{ "Event": { "analysis": "1", "date": "2026-06-11", "extends_uuid": "", "info": "[Threat Intel] From