuid": "62d716fb-6a8f-4201-bfff-63894edbbe66",
            "value": "e8ubd.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  31/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486745",
            "to_ids": false,
            "type": "text",
            "uuid": "44a8726f-663a-4dc0-9f0c-b787590ac25f",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:18/68\nFirst Submission:2026-03-30T11:23:57.000000+00:00\nLast Submission:2026-03-30T11:23:57.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130017",
        "uuid": "43602d8e-25c6-4d59-96db-9f8d2521c344",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499319",
            "to_ids": true,
            "type": "md5",
            "uuid": "cd9cf207-9525-4d12-8a3c-304655d316e3",
            "value": "62fd9716a8b84191045b391a78b007fb",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499319",
            "to_ids": true,
            "type": "sha1",
            "uuid": "1d39689e-b9a6-46d3-9872-dbf27cd913ac",
            "value": "3befa84a68084674478cfdac44ded1c50b394da0",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499320",
            "to_ids": true,
            "type": "sha256",
            "uuid": "a2f6fbac-4266-48c1-9c82-6d4555fa7598",
            "value": "b2eb39c9b93acbc0020979066b4399519ade759039df7d65e48057dd66a9754f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486767",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "29358fa0-7d5f-44a6-9e6f-4c8284f34f44",
            "value": "98304:Oo8s3/vyE3/6ZkCfPD8mfwOhlQO8ftRrQVd:O8ny+CZFf78ewOhjd"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486767",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "42a29439-6ce9-442c-b5c9-d3ef45565bb5",
            "value": "4264368"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486767",
            "to_ids": true,
            "type": "vhash",
            "uuid": "0be7b1ef-e1e2-45fc-b9f4-ed9f966f0924",
            "value": "a2c500e7480db8b0368d3c15c0bbccca"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486767",
            "to_ids": true,
            "type": "filename",
            "uuid": "615ed46e-a4a8-4953-ba5d-b4d4e2f4406d",
            "value": "ReSister.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  30/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486767",
            "to_ids": false,
            "type": "text",
            "uuid": "b21efd1a-d886-474e-a2ef-94600a8658e8",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:24/68\nFirst Submission:2026-03-26T14:27:57.000000+00:00\nLast Submission:2026-03-26T14:27:57.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130039",
        "uuid": "33bde90e-936e-4cee-900b-41835385537e",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499320",
            "to_ids": true,
            "type": "md5",
            "uuid": "99b5e008-e9b6-46b8-a986-c8c47f3e2db6",
            "value": "9c804db4ce76c2787e60a4cdc7816c63",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499320",
            "to_ids": true,
            "type": "sha1",
            "uuid": "d58e6664-7263-4adf-b453-59ed2858a615",
            "value": "c2579a1a9e04299e8e1a3e86aa753988951ed2e1",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499320",
            "to_ids": true,
            "type": "sha256",
            "uuid": "a37680aa-3a08-4cd7-a8c9-cba6c30b4a5a",
            "value": "c7d7244d0e88ec804b26b8125dfb7a934e23a7c17d32a88f7b22d67176af0b1f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486789",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "2aee29ac-d085-4952-9dce-39ab4a7c855f",
            "value": "49152:P5sDt33rY5fIr1++bwvvDHMnLKDFA3hnHOXQtH6yL7gbHXfAQO8ftRrQts+:WDt3bY5fIfwhDUVnUYQO8ftRrQt1"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486789",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "3bbae5cd-9717-4cb7-ad47-2d44efc463c5",
            "value": "4043184"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486789",
            "to_ids": true,
            "type": "vhash",
            "uuid": "81ab3c12-76e8-430f-949d-44357acf05ef",
            "value": "a2c500e7480db8b0368d3c15c0bbccca"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486789",
            "to_ids": true,
            "type": "filename",
            "uuid": "0526b06b-f248-4373-9482-bc6d43d1a77e",
            "value": "rxnwd.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  29/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486789",
            "to_ids": false,
            "type": "text",
            "uuid": "e43c12a8-cf16-4698-b2c6-304d081e6f2f",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:24/68\nFirst Submission:2026-03-26T08:00:04.000000+00:00\nLast Submission:2026-03-26T08:00:04.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130060",
        "uuid": "7ed90cda-19d4-436d-8aa4-d903a46859dd",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499321",
            "to_ids": true,
            "type": "md5",
            "uuid": "4828ba5b-db92-4988-b602-bedb77dbe81d",
            "value": "e4ad4c1f067c3b706742339edd621292",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499321",
            "to_ids": true,
            "type": "sha1",
            "uuid": "837da0bd-adc0-48dd-831d-8b6f844c6105",
            "value": "abd4b651a0471cb35bfecc3181864e82ad38f974",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499322",
            "to_ids": true,
            "type": "sha256",
            "uuid": "52a159fb-035a-4a24-93c2-ba10a25e9afc",
            "value": "e3e01c2e78f2156f53e2210b2c17425ad3e6d7607f6f56e6137286637735e53f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486810",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "46261c6e-e362-4880-8cc6-ed9b76591980",
            "value": "49152:yKjStmF6GHKH6/tvDCHMIdHLKDFfqyn/roSTfXCOR7ppfyfjO8ftRrhIc:y9t1a4d2DwyTot7O8ftRrhIc"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486810",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "f4c25fe0-eb9d-4001-90ce-d5e4c725159d",
            "value": "3819060"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486810",
            "to_ids": true,
            "type": "vhash",
            "uuid": "4bac8af4-72f4-4a4a-9400-5aa3211ec277",
            "value": "bffc921953c9ef598a5fe1ecbaa85ac3"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486810",
            "to_ids": true,
            "type": "filename",
            "uuid": "0afc348e-40db-4dcb-a38d-4c795ded4b18",
            "value": "tdn3m.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  29/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486810",
            "to_ids": false,
            "type": "text",
            "uuid": "5a3a6b5f-1919-4a4c-a913-b0b27150b511",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:23/68\nFirst Submission:2026-03-29T15:59:30.000000+00:00\nLast Submission:2026-03-29T15:59:30.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130082",
        "uuid": "55812b06-122d-424b-9f07-b9be3dd2a145",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499322",
            "to_ids": true,
            "type": "md5",
            "uuid": "9fbfd6cc-95cc-483c-8dff-0c89a1a75fcb",
            "value": "0c8d462ff2913ecd04416523bec4da05",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499322",
            "to_ids": true,
            "type": "sha1",
            "uuid": "3e0c7196-351b-4785-9da8-f46fb4e63ada",
            "value": "fcc7d4ac7bbcefda41fb32187466f441956b5d74",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499322",
            "to_ids": true,
            "type": "sha256",
            "uuid": "7deb9723-d143-4d4d-8757-8b25e333c02c",
            "value": "a30ee3bfdb95373a6091a386556a6320a9895b842e3928334cfe8d223e2101f2",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486832",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "b32aee2c-7387-4f85-aae6-778c6dce01f1",
            "value": "49152:PyXs+9R9xanSALoAxi7dNAHHPH7Ca6Eh34roSTfLKVCp3cxo/KrH1dmE:PyXseR94gAxiQHHzCaVhYoQ0o/KrH1dX"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486832",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "64cedfca-fa67-4a30-a45f-01f0ac7a6ed6",
            "value": "3134769"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486832",
            "to_ids": true,
            "type": "vhash",
            "uuid": "2207e8b4-d366-4721-a0be-f1ff8718f922",
            "value": "6830dd7fa3ae1c57e850c18b8cbb5790"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486832",
            "to_ids": true,
            "type": "filename",
            "uuid": "3caa1e7a-8930-425a-be92-5ef71d7a6b44",
            "value": "j4s10zu68.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  29/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486832",
            "to_ids": false,
            "type": "text",
            "uuid": "6154d5d5-7445-45fc-8eff-98f1e5593ac5",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/66\nFirst Submission:2026-03-29T07:26:29.000000+00:00\nLast Submission:2026-03-29T07:51:57.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130104",
        "uuid": "eb5c5346-cdb0-4aed-82d4-902c874c3025",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499324",
            "to_ids": true,
            "type": "md5",
            "uuid": "2d796ab2-a31f-4972-b3e5-12a325f8db49",
            "value": "a2fd8f837a99887ffe2b8b869364476d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499324",
            "to_ids": true,
            "type": "sha1",
            "uuid": "88a1bd4d-3296-4012-b85a-29a2551bac6a",
            "value": "1f5e1d7aaf7726d0eb11cc09008a5c49efdd7af4",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499324",
            "to_ids": true,
            "type": "sha256",
            "uuid": "e6f0eb7c-60b9-4553-8d1f-15506ebc293a",
            "value": "223df415c48014db191438fe38c300c7c50c3338c1a86a6aa64fdfaa88a1179d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486854",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "fcc0877c-99cb-4bc8-8aba-a5edd458fa05",
            "value": "49152:YGjLRoqFHvuDeX/4nvDCHMIdHLKDFfVBarN5LABfbypOR7ppfyfdO8ftRrh1r7W:YGzFPuDev/d2D/Ih5MBfAVO8ftRrh1XW"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486854",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "1a9c91b6-7de0-43ba-a2f5-347b5568fbfe",
            "value": "3819060"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486854",
            "to_ids": true,
            "type": "vhash",
            "uuid": "d5742a15-ed07-45a5-b9d7-2812163546e3",
            "value": "bffc921953c9ef598a5fe1ecbaa85ac3"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486854",
            "to_ids": true,
            "type": "filename",
            "uuid": "cf24964c-8456-4d95-a12e-6d53ed3b119d",
            "value": "6fzut.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  07/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486854",
            "to_ids": false,
            "type": "text",
            "uuid": "085b390a-b9a5-469c-b089-664da3bfbe77",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:18/69\nFirst Submission:2026-04-06T02:48:01.000000+00:00\nLast Submission:2026-04-06T02:48:01.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130126",
        "uuid": "4274d0b8-c7c2-4f87-8c73-00f2a74076b5",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499325",
            "to_ids": true,
            "type": "md5",
            "uuid": "f927290f-288c-496e-a573-281635c63863",
            "value": "2018d8606734a6755f45223d40bdbd5b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499325",
            "to_ids": true,
            "type": "sha1",
            "uuid": "9c27dd2e-24bb-4cac-bd55-9ef969167808",
            "value": "521f46ab9551ffd9b5d28936724e6cb5544983e2",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499325",
            "to_ids": true,
            "type": "sha256",
            "uuid": "dc5e02c5-4fe1-4fb8-aa90-46a99aa83de1",
            "value": "a6a7d1a404cf9e0d9ed0c420432f76a64197408f2941dec0aba1a865067c4b1f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486875",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "4d013860-adeb-4c2b-b231-c2ce9e754cf1",
            "value": "49152:BiWRZGACyHsSnAXX8uBHuJwAHLPWy1O3G3MQIYOVCp3c+o/KrHEcDtK:B9RZ9Cy+XX/s7HLOrzYJo/KrHEck"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486875",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "a2aad12d-d524-4c12-8af8-a97a401feaa9",
            "value": "3032369"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486875",
            "to_ids": true,
            "type": "vhash",
            "uuid": "a98ac88f-8eff-40a9-9cdb-79d5484f6758",
            "value": "6830dd7fa3ae1c57e850c18b8cbb5790"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486875",
            "to_ids": true,
            "type": "filename",
            "uuid": "06f0eb9e-8e1f-47f6-984d-b6c052a6ddf6",
            "value": "85llc.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  11/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486875",
            "to_ids": false,
            "type": "text",
            "uuid": "9b3d8369-e490-49fe-9a2e-06a853b8723c",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:29/67\nFirst Submission:2026-03-17T18:21:46.000000+00:00\nLast Submission:2026-03-17T18:21:46.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130147",
        "uuid": "3e76734b-482d-4b66-814e-e911eaa867de",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499326",
            "to_ids": true,
            "type": "md5",
            "uuid": "55ab6fc7-8753-417f-89c4-af4102ad97fa",
            "value": "8d6b571ef72b3b19dcaeccb946300c6d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499326",
            "to_ids": true,
            "type": "sha1",
            "uuid": "2468504d-a047-4002-8387-8a832ac958a5",
            "value": "70f4f3927b7a5bf2d353e2d80479272064a53146",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499326",
            "to_ids": true,
            "type": "sha256",
            "uuid": "ac78d904-5c42-436f-861c-5995a4b0f193",
            "value": "c3d4f9bff422d315b210a14a932a7108697d82f2c1c4660e7a1c7c2b40e2d343",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486897",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "9c532533-f52b-4425-8426-8c08c5bc4923",
            "value": "49152:MlJ4rFGeSLQRnAHpPuNpvmFe7/3Yt0jf03kVCp3cIo/KrHCun0cr:MvPhkuHpGNwFooWrW9o/KrHCu0u"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486897",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "b04eae68-e2be-4dd5-ac4a-89bca8f942f7",
            "value": "3183921"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486897",
            "to_ids": true,
            "type": "vhash",
            "uuid": "bd8ffc2f-9811-4664-a433-2ba5897c76cb",
            "value": "6830dd7fa3ae1c57e850c18b8cbb5790"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486897",
            "to_ids": true,
            "type": "filename",
            "uuid": "82bdcf0f-b314-498c-ad3c-927b7c36e01c",
            "value": "884xtcx2s.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  01/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486897",
            "to_ids": false,
            "type": "text",
            "uuid": "dddf0b44-83f9-49ba-a347-fe723022ed01",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:24/66\nFirst Submission:2026-03-31T07:51:33.000000+00:00\nLast Submission:2026-03-31T07:51:33.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130169",
        "uuid": "6850a7f1-8475-4357-b0d3-c9d37fde86e6",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499327",
            "to_ids": true,
            "type": "md5",
            "uuid": "302e2a02-b5f7-48dc-a0b3-cd0e402dffcf",
            "value": "cc34143c4cdeb6c1c73e1bba088add2f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499327",
            "to_ids": true,
            "type": "sha1",
            "uuid": "a848ec89-75c9-45f7-9ce5-fc172c4b5154",
            "value": "900b3bf5689f0a14a19a7c3f03dc94d59066c1d2",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499327",
            "to_ids": true,
            "type": "sha256",
            "uuid": "1910ac82-25c5-4391-aec5-fe32133088f6",
            "value": "1f948b4bd62ecf6ec34eaded9471f5278c3c192591988fa3aeca06ec33cb4a67",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486919",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "aa15b7a1-9ca0-435c-b5ab-dddd3e5c1b3c",
            "value": "49152:Bpl0HD7vMzwmgiGHFavDCHMIdFLKDFfqyn/roSTfX/OR7ppfyfNO8ftRrhILu:5CwzNMFBdYDwyTog1O8ftRrhILu"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486919",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "a98fcf2d-f487-4c2f-95ec-57318125df78",
            "value": "3819060"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486919",
            "to_ids": true,
            "type": "vhash",
            "uuid": "73fb2771-be0a-44de-86ac-d2cb1cd6d518",
            "value": "bffc921953c9ef598a5fe1ecbaa85ac3"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486919",
            "to_ids": true,
            "type": "filename",
            "uuid": "16464dfb-136b-4384-b59e-09cd6d66cbf7",
            "value": "etja6nqd.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  30/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486919",
            "to_ids": false,
            "type": "text",
            "uuid": "d461ae2f-e116-475d-b4b3-f2c542e56a5d",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:25/68\nFirst Submission:2026-03-30T03:25:05.000000+00:00\nLast Submission:2026-03-30T03:25:05.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130190",
        "uuid": "0b791c80-68e3-4604-9847-10cfe4fcd412",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499328",
            "to_ids": true,
            "type": "md5",
            "uuid": "a5db5425-a162-4293-83f6-d720d9e6480e",
            "value": "834ee8993e50b280caf3e573c319c0fb",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499328",
            "to_ids": true,
            "type": "sha1",
            "uuid": "cbf7bf46-4c91-46d4-9499-59b202f67b06",
            "value": "30603c5269fecc14eb996f39ad8313fbf4c73cdf",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499328",
            "to_ids": true,
            "type": "sha256",
            "uuid": "31b059f6-ac39-4fba-8384-9043d3904bb2",
            "value": "43d9411534bafd9e549fc1a6ddc21a3fea73ea3ba042eea35973d6e1c0d679fd",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486940",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "75372b33-6b57-4049-a44d-77091b977d66",
            "value": "49152:gjHiLl+FhOVz/N+HnAHGPH7Ca6Eh34roSTfLeVCp3c+o/KrH1dmPXI:WiLluhOVIHAHGzCaVhYoQfo/KrH1dY4"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486940",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "f306122e-b8e6-4ac3-95bd-ca125401c346",
            "value": "3134769"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486940",
            "to_ids": true,
            "type": "vhash",
            "uuid": "9cf7a1f9-72bd-4e91-acc9-5b3ca0157b7e",
            "value": "6830dd7fa3ae1c57e850c18b8cbb5790"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486940",
            "to_ids": true,
            "type": "filename",
            "uuid": "2252991b-9de0-4700-a9be-cb7c7e4e1a6f",
            "value": "u8znrj.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  30/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486940",
            "to_ids": false,
            "type": "text",
            "uuid": "80b1d360-6001-45fb-89fc-0f00abf37376",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:25/66\nFirst Submission:2026-03-28T12:08:06.000000+00:00\nLast Submission:2026-03-28T12:08:06.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130212",
        "uuid": "eff2a3c7-ab36-4a4b-a574-73e120222a82",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499329",
            "to_ids": true,
            "type": "md5",
            "uuid": "5b1f4275-8e2c-4195-ae94-22f91b06f90b",
            "value": "d237368fbe56bfea321a6dd16db7b692",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499329",
            "to_ids": true,
            "type": "sha1",
            "uuid": "90708538-9203-4ca5-9115-2c272a432a70",
            "value": "8c5a8c3bebc80dd6304dd0c17237b4c264af3416",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499329",
            "to_ids": true,
            "type": "sha256",
            "uuid": "ed874289-086e-4c8d-9d65-f869c0d2147a",
            "value": "9e17fb10fe7d0c7948a0ff494e0c141503f5c13a6a83d996744ad33fde0b278f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486962",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "2537dd6f-9af9-4484-989c-06e0de123110",
            "value": "49152:n++bvX1MfGYL8eG/K9PKvDCHMIdULKDFfqyn/roSTfXzOR7ppfyfgO8ftRrhIVnf:+0/1Q3L8QxdTDwyTog4O8ftRrhIJ"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486962",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "b3aad76e-d4f9-4d4e-91ac-509362d6f80d",
            "value": "3819060"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486962",
            "to_ids": true,
            "type": "vhash",
            "uuid": "15417f40-c697-4f0e-b8c6-25b12e950ed1",
            "value": "bffc921953c9ef598a5fe1ecbaa85ac3"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486962",
            "to_ids": true,
            "type": "filename",
            "uuid": "71900364-1f65-42a2-b4de-3246e087362c",
            "value": "ur2eqm.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  02/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486962",
            "to_ids": false,
            "type": "text",
            "uuid": "46f08d69-e61b-4ef3-861a-6aee65006585",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:21/68\nFirst Submission:2026-03-31T16:31:13.000000+00:00\nLast Submission:2026-03-31T16:31:13.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130233",
        "uuid": "2c50ff67-1ada-43fb-82de-eda0ed3e106a",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499330",
            "to_ids": true,
            "type": "md5",
            "uuid": "bb47cde2-e9e1-4700-820f-2e178c19a35e",
            "value": "515e835c9e2520be86d90192648308db",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499330",
            "to_ids": true,
            "type": "sha1",
            "uuid": "d555eee5-4624-4a71-adb9-494756e1f48a",
            "value": "78ee2dd51e5d7b5586adc9aae6310a156fd0a397",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499330",
            "to_ids": true,
            "type": "sha256",
            "uuid": "0dfd45d1-a845-4a66-871f-4740e4cac089",
            "value": "756565c100bedfa0fd370b3915027a177a957d5746be2e798e8bdad067cf2856",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779486984",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "c0fb2fce-65f1-42c3-a2d0-68160c9646c0",
            "value": "49152:0POWXyPxIDA57Rb9eOfAHnPuNpvmFe7/3Yt0jfX3kVCp3cFo/KrHCumo:0PNsIDuN9HIHnGNwFooWrHwo/KrHCuH"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779486984",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "2f65ba40-417d-4fe8-b60f-6c3bcb6df571",
            "value": "3183921"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779486984",
            "to_ids": true,
            "type": "vhash",
            "uuid": "1285b34b-fe42-40de-8e39-f3ffc5f55712",
            "value": "6830dd7fa3ae1c57e850c18b8cbb5790"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779486984",
            "to_ids": true,
            "type": "filename",
            "uuid": "dacaa7ba-aff1-40e4-abb4-cbb764a7afd9",
            "value": "DaysWithMySister.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  07/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779486984",
            "to_ids": false,
            "type": "text",
            "uuid": "71b16d30-0237-4a06-aae1-c0d064823307",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:20/67\nFirst Submission:2026-04-06T07:57:29.000000+00:00\nLast Submission:2026-04-06T07:57:29.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130255",
        "uuid": "0c312c4a-b260-4f7e-8fde-aa1de5f453b5",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499331",
            "to_ids": true,
            "type": "md5",
            "uuid": "876443d4-1363-4e82-a12f-60572ccb67ff",
            "value": "217997a522b2040a7e339d95f2b2c4d9",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499331",
            "to_ids": true,
            "type": "sha1",
            "uuid": "241d217f-09b3-42aa-999f-821d31d3a300",
            "value": "fee2110a9de2cc338dffc21de91f2dd04714f921",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499331",
            "to_ids": true,
            "type": "sha256",
            "uuid": "c7dc8656-2d63-4602-9687-5603b0a07a54",
            "value": "75be1f4ce031d865a28f0a3aa5850362da01de6232fe373edf6eb414d2e627aa",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779487006",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "7f9ca6a5-4371-4ce6-97f4-8685414479f6",
            "value": "49152:l22/GbVG6qXhIk9vjvDCHMIdgLKDFfQiWbP1Mz0Cz+AyfNREOR7ppfyfTO8ftRrp:Q2yVrPk1OdXDWiw1MzdrO8ftRrhn3"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779487006",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "cabafbe6-1096-433e-9ec6-fe81ea5e4f6e",
            "value": "3851828"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779487006",
            "to_ids": true,
            "type": "vhash",
            "uuid": "c0382795-2431-44bc-945c-b26e8475c3b6",
            "value": "bffc921953c9ef598a5fe1ecbaa85ac3"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779487006",
            "to_ids": true,
            "type": "filename",
            "uuid": "e59c5535-bd7a-4dc9-a0bc-bb6c161e8b55",
            "value": "30DayswithMySister.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  02/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779487006",
            "to_ids": false,
            "type": "text",
            "uuid": "6deca966-19cd-4d98-af6a-3e90c0ce8ce2",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:19/68\nFirst Submission:2026-03-31T16:35:47.000000+00:00\nLast Submission:2026-03-31T16:35:47.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130277",
        "uuid": "01e7a402-bdf4-4beb-8a0c-e85f659c0442",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499332",
            "to_ids": true,
            "type": "md5",
            "uuid": "f0e8da69-b905-4516-bc52-54cebd90b34b",
            "value": "741261f68c1f443a2bf3ead1ccc0c571",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499332",
            "to_ids": true,
            "type": "sha1",
            "uuid": "aeaf8acc-31ef-4476-bba4-0ca24be7e531",
            "value": "624598090ce93b5498bcabea8c57fbfe7d4db29a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499333",
            "to_ids": true,
            "type": "sha256",
            "uuid": "a7973d7d-ab27-4eda-ab70-67b0e9cdb671",
            "value": "263e70a5633c8f114966387f57cc45ff4cccce94463b0ae1075fd9c1a3f005ec",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779487027",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "f918d4fe-e074-400c-bc3e-60958744e3d7",
            "value": "49152:5Es1mRK0ca7vadWlhSHqJfHvDCHMId1LKDFfqyn/roSTfX0OR7ppfyf9O8ftRrhq:5EsD0caEWlY0ydIDwyToDFO8ftRrhIJ"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779487027",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "34aea639-56a2-4956-93d0-e082d87e4870",
            "value": "3819060"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779487027",
            "to_ids": true,
            "type": "vhash",
            "uuid": "f17585d1-0fc5-468f-8e85-d4cf6a9d6d57",
            "value": "bffc921953c9ef598a5fe1ecbaa85ac3"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779487027",
            "to_ids": true,
            "type": "filename",
            "uuid": "6da476e8-b923-4c8e-bf53-5065b295181d",
            "value": "a7xb6i.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  02/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779487027",
            "to_ids": false,
            "type": "text",
            "uuid": "752ec6a5-64f4-4ba8-a68a-893d4309c5d3",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:20/69\nFirst Submission:2026-04-01T02:38:43.000000+00:00\nLast Submission:2026-04-01T02:38:43.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130298",
        "uuid": "29b731e1-0162-4615-b6ec-c703d3921421",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499333",
            "to_ids": true,
            "type": "md5",
            "uuid": "4e9b1096-a20e-4548-b9c9-e516f8a8c38e",
            "value": "649d096872939758c55e851a6e070fde",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499333",
            "to_ids": true,
            "type": "sha1",
            "uuid": "33d9aa1d-95be-4f13-8995-f6224d32adfe",
            "value": "da9fbb2a207a4528e28550673f5d595b4d30b8ee",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499333",
            "to_ids": true,
            "type": "sha256",
            "uuid": "0731b67d-e55b-400b-9b90-f4edc89fe1ab",
            "value": "4f348f6f2e8ad41e168468570d0639dc5069fcac8b17ec3c9ebb9b385494aeee",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779487049",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "edb6e523-5057-40a4-9384-0cbfcf4ceca1",
            "value": "98304:7azL3ol8iXznHdGNwFooWr4to/KrHCuRh:7q68iDHINGkw"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779487049",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "a036be47-338f-4007-90bf-72e3a2c2706a",
            "value": "3183921"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779487049",
            "to_ids": true,
            "type": "vhash",
            "uuid": "43626f30-34d6-443d-844d-b9afb4ff3675",
            "value": "6830dd7fa3ae1c57e850c18b8cbb5790"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779487049",
            "to_ids": true,
            "type": "filename",
            "uuid": "26ab75b7-baac-4846-b2ec-a49d00f5d7a9",
            "value": "tewhnl94e.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  29/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779487049",
            "to_ids": false,
            "type": "text",
            "uuid": "ccd4e382-fd75-41ec-82a5-42ef268ee72f",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:24/55\nFirst Submission:2026-03-24T14:42:58.000000+00:00\nLast Submission:2026-03-24T14:42:58.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130320",
        "uuid": "e26f43b4-6596-4896-845d-fc4ee8691ffe",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499335",
            "to_ids": true,
            "type": "md5",
            "uuid": "852dc496-662c-4c3f-b003-3854d2a9b30e",
            "value": "2628bb40699e4dffe6e78dc589fce234",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499335",
            "to_ids": true,
            "type": "sha1",
            "uuid": "8a6e6e9a-cfd6-4417-9344-72260d9c85c6",
            "value": "22baf46797b3e74efc52a2ef7474fd23c980bdd7",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499335",
            "to_ids": true,
            "type": "sha256",
            "uuid": "e8d97d5d-c2c5-4687-9c2a-e4a8507e2d46",
            "value": "a2d2976965ba5cea40cb1d8d813061622ec3c7d19c6b04ff3dce7621529958b4",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779487071",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "3d53817e-7f40-47bd-8384-9c7bc2e4099f",
            "value": "98304:DkIqUr/IM/UmBD58cpOKLbHO8ftRrrzbv:QdUjb58cpLNbv"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779487071",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "854ae3b1-9df6-49e6-83a1-b220003e12e8",
            "value": "3165407"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779487071",
            "to_ids": true,
            "type": "vhash",
            "uuid": "e5710b19-c3a2-4f79-aded-e96e17ed691c",
            "value": "5351097c0b288f4a6363a1a7f4137d7c"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779487071",
            "to_ids": true,
            "type": "filename",
            "uuid": "f3d36eca-4a9f-4327-9a08-fc00b1350482",
            "value": "cy0md.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  30/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779487071",
            "to_ids": false,
            "type": "text",
            "uuid": "78277d96-05b2-4f65-a346-e9cd5eb63b82",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:26/67\nFirst Submission:2026-03-30T12:15:10.000000+00:00\nLast Submission:2026-03-30T12:15:10.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130341",
        "uuid": "dac3c28b-de1a-42de-b8dc-4a008ee7a948",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499336",
            "to_ids": true,
            "type": "md5",
            "uuid": "fda2abb0-d24c-4f5a-b0ee-e71545aaa206",
            "value": "82ca98ccdf0db582fd232c2c0f312969",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499336",
            "to_ids": true,
            "type": "sha1",
            "uuid": "745bf3d2-b775-4fca-8ea2-721a30c236b5",
            "value": "af3c611626aff88b6a5ec4b3ffe112cc30c331ca",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499336",
            "to_ids": true,
            "type": "sha256",
            "uuid": "0fd8b7a9-85ff-4649-a23f-c26706b87983",
            "value": "916a08394c87ae727b34491bfd4afbfcd9effe997fafb3f027f41aa5dda9bc06",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779487092",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "04e1348b-8ddc-4d11-bdac-1805eda908f8",
            "value": "98304:1W91D3IrEleBieszHDMbBdO8ftRrQdjOQ:1+dYrDivjsejOQ"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779487092",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "2f908468-728a-493e-9733-9fb4060e5165",
            "value": "4133352"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779487092",
            "to_ids": true,
            "type": "vhash",
            "uuid": "ebc506bf-0b8f-4be3-8004-7538d260b4cc",
            "value": "a2c500e7480db8b0368d3c15c0bbccca"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779487092",
            "to_ids": true,
            "type": "filename",
            "uuid": "6396ac54-f11a-40bb-a4ad-e8faacf03145",
            "value": "1ggp9.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779487092",
            "to_ids": false,
            "type": "text",
            "uuid": "d0e3e5ca-34c9-42c9-9917-024ff1fb3625",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:29/68\nFirst Submission:2026-04-02T09:43:21.000000+00:00\nLast Submission:2026-04-02T09:43:21.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130363",
        "uuid": "71cd3131-4a71-47cb-94b2-81080e053501",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499338",
            "to_ids": true,
            "type": "md5",
            "uuid": "29bc325a-5ef1-4466-9fe8-23ce52ca9bd8",
            "value": "a5ac42f0996be5300d0ea9dd7101292c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499338",
            "to_ids": true,
            "type": "sha1",
            "uuid": "a8cf59d5-8c74-4ff4-afa4-5fa309255d5e",
            "value": "04cca029ae9b7cce2560593d21368f8314bebd5b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499338",
            "to_ids": true,
            "type": "sha256",
            "uuid": "0a540d89-31b8-4674-a513-121d1541cb32",
            "value": "0a6de5dabb18aa147bfb3831b4a811f50b73f5cede01c224012a558d2a136690",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779487114",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "2cae7823-a860-4b49-b732-593008fecfe3",
            "value": "49152:NuplEi1Bx6jrT0YF9bNVYAHwcmMjH9ommMZxUexQjiUbzD9q0VCp3c2no/Kr91JN:GCsBm/0o9bnTHwcKa3xgD0no/Kr91JN"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779487114",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "6316d657-28f4-41a1-b834-dc4fe1a4439f",
            "value": "3438723"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779487114",
            "to_ids": true,
            "type": "vhash",
            "uuid": "13d447ed-5681-45f2-ba74-af5f2367439a",
            "value": "6830dd7fa3ae1c57e850c18b8cbb5790"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779487114",
            "to_ids": true,
            "type": "filename",
            "uuid": "4aee48fd-a2e9-4ef5-8e5e-52af1f2f7dbb",
            "value": "gtq35r.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  23/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779487114",
            "to_ids": false,
            "type": "text",
            "uuid": "f96c1310-a738-4728-ba70-e2e6074f3248",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:29/66\nFirst Submission:2026-03-18T09:59:12.000000+00:00\nLast Submission:2026-03-18T09:59:12.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130384",
        "uuid": "70089e93-4d6e-4d00-a6e0-ef89809a10d7",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499339",
            "to_ids": true,
            "type": "md5",
            "uuid": "efc7e280-613b-42ef-b04b-c63ae26fa849",
            "value": "f1f1c67cb0902a5ced741aa0e3376905",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499339",
            "to_ids": true,
            "type": "sha1",
            "uuid": "c22bede1-ae2e-43b4-a692-447517b81e3d",
            "value": "76a7cb6396c9eccb0ad4d30de67e42f95fe41292",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499339",
            "to_ids": true,
            "type": "sha256",
            "uuid": "80cd7c35-ddf2-4f36-b04e-3d9bb32fbf5e",
            "value": "6af96a89ba536ef6475271b40cf902875297bf9d6aa4de609cae2752e6a14f12",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779487136",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "104b6f11-72f1-41e6-89c7-6a4696d5ac79",
            "value": "49152:ALDZ7C6spVf0Krzmb2TH8na42AH9mIoXJov0Uxo9JVCp3cbno/Kr9Gpi8OF:ALg6spVsKr8KFAH9CbUOdno/Kr9Gpi8o"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779487136",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "1fe5cc99-502b-40f0-ad77-dc9b1f171f33",
            "value": "3164291"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779487136",
            "to_ids": true,
            "type": "vhash",
            "uuid": "4e50dcec-4f4f-4bba-9ace-857f366c01e6",
            "value": "6830dd7fa3ae1c57e850c18b8cbb5790"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779487136",
            "to_ids": true,
            "type": "filename",
            "uuid": "62228613-33d7-42cb-bc42-39cbadcd2b3d",
            "value": "07dnn8w4.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779487136",
            "to_ids": false,
            "type": "text",
            "uuid": "880c559f-9e24-484b-a75d-3aa8ebcd9179",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:29/66\nFirst Submission:2026-03-21T10:18:20.000000+00:00\nLast Submission:2026-03-21T10:18:20.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130406",
        "uuid": "d086c7a8-5bfe-478b-93a4-4a7b46c5652d",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499341",
            "to_ids": true,
            "type": "md5",
            "uuid": "ae535773-ce9b-4c22-aee1-44544fdd932b",
            "value": "5e0bbf53dde3498daf46eff6fe809159",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499341",
            "to_ids": true,
            "type": "sha1",
            "uuid": "2dcada80-1230-48e2-9c78-5e3dbba0b877",
            "value": "afccf94023807ce2605af64d1d8c65c4d1835cad",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499341",
            "to_ids": true,
            "type": "sha256",
            "uuid": "55bbd57f-4e7f-465f-bfdd-e73827d42869",
            "value": "76a91fc90b37d9a44c29c3f88dece54d96b998060394238b1e1451aa2a813961",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779487158",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "54e2402e-cbd3-46b7-b234-e2b4130ee9c2",
            "value": "196608:x4K9wQ9lGEK2zaCuIrWf2SevNW3ilCRRYg9KqO1iP:x/9ZlirqNW35l0fw"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779487158",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "b4331849-485c-49da-9bf5-6370adfc0f04",
            "value": "8791696"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779487158",
            "to_ids": true,
            "type": "vhash",
            "uuid": "a37e655e-8390-4fd3-95a4-aebf43f91f8a",
            "value": "24ec7ecc8c5522466b5e273c163a9480"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779487158",
            "to_ids": true,
            "type": "filename",
            "uuid": "a8ccea42-38ac-45e4-8869-e0092487099f",
            "value": "mo43nzqd.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  21/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779487158",
            "to_ids": false,
            "type": "text",
            "uuid": "7b6a3db7-f0ba-404e-9109-5f3624859b8b",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:17/68\nFirst Submission:2026-04-04T20:18:41.000000+00:00\nLast Submission:2026-04-04T20:18:41.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130427",
        "uuid": "a593e959-2c8c-4c37-a458-6c759bd88f81",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499342",
            "to_ids": true,
            "type": "md5",
            "uuid": "13cb7b7b-360a-416c-a957-ee57c8724e8d",
            "value": "a2f94d5a454577c934030f06c6a81192",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499342",
            "to_ids": true,
            "type": "sha1",
            "uuid": "b45bb945-5b3b-48d5-a8ca-ab325feea347",
            "value": "e48dc49febc10eab1dd050ad8af051199573a412",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499343",
            "to_ids": true,
            "type": "sha256",
            "uuid": "159cb752-948a-4bd8-9966-3959e3ec01b2",
            "value": "77a1a51f7027b2425207afcb27d1d507f695576ab578cb9a2d3e740df55245e4",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779487180",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "121bc6db-6c71-4413-bee3-8a8fc3fd2b91",
            "value": "49152:poyFf4gyZlqjiq/0PeFkdm2vDCHM4duQdbjzUejG3IOR7ppfyfMO8ftRrWzrUD/6:pbFryPjfPeudidPzdRkO8ftRrWzrx"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779487180",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "d840fb5d-cee1-4c87-820b-df5c2cb4b89b",
            "value": "4301725"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779487180",
            "to_ids": true,
            "type": "vhash",
            "uuid": "e599bbc8-281c-4199-a43b-5158934d9eeb",
            "value": "fedd1f936ec87c2445115a2df48a87be"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779487180",
            "to_ids": true,
            "type": "filename",
            "uuid": "9d797c69-43bf-47c4-9664-ab14fd19ea7d",
            "value": "entwk5.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779487180",
            "to_ids": false,
            "type": "text",
            "uuid": "49b18a07-259e-4fad-bfd6-7f68ae62d89b",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:25/68\nFirst Submission:2026-03-30T12:22:42.000000+00:00\nLast Submission:2026-03-30T12:22:42.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130449",
        "uuid": "7c923a39-e1b0-4123-992b-fc5d9c620056",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499343",
            "to_ids": true,
            "type": "md5",
            "uuid": "41768d22-ced0-4969-aba1-bde9e5d6a6c6",
            "value": "85623429a8624f4e944e5116776506cc",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499343",
            "to_ids": true,
            "type": "sha1",
            "uuid": "618532bb-0d9c-421b-9209-23438aa92a81",
            "value": "baf0b996c3aa5a909a3a68f7e37ed08297fdce9e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499344",
            "to_ids": true,
            "type": "sha256",
            "uuid": "4f07b934-1e26-45bc-b057-7974a9dc1628",
            "value": "1681fcc4b9010fc095cc23ce00758f7fdf7b522619b58bdc468f1809def99bee",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779487202",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "e0c849e4-7b1a-4d0a-8f64-354f25607b5d",
            "value": "49152:tfsSDIFksT/rWTHq2+A+yuvNWo71Thn4TvDCHMTd/QKLdDq154hjcsOR7ppfyftf:GKkXWXANr45dYT1kfVO8ftRr7ZeZQ"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779487202",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "810e6f43-4631-4cf1-979b-9040830460e1",
            "value": "4478021"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779487202",
            "to_ids": true,
            "type": "vhash",
            "uuid": "075ec047-c3ad-48ad-b412-1ab042256414",
            "value": "280cf66220baf7ec9f63697278343405"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779487202",
            "to_ids": true,
            "type": "filename",
            "uuid": "1addc860-c066-48de-aeba-2264fcde8076",
            "value": "2sklv.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779487202",
            "to_ids": false,
            "type": "text",
            "uuid": "95b4c781-f81f-41c4-bd57-9b29b29e0bb5",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/68\nFirst Submission:2026-03-21T14:32:40.000000+00:00\nLast Submission:2026-03-21T14:32:40.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130470",
        "uuid": "c3dac051-bf1a-44ac-8274-3580311f3169",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499345",
            "to_ids": true,
            "type": "md5",
            "uuid": "57b74326-ee71-4ad2-a93b-37799912635a",
            "value": "b7892df057264295cc672f5d3e692208",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499345",
            "to_ids": true,
            "type": "sha1",
            "uuid": "2d1ef19d-1b0c-43e2-ada1-2d03a5b3fb90",
            "value": "7e6f6a199fe651953ffaabe8e5df6df12aa3aea6",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499345",
            "to_ids": true,
            "type": "sha256",
            "uuid": "d1f154d6-4d1c-4af9-99c5-1b012d3bdf56",
            "value": "01c36b4dd4ae42fee08e99c7135a60ba64ee1715e3099437f2cf9e965634a9ad",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779487224",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "0ffb08c8-041a-4805-a5a7-d1874f06195b",
            "value": "49152:sXUb6xGOnwdzF9gFHlvDHMQLKDF4em5/Epbk/UxEyL7gbHXfVO8ftRrRUmeBQx:gUOxGOn+rDtwgbkntO8ftRrRUmgQx"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779487224",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "0fa996b3-a03d-4d83-99ef-194441ba68fb",
            "value": "4367050"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779487224",
            "to_ids": true,
            "type": "vhash",
            "uuid": "ec9c8100-bb33-4b84-868f-1724a7660ad2",
            "value": "a2c500e7480db8b0368d3c15c0bbccca"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779487224",
            "to_ids": true,
            "type": "filename",
            "uuid": "b8cf5216-778d-48df-8721-2a5be3191917",
            "value": "iusrcmm.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779487224",
            "to_ids": false,
            "type": "text",
            "uuid": "a782b9d7-51b0-45e4-9a2e-a2d558b4347e",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:29/68\nFirst Submission:2026-03-22T16:48:51.000000+00:00\nLast Submission:2026-03-22T16:49:11.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130492",
        "uuid": "88d2d117-faaf-4257-9aca-f4bf1719f6f1",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499346",
            "to_ids": true,
            "type": "md5",
            "uuid": "0d8d483d-433e-4d9c-92d9-24bd6891d246",
            "value": "89035bfa90eca5cd50aca6f258a355fb",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499346",
            "to_ids": true,
            "type": "sha1",
            "uuid": "da4c2268-6375-42e4-bc00-d4184929ce9b",
            "value": "59ba09b4ea7134bec6691a1eed1fa0a2b3e5b0c5",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499347",
            "to_ids": true,
            "type": "sha256",
            "uuid": "9878d882-8280-4451-9e57-d1f15743184e",
            "value": "c5f5918bed41b9b89a70aec0ceffbac91c5dc1eddc687346bf43590c19d08be2",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779487246",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "ac99ee81-3cdb-41d3-a594-66ea27901812",
            "value": "196608:RJh71PpbY5l9iooBf33Sob4ba3bmOQKl/:RJh7ZNYX9Y33T8b+bLQm"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779487246",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "0de1ebcf-1f17-4dee-871b-fae050c4fb61",
            "value": "8787207"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779487246",
            "to_ids": true,
            "type": "vhash",
            "uuid": "94cdcf41-53a9-4335-a630-540adf88dc34",
            "value": "24ec7ecc8c5522466b5e273c163a9480"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779487246",
            "to_ids": true,
            "type": "filename",
            "uuid": "f87664de-b08c-45c7-90e1-335e039cf185",
            "value": "Resister.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  21/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779487246",
            "to_ids": false,
            "type": "text",
            "uuid": "f64ca0e9-1685-4a08-874f-2d8b4394ac63",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:20/69\nFirst Submission:2026-04-01T15:48:25.000000+00:00\nLast Submission:2026-04-01T15:48:25.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130514",
        "uuid": "bf3cd628-3ce7-4608-9891-b3da0a21a4e2",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499348",
            "to_ids": true,
            "type": "md5",
            "uuid": "768dc5be-5775-4ab9-8132-ecb5c47e9383",
            "value": "9a457659633418aa66dcdc7b5f5edd2f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499348",
            "to_ids": true,
            "type": "sha1",
            "uuid": "ef82afb7-87a3-4500-ba81-944e428a7b6c",
            "value": "41081999694f3ccf32d1d4b4d5f8637ea3e1477e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499348",
            "to_ids": true,
            "type": "sha256",
            "uuid": "a8de1b43-9509-4af8-b2ea-fccdc0f39c0e",
            "value": "2d2fb2e58b55c3b619e97a54bbf4752ee42ae44025a1bec9b8f73a15fa01ce4e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779487267",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "b85b4897-6c52-43fb-9970-14ebc87e46dc",
            "value": "98304:1ekVnTwagNG2+r1Y0s+8KAad9yoUo1RO8ftRr7Zab:1e2Twagw2ka3VKV9yoUCFab"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779487267",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "c5dd1da5-dfec-4daf-8f0c-9b03b635a2ec",
            "value": "4387909"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779487267",
            "to_ids": true,
            "type": "vhash",
            "uuid": "c204590b-da01-4fe0-b8ee-41b654bce811",
            "value": "fedd1f936ec87c2445115a2df48a87be"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779487267",
            "to_ids": true,
            "type": "filename",
            "uuid": "7eed10de-dfad-4dcd-8aed-b789c90ab0b4",
            "value": "78i5u.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779487267",
            "to_ids": false,
            "type": "text",
            "uuid": "cd005b14-271d-4fb8-9db5-e7651f6d6278",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:29/68\nFirst Submission:2026-03-21T15:34:30.000000+00:00\nLast Submission:2026-03-21T15:34:30.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130535",
        "uuid": "36e5c70c-1761-4dad-ad76-17f05dbf682b",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499349",
            "to_ids": true,
            "type": "md5",
            "uuid": "737d6fad-c985-4b6b-8d48-20123c1d3216",
            "value": "a8755f85a7f696b5132507293c30cf4f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499349",
            "to_ids": true,
            "type": "sha1",
            "uuid": "9091db05-9d7d-4eb9-aed7-e31e9abc20c8",
            "value": "25ee1efc31c298ad36ccf80ad8a038bf9cf6ac62",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499349",
            "to_ids": true,
            "type": "sha256",
            "uuid": "c58a0de9-23eb-4d19-83a9-937fc39c7537",
            "value": "ba2cbe4a70d8f182bbb7a83bbd928cc609cda18104d9472ce2485c10204a8ed2",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779487289",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "2fcc656a-07d2-4e25-87e6-751479360e5b",
            "value": "49152:acOk2D+VKZmGOQt7LZTImBY0hVfuMvDHM4LKDFSiiPT+a1mJB6UVZxjDpylyL7gM:f2DwOmmXZFinD6sBTVZ3AlQO8ftRrQRw"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779487289",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "99b8efc9-56a7-451b-a8e6-4aa04b8a44f6",
            "value": "4579760"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779487289",
            "to_ids": true,
            "type": "vhash",
            "uuid": "42a48c13-4ed4-4bab-8421-d0bee11669dc",
            "value": "a2c500e7480db8b0368d3c15c0bbccca"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779487289",
            "to_ids": true,
            "type": "filename",
            "uuid": "0b15f577-5d5a-414c-959b-af52e44b1e33",
            "value": "Melancholianna.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  21/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779487289",
            "to_ids": false,
            "type": "text",
            "uuid": "c7c8aed2-ac80-44dc-a998-50502672d344",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/68\nFirst Submission:2026-03-26T17:28:49.000000+00:00\nLast Submission:2026-03-26T17:28:49.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130557",
        "uuid": "22f657e7-d619-44bd-ae9e-a5cbad199cfd",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499350",
            "to_ids": true,
            "type": "md5",
            "uuid": "e8758587-63be-4cf5-9cf6-23ea04b0205e",
            "value": "39fe73bac312031d8c774ba30f2181cc",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499350",
            "to_ids": true,
            "type": "sha1",
            "uuid": "d7048a30-d293-4a28-a7d7-6f86e2bd6668",
            "value": "85dd625fd2cceb94b0b48f2f23c6324d8f6a862b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499350",
            "to_ids": true,
            "type": "sha256",
            "uuid": "9b67b0c7-3a57-44f3-bc61-2c4344691e99",
            "value": "ac4d4abec5f6c55121991dcb135519aa09e67d61f66b250ecb2984216cfaca20",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779487311",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "73fa2149-8e9b-4c1e-a83c-0b96b60bbe3e",
            "value": "49152:ei6WvO4utkeFmni3zTvDCHMId6LKDFfqyn/roSTfXSOR7ppfyfqO8ftRrhEt:ei6WvOR6emAz+dtDwyTolCO8ftRrhEt"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779487311",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "6be4e227-cd1a-48fb-a138-5ef683a0d87b",
            "value": "3819060"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779487311",
            "to_ids": true,
            "type": "vhash",
            "uuid": "e755b895-b9a1-4cfc-9a8f-71e8aa9805b7",
            "value": "bffc921953c9ef598a5fe1ecbaa85ac3"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779487311",
            "to_ids": true,
            "type": "filename",
            "uuid": "ca30b89e-0130-4f3c-b18c-d51896511bb1",
            "value": "08zd0y.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  21/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779487311",
            "to_ids": false,
            "type": "text",
            "uuid": "d6608b23-cd5a-4dfa-9381-39103d73d5c4",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:29/68\nFirst Submission:2026-03-30T19:06:35.000000+00:00\nLast Submission:2026-03-30T19:06:35.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130579",
        "uuid": "ff2dbfd9-6941-4811-a0dc-2c2641c804e2",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499352",
            "to_ids": true,
            "type": "md5",
            "uuid": "ec4226d6-7fbd-459f-bc11-ce9fb17aa617",
            "value": "60d471d14e9903723b440f8e83f6384c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499352",
            "to_ids": true,
            "type": "sha1",
            "uuid": "e1f812c6-89be-406a-9eb7-67251a901be4",
            "value": "bda308e2b567d95eaae00dc016925c0cfb84ed19",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499352",
            "to_ids": true,
            "type": "sha256",
            "uuid": "be08dafc-fe4c-4b71-854d-66a4fcc68c1f",
            "value": "fb092f697d14f150bb4ff0ca5b066f7ac189e5bed836fa63f8d31adb1d298b5d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779487332",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "91901bf2-ddff-4a51-9be2-2cbad15831f2",
            "value": "49152:WU7lmNtlREilNvDCHMIdCLKDFfaox31q/sCf6OR7ppfyfoO8ftRrh/teRL14:WwlmN3pAdVDhx5BQO8ftRrh/tcL6"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779487332",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "07e4283c-ab56-4d65-8ceb-51a74695eeb5",
            "value": "3880500"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779487332",
            "to_ids": true,
            "type": "vhash",
            "uuid": "c0c7e0f0-63e7-4693-adc2-dd9ff3b9ad24",
            "value": "bffc921953c9ef598a5fe1ecbaa85ac3"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779487332",
            "to_ids": true,
            "type": "filename",
            "uuid": "9555e4c9-f1bb-4f51-ba19-809b56846b4e",
            "value": "hgzvjgg.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  23/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779487332",
            "to_ids": false,
            "type": "text",
            "uuid": "0730c309-eb84-4601-978d-fe9d43b820ac",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/68\nFirst Submission:2026-03-31T14:44:18.000000+00:00\nLast Submission:2026-03-31T14:44:18.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130600",
        "uuid": "3e6051dd-bc5d-4aac-b3a0-4e068110838f",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499353",
            "to_ids": true,
            "type": "md5",
            "uuid": "4cf245e2-32bb-4ce2-bc9c-755140824bb3",
            "value": "ae0495da25fd970ed961d92625c14cfd",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499353",
            "to_ids": true,
            "type": "sha1",
            "uuid": "7322d5b5-c2a5-4443-8854-992429710aac",
            "value": "97d8eb3e04f6c3a2134a995e7bd35752d9372b1d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499353",
            "to_ids": true,
            "type": "sha256",
            "uuid": "09894e13-086c-4152-a092-3a1a9642d7ad",
            "value": "3f0f52a97505d5601e3e66d7f0af41c8c29f63fd04fadc521ce21d14c8d21065",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779487354",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "4403b14d-723f-46c0-96e7-2cbc919ecac7",
            "value": "98304:G3z+JMy8WQPODzIoTzLpVpnQO8ftRrQk3:GHyy2zIoTzLpw3"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779487354",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "f4512986-9cd9-4bd2-8046-f76872143e64",
            "value": "4546992"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779487354",
            "to_ids": true,
            "type": "vhash",
            "uuid": "d7608610-9046-4472-9f45-aa46ba4ac089",
            "value": "a2c500e7480db8b0368d3c15c0bbccca"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779487354",
            "to_ids": true,
            "type": "filename",
            "uuid": "05fc30be-ce10-48ce-a6a7-9a16f77872e1",
            "value": "di7xd.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779487354",
            "to_ids": false,
            "type": "text",
            "uuid": "5b986c62-ecfe-4d52-a26c-80494b588734",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:30/68\nFirst Submission:2026-03-25T12:46:45.000000+00:00\nLast Submission:2026-03-25T12:46:45.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130622",
        "uuid": "52b72b62-2511-4100-ade6-19d94e778964",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499354",
            "to_ids": true,
            "type": "md5",
            "uuid": "b7a57756-8757-45a8-a359-74e108e53312",
            "value": "e3e5a168a1dc3097f6ec2f548c72f893",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499354",
            "to_ids": true,
            "type": "sha1",
            "uuid": "7ed7900d-3180-4a85-bba1-d46bed8ab5e8",
            "value": "1e1317a69d457bff469b7dcfc8e405e685400abf",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499354",
            "to_ids": true,
            "type": "sha256",
            "uuid": "a5b0cfd0-f79a-48a7-81bb-396f1e77c081",
            "value": "12ba42544d89e83f3b27ab91acb312dcd4df90d46187611f6db335fd439c20b9",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779487376",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "a560ce25-2c52-4f39-bbc7-e2384827aba7",
            "value": "49152:bKmNJrMdDpYV2/C591PVvDCHMIdELKDFfqyn/roSTfXzOR7ppfyfSO8ftRrhIij:9N6de591AdDDwyTowqO8ftRrhIij"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779487376",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "757689b8-38de-48bc-9896-30bb2c316f45",
            "value": "3819060"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779487376",
            "to_ids": true,
            "type": "vhash",
            "uuid": "fb824960-4cde-4b20-a2d3-0e3ec0f5b8aa",
            "value": "bffc921953c9ef598a5fe1ecbaa85ac3"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779487376",
            "to_ids": true,
            "type": "filename",
            "uuid": "94f1c2a4-810a-4361-a50d-b2b8d2adf8ce",
            "value": "f66iv.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  21/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779487376",
            "to_ids": false,
            "type": "text",
            "uuid": "30d0735a-7b01-4a63-9b87-92946b5f7053",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:27/68\nFirst Submission:2026-03-28T21:48:22.000000+00:00\nLast Submission:2026-03-28T21:48:22.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130643",
        "uuid": "f3364f9c-970b-4ece-911a-836cbecd3a8e",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499356",
            "to_ids": true,
            "type": "md5",
            "uuid": "ea840df7-e6a5-4e6b-ab83-e2e09cac8826",
            "value": "1988fea17666f1cae43892d75bae714a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499356",
            "to_ids": true,
            "type": "sha1",
            "uuid": "eb89c1da-6c16-4958-be2b-f5a4880f0ee4",
            "value": "e8d058e9bc64a8a7339e6bc5a55613deeec875b2",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499356",
            "to_ids": true,
            "type": "sha256",
            "uuid": "5ea57897-0181-4bdb-805c-6b7611c5dd19",
            "value": "28c78b80700cea2f0868388abca28bee566833e670bad38d9f6c11dadaedd3fc",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779487397",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "e0cd8c1d-6e9f-4b55-9f8f-5c1473ba5453",
            "value": "49152:GQgyCYTeyxLxdtxprABWCQmvDCHMKd+8BarNzRLABfoOR7ppfyf3O8ftRr78Wp:dJpqeLxpCQTdxIhzRMBfC/O8ftRr78Wp"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779487397",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "61c52911-ec0b-44ab-834c-e3b700f43ebd",
            "value": "4387909"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779487397",
            "to_ids": true,
            "type": "vhash",
            "uuid": "9920fcd8-2b4b-4ede-b7d3-89c1049b3de6",
            "value": "fedd1f936ec87c2445115a2df48a87be"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779487397",
            "to_ids": true,
            "type": "filename",
            "uuid": "715c254f-f873-4dce-adb4-321d69b55f5d",
            "value": "jm57zp.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779487397",
            "to_ids": false,
            "type": "text",
            "uuid": "047a4139-67db-4340-b347-7295d5d664bb",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:29/68\nFirst Submission:2026-03-20T11:54:14.000000+00:00\nLast Submission:2026-03-20T11:54:14.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130665",
        "uuid": "a2c44d21-49a8-4af7-927e-b28c369d6a23",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499356",
            "to_ids": true,
            "type": "md5",
            "uuid": "eb9d646d-6ca0-4cf4-8a8b-9ac47889e4fa",
            "value": "edf7678378b6c9d1f86381d478398dcd",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499357",
            "to_ids": true,
            "type": "sha1",
            "uuid": "cbb96d7e-b05b-48ae-a11c-948b31db1889",
            "value": "9ac3b4f6bb4d713c6769aaf671d425b7217e85bd",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499357",
            "to_ids": true,
            "type": "sha256",
            "uuid": "e456d0ea-17f7-46ad-9515-397f23644504",
            "value": "e141af109e2257b78c07c5a2ca2fc6f48907f03a5a64217382f055f6352a6a69",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779487419",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "7306f799-a3d1-4c28-83f3-9c17aa8760be",
            "value": "49152:Dubt+hSPtVzPSKKK0T6rTp2AhzBqvDHM8LKDFg6HkREO2fyL7gbHXf4O8ftRrQVo:EohSlBP8jOPwAhzBlDHwO8ftRrQVj8"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779487419",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "4c2551b8-f69e-4e8e-8160-c257131ffb92",
            "value": "4080104"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779487419",
            "to_ids": true,
            "type": "vhash",
            "uuid": "a7221979-8c6d-45e8-a6d8-6c3846379cea",
            "value": "a2c500e7480db8b0368d3c15c0bbccca"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779487419",
            "to_ids": true,
            "type": "filename",
            "uuid": "2230eee0-2da7-43fa-9942-2d45b2eec3a1",
            "value": "InterrogationSpankbot.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  21/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779487419",
            "to_ids": false,
            "type": "text",
            "uuid": "3569654b-d57c-449c-8901-2a0e2a258725",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:26/68\nFirst Submission:2026-04-02T09:28:56.000000+00:00\nLast Submission:2026-04-02T09:28:56.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130687",
        "uuid": "1ac89cb1-9ca5-46c1-9f41-f7de40b97fb1",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499358",
            "to_ids": true,
            "type": "md5",
            "uuid": "e8e9a910-3953-4045-8580-295ecf659752",
            "value": "e661ca3b8a40d49508af836231847b70",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499358",
            "to_ids": true,
            "type": "sha1",
            "uuid": "19f5f041-dce0-474f-9e4e-0e91bf52d364",
            "value": "ed0687a0d02b2e870c83d1726d82ce2a32c56d73",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499358",
            "to_ids": true,
            "type": "sha256",
            "uuid": "5da5ab27-b24f-4123-bbc6-ab4d0a80ddeb",
            "value": "3770d985bada61bc92f230ebb058454c56f0f06a578ce451c2872f56214d6dcd",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779487441",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "0bfaeef9-299e-4bc8-94fe-9fde3ea130dc",
            "value": "49152:cy7zDB1UDG8p+aE11/K6aBEjztbg+Zgb3vDHMFBLC4dxEfsnH2W7fjQ5wT:rzrKG8pm1pK6aIzFSbcLC4dxEfqGwT"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779487441",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "f7cb9cb2-05e6-4ced-b17e-e3308d8f140d",
            "value": "2929153"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779487441",
            "to_ids": true,
            "type": "vhash",
            "uuid": "293e160e-401c-493e-ae8c-16d1d05416c2",
            "value": "f44f2b586293ae27d9ea136350c6d4fe"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779487441",
            "to_ids": true,
            "type": "filename",
            "uuid": "fd63d5ca-602a-46dd-bb02-329d61fa3693",
            "value": "gq03of.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779487441",
            "to_ids": false,
            "type": "text",
            "uuid": "8762af0c-d36c-4e1f-b8bc-7ec2763d9a88",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/68\nFirst Submission:2026-03-26T12:51:41.000000+00:00\nLast Submission:2026-03-26T12:51:41.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130708",
        "uuid": "47d52c0d-063e-40bd-b8a8-b6eb4c8ba047",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499359",
            "to_ids": true,
            "type": "md5",
            "uuid": "a059c961-0a37-4ea3-9645-fcc65fb4507c",
            "value": "6a943e23f8307585f0c15a92920d22b7",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499359",
            "to_ids": true,
            "type": "sha1",
            "uuid": "7f5abbcd-79a2-4616-818b-eefbf6501535",
            "value": "b259b1c28c2b48893fb456fe3437277c92b8a563",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499360",
            "to_ids": true,
            "type": "sha256",
            "uuid": "0507c270-45a5-4431-9943-9e4a85e09067",
            "value": "afa26dad2a956a49e95940d3ee959ab42d46c51762c504b351185d46a4704f0e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779487463",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "7c07ef10-9f49-4c63-96f9-2c7dbcf8fe0b",
            "value": "49152:rhVk9KNeTo5l9F+UCnMJQGYvDCHM4dGuynlMroSTfpOR7ppfyfWO8ftRrWhrND/N:1KcWo9ZCn/odNyl0omOO8ftRrWhrDZ9"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779487463",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "62ee07e3-4f14-421f-a032-f07e9c67e43a",
            "value": "4387741"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779487463",
            "to_ids": true,
            "type": "vhash",
            "uuid": "2d0306e3-3118-427e-a1bc-7cf7bb65bb70",
            "value": "fedd1f936ec87c2445115a2df48a87be"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779487463",
            "to_ids": true,
            "type": "filename",
            "uuid": "f4bf1bb0-0ec2-4101-9ec3-4fa8caecbf82",
            "value": "myde6.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  21/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779487463",
            "to_ids": false,
            "type": "text",
            "uuid": "4e46ced0-29bc-4bb3-b3c9-909487efabf8",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/68\nFirst Submission:2026-03-30T12:21:24.000000+00:00\nLast Submission:2026-03-30T12:21:24.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130730",
        "uuid": "54cac6e5-5b4f-4064-af9f-426e9626402f",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499360",
            "to_ids": true,
            "type": "md5",
            "uuid": "9eb7e564-b933-4ca5-873f-03fac177d974",
            "value": "b9b3d18865703b577e8b1573b3e995e8",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499360",
            "to_ids": true,
            "type": "sha1",
            "uuid": "d02d4f62-df50-48c1-b0ea-7d2e1587fc01",
            "value": "a401572063681f1312e57beea48f30af84d36913",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499360",
            "to_ids": true,
            "type": "sha256",
            "uuid": "d34f9542-5f53-4993-ad89-fd57c8dbc2be",
            "value": "eee7274f7610d459e4b88ff4a84117007873be420b161150719023593447f2cf",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779487485",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "32007e1c-6f2f-4391-a86e-38057f93393d",
            "value": "196608:t1icTzs+eHRexg5jz3m5tDSYWKXChg7Al2ORyf+:ecTzs+G0x4jDgShg7Al7M+"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779487485",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "c7f88f4c-b5eb-4402-b305-6d7176b7376d",
            "value": "8791696"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779487485",
            "to_ids": true,
            "type": "vhash",
            "uuid": "3e15d5cc-4699-410e-8514-9cb41cb6e172",
            "value": "24ec7ecc8c5522466b5e273c163a9480"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779487485",
            "to_ids": true,
            "type": "filename",
            "uuid": "97c460b5-7d95-4d5b-9700-6b51a1afb911",
            "value": "REsister.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  21/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779487485",
            "to_ids": false,
            "type": "text",
            "uuid": "7e48f37d-cfbf-4ecb-98d9-3fd94aab8882",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:15/68\nFirst Submission:2026-03-31T04:35:18.000000+00:00\nLast Submission:2026-03-31T04:35:18.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130751",
        "uuid": "2700117c-f92e-4725-81bb-0fef5c8a0d00",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499362",
            "to_ids": true,
            "type": "md5",
            "uuid": "154de679-5cca-4501-96e0-b59210c2b14d",
            "value": "b12411add93cf02515a47d9879a58228",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499362",
            "to_ids": true,
            "type": "sha1",
            "uuid": "ab9e606b-9d09-424a-9493-c1818852ccf6",
            "value": "c696cb0a02f427f1f7f7eed895e680f251bda726",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499362",
            "to_ids": true,
            "type": "sha256",
            "uuid": "7a88eae9-7349-4ac3-9f01-6a88f228349d",
            "value": "2ed6eabaab034ab1432ebadcec28d8391d6163369b98dc880174b294524f1cce",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779487507",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "c3c0c76f-879f-4910-8ec4-c24bbcd92d9c",
            "value": "49152:apg+7jK5pVjhlOoLRgMdVGl+6aq1vDHMFpLKDFAaKm3KctICeUWMIWyL7gbHXfJh:apVChsEVeaqfDVpRLI6xQO8ftRrQnN"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779487507",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "3a2dfa3e-c372-4a46-9539-b35041ca9821",
            "value": "4055472"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779487507",
            "to_ids": true,
            "type": "vhash",
            "uuid": "e2cc564d-90c1-4e94-bed6-74e9760339c5",
            "value": "a2c500e7480db8b0368d3c15c0bbccca"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779487507",
            "to_ids": true,
            "type": "filename",
            "uuid": "1b95a76c-254e-417d-8f8b-ec531d806570",
            "value": "Pumkinlove.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779487507",
            "to_ids": false,
            "type": "text",
            "uuid": "0b52d985-e4bd-45f3-b590-b3f28fd1ae07",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:23/68\nFirst Submission:2026-03-29T14:42:43.000000+00:00\nLast Submission:2026-03-29T14:42:43.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130773",
        "uuid": "be5d7eb8-3c24-4ac4-8564-17e0ec7d109d",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499363",
            "to_ids": true,
            "type": "md5",
            "uuid": "7fc03911-ea2d-4577-bc5b-09a6f8b65229",
            "value": "b25061eb976ca7ba691a5ed0d0291320",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499363",
            "to_ids": true,
            "type": "sha1",
            "uuid": "bdbe10f6-dace-4af5-92cb-a890cb2f1cbf",
            "value": "fdf66e0fbc073186aea9c674258c9be7194d80a7",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499363",
            "to_ids": true,
            "type": "sha256",
            "uuid": "f5a66546-9292-4ef2-a0c7-4937405bd0a5",
            "value": "faad3dd7a022d05dc8eea227c3478ac0fffd7c601486c11ca59bf9b6d8a9b6c6",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779487528",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "c7136167-01d3-4761-ac0a-b5654bec072b",
            "value": "98304:lFTXlgSUd3NqeFeiEXzDyT6ZeLT5aQO8ftRrQzp+c:lFTiNqeJEXnyCeRKQc"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779487528",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "709b7c78-719b-4581-9970-47acee8fdfc6",
            "value": "4268464"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779487529",
            "to_ids": true,
            "type": "vhash",
            "uuid": "ad615785-5288-4dc6-a97d-2987042ea2e0",
            "value": "a2c500e7480db8b0368d3c15c0bbccca"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779487529",
            "to_ids": true,
            "type": "filename",
            "uuid": "98191d36-49a5-4204-869d-378155963800",
            "value": "glu2t.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  21/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779487529",
            "to_ids": false,
            "type": "text",
            "uuid": "2bebe418-5224-47f9-9f7d-0ebeaa065893",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:29/68\nFirst Submission:2026-03-30T04:30:26.000000+00:00\nLast Submission:2026-03-30T04:30:26.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130794",
        "uuid": "78d34b8c-1f61-4423-97a2-3b935564b8d7",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499365",
            "to_ids": true,
            "type": "md5",
            "uuid": "0e128d92-5239-4987-a11a-e5f581110696",
            "value": "22649986f213041fcc27a8d6c682ba3a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499365",
            "to_ids": true,
            "type": "sha1",
            "uuid": "180aebfd-e250-49dc-ac41-3a49cd440885",
            "value": "6d6cd63e38ba75b92602e216e3f7368b06209578",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499365",
            "to_ids": true,
            "type": "sha256",
            "uuid": "9867ed9a-0882-4d63-9a4b-19eca581399e",
            "value": "b9409ca5cf4cce537a6229c8e6b5d43eccba3d79a05ff7bb35f69754bce6d897",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779487550",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "5ae35931-c33b-4c40-9462-c71026a52738",
            "value": "98304:eHPl2KyNMnc2d8DIV8rwgq1Dc0qO8ftRrheu:7KVloKeAQ0Du"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779487550",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "510a7459-b745-4c13-874f-698448ffab1d",
            "value": "4015668"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779487550",
            "to_ids": true,
            "type": "vhash",
            "uuid": "7735aa70-cde5-462a-9236-1ffc36bbd9d3",
            "value": "bffc921953c9ef598a5fe1ecbaa85ac3"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779487550",
            "to_ids": true,
            "type": "filename",
            "uuid": "05d1b832-1e99-4874-aec3-9d213da409c8",
            "value": "w0ugaq8.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779487550",
            "to_ids": false,
            "type": "text",
            "uuid": "93db6a27-cf94-43ec-bb7b-b0c0ddc002b3",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/68\nFirst Submission:2026-03-27T08:18:25.000000+00:00\nLast Submission:2026-03-27T08:18:25.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130816",
        "uuid": "2f2fb5c5-e50c-4c11-9b02-5b4ced8152f0",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499366",
            "to_ids": true,
            "type": "md5",
            "uuid": "7087a9df-5370-442f-ac51-45ed080f3632",
            "value": "1b7b8b200e0755335b272b4442f9f997",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499366",
            "to_ids": true,
            "type": "sha1",
            "uuid": "4b7e161e-dcc0-4eb1-b50a-17e0b89d0e91",
            "value": "e3ee5b8150c196eeb06b232634ed052686995bfd",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499367",
            "to_ids": true,
            "type": "sha256",
            "uuid": "ad766f54-08d1-422c-807a-81db896c3ddd",
            "value": "99491ecba0892641c584e0520aeb501bf50c6bf4d22cf677d2d177745abea8b2",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779487572",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "cee4ce5d-b9a8-4509-913f-4be528b6406a",
            "value": "98304:tH9kU3Z32NMLacQHRBmlMawjokeBJo1no/Kr9YI:tH9L3h2NPZjmyPokIJbI"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779487572",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "2808061c-fbb2-4b0c-a069-cb3305ad2e7c",
            "value": "3868803"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779487572",
            "to_ids": true,
            "type": "vhash",
            "uuid": "7bfcc426-7ae2-4c28-8279-c29073001af8",
            "value": "6830dd7fa3ae1c57e850c18b8cbb5790"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779487572",
            "to_ids": true,
            "type": "filename",
            "uuid": "9bf7a0bb-8352-40f8-a2a1-f23d03512db5",
            "value": "epled1zr0.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779487572",
            "to_ids": false,
            "type": "text",
            "uuid": "95ae1f8c-d8cd-4796-96d1-8258c4ae01e8",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:29/66\nFirst Submission:2026-03-17T18:13:16.000000+00:00\nLast Submission:2026-03-17T18:13:16.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130837",
        "uuid": "ec1a28e5-d3ce-48e5-b663-b154a293c2d8",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499368",
            "to_ids": true,
            "type": "md5",
            "uuid": "e6ca38c3-153a-445f-8998-e61353b503b3",
            "value": "a9d1da8a1393d3990ca8121a8b875f93",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499368",
            "to_ids": true,
            "type": "sha1",
            "uuid": "8de25175-8feb-44bc-8e91-a861f09294b6",
            "value": "81194b4db8178b363dcdd003184eb74696343535",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499368",
            "to_ids": true,
            "type": "sha256",
            "uuid": "a89a3949-30b8-4d42-a632-91371127c1a0",
            "value": "ecd8f3b8db6a3b873ceacf782f761a60ba13bd66717ef74bb3c35650ccaec847",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779487593",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "0e729ae6-d608-47d9-9bfe-4b326fc7085d",
            "value": "98304:qJS/bfmbOheORdnennmEKeNO8ftRrWHrS7b:wS/DmaeIenbKe+rS7b"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779487593",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "e3d16ae4-3e7e-4020-a978-f1681461b895",
            "value": "4547485"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779487593",
            "to_ids": true,
            "type": "vhash",
            "uuid": "8aada09a-2df0-4eb0-89c2-8a7df317feb4",
            "value": "a87621b742da228801fbfb5f064bcd41"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779487594",
            "to_ids": true,
            "type": "filename",
            "uuid": "ea431198-130f-4090-be61-c25dd0867eb1",
            "value": "f5uymase.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  21/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779487594",
            "to_ids": false,
            "type": "text",
            "uuid": "4ec755ec-999c-454f-8c79-2048525b9b40",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:29/68\nFirst Submission:2026-03-16T06:16:55.000000+00:00\nLast Submission:2026-03-16T06:16:55.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130859",
        "uuid": "df4ab4f8-77f1-4b3a-8708-b2b1925067de",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499370",
            "to_ids": true,
            "type": "md5",
            "uuid": "c48c478b-6751-4b49-857f-a6dc032bed15",
            "value": "b98a7207be4a05ef0b5fbb2c48300f42",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499370",
            "to_ids": true,
            "type": "sha1",
            "uuid": "791d03fc-49db-489c-be59-163c6484ecaf",
            "value": "1ecf1bd9b73e17d2575c057cb65921df1afa176f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499370",
            "to_ids": true,
            "type": "sha256",
            "uuid": "51e19d87-edd8-4929-a871-2198f6347912",
            "value": "ce31c61d1826d362f5a48954c5882e5bbba593415defa942c7a62ff2a6fb4ae9",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779487616",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "6e0b154e-a956-4078-bb79-d28976b03984",
            "value": "98304:iHl3GmcmYyF+49Dki+EL0Vhf3kO8ftRrRtlf:iHl3M5yMYWEL0Vh3elf"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779487616",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "a334b450-b64b-42ef-ba2a-185bb1237e19",
            "value": "4674250"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779487616",
            "to_ids": true,
            "type": "vhash",
            "uuid": "b5c8db1e-3cbd-41c2-bed0-e1c0726a26fe",
            "value": "a2c500e7480db8b0368d3c15c0bbccca"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779487616",
            "to_ids": true,
            "type": "filename",
            "uuid": "b9e0c724-c9ed-4f6a-9289-b8a1783ded02",
            "value": "llakfe.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779487616",
            "to_ids": false,
            "type": "text",
            "uuid": "a43e239c-4d55-4f6c-9715-09051e367f57",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/68\nFirst Submission:2026-03-14T13:02:15.000000+00:00\nLast Submission:2026-03-14T13:02:15.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130880",
        "uuid": "f312a05a-1c02-4c84-9d9f-ea055ead4e96",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499371",
            "to_ids": true,
            "type": "md5",
            "uuid": "b14eb266-e6ae-4342-9531-86b6dea68cce",
            "value": "6f5504b1cab0a5d9f0aa1c53861fc5ec",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499371",
            "to_ids": true,
            "type": "sha1",
            "uuid": "818401f6-e089-41b0-b290-51b07733edaf",
            "value": "3c140f86969f4844ef517084128e2b161355237e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499371",
            "to_ids": true,
            "type": "sha256",
            "uuid": "7a4a9fde-5785-4925-bb42-f5b874e2f327",
            "value": "4026cde577e6518346f9fcaec112327680940aff466552a51c1751c33f8867ec",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779487637",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "327be467-ff5e-4802-9b93-3ef711f5f0a6",
            "value": "98304:lPSYdZVdj4YD9ten9Cr3BKPQP6EZHn9Hngn4kVcrEKLmO8ftRrtaQk:fH79Q9CkPq+n1WAKLJJ"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779487637",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "f29bcbf8-6596-4fd9-ad08-6806a4c86dbe",
            "value": "5593144"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779487637",
            "to_ids": true,
            "type": "vhash",
            "uuid": "d80e2b7e-8cac-4134-9f0a-b2bde3d45052",
            "value": "20a3f0e6887657352c632695bb9f9c13"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779487637",
            "to_ids": true,
            "type": "filename",
            "uuid": "49806011-d12c-4349-b121-2a870a9b143b",
            "value": "GrowthSleep.apk"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  21/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779487637",
            "to_ids": false,
            "type": "text",
            "uuid": "48c00b10-d08e-4093-b493-ae2905ad271d",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:21/68\nFirst Submission:2026-03-06T13:48:54.000000+00:00\nLast Submission:2026-03-06T13:48:54.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130902",
        "uuid": "38517a76-b37a-4f32-9ad5-0155b28971c3",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499372",
            "to_ids": true,
            "type": "md5",
            "uuid": "c092132b-f155-41f7-8aeb-568a135e90ee",
            "value": "92c348445dcee63f58c4c634de690442",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499372",
            "to_ids": true,
            "type": "sha1",
            "uuid": "ace5f372-d0dd-4e48-a0e5-6c3747b4fbfa",
            "value": "0cc381a4571831927b1f5242d28077db9cc6ac4d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499373",
            "to_ids": true,
            "type": "sha256",
            "uuid": "aacf66b7-e56f-4a4a-af27-eb2fd8507db2",
            "value": "713604991933e3510f45159373fd99824d29e6c9c981ecb904503a99de97e7fc",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779487659",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "3891e489-2064-4dc8-b7a6-edbf0c435256",
            "value": "98304:Juk5KJOGUZ2YrDvxlcqGwb9epI8oo/Kr9Xmos:Ju+KJOFdGwkpb6mv"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779487659",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "6cc27d52-6963-4041-b656-d03db08d315f",
            "value": "3833779"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779487659",
            "to_ids": true,
            "type": "vhash",
            "uuid": "df2d3ea7-a75c-42f0-8456-230bc1acb903",
            "value": "c75b250ae5aab9b07e090fe9161bad63"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779487659",
            "to_ids": true,
            "type": "filename",
            "uuid": "72d1096f-4c2b-484f-9c7f-88c752c35cf3",
            "value": "o3ipb.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779487659",
            "to_ids": false,
            "type": "text",
            "uuid": "8abdb434-c7ba-48ae-8811-6af414648b32",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/66\nFirst Submission:2026-03-06T10:04:12.000000+00:00\nLast Submission:2026-03-06T10:04:12.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1780130924",
        "uuid": "4b207f14-beed-4558-a764-dea4e136eafe",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1779499373",
            "to_ids": true,
            "type": "md5",
            "uuid": "ba171e9f-f8ab-455b-8c6f-92482a4d6777",
            "value": "cc97f2e68da79d434210bbd930ef9fcd",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1779499373",
            "to_ids": true,
            "type": "sha1",
            "uuid": "a58b619c-920e-4067-96c8-ce5860e2214a",
            "value": "9b053eca4f616177f2d2c5fc795c9e190b7bbba5",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "apk",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1779499374",
            "to_ids": true,
            "type": "sha256",
            "uuid": "c9bcecf6-7f9a-4ce5-9b72-12125301598a",
            "value": "a3d7f3955933357018d8a8a89ab3542a1d10b6d718390ad958293f98ffbbf9a6",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1779487681",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "7ee160d7-b21f-4f03-8b79-6469d2dce6e2",
            "value": "98304:SKYrWzyyaZeq21aHbjELeK5tVjRno/Kr9+kkY:SKYSzLaZ81g/E7VMkkY"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1779487681",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "49ecb16e-d7d5-4b5a-a4e7-f5a2f1d87fcd",
            "value": "3500163"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1779487681",
            "to_ids": true,
            "type": "vhash",
            "uuid": "3e398fea-1a16-498e-89aa-36cc8ac27678",
            "value": "6830dd7fa3ae1c57e850c18b8cbb5790"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1779487681",
            "to_ids": true,
            "type": "filename",
            "uuid": "bf43362e-6880-40fa-a11e-f5821e207ddd",
            "value": "lcg9z.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 23/05/2026\nLast-scan\t:  22/05/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1779487681",
            "to_ids": false,
            "type": "text",
            "uuid": "d8d31362-137b-4433-88b5-c4cac58c841c",
            "value": "apk\r\nType Description: Android\nMicrosoft: None\nVT Total Detection:28/66\nFirst Submission:2026-03-06T09:16:55.000000+00:00\nLast Submission:2026-03-06T09:16:55.000000+00:00"
          }
        ]
      }
    ]
  }
}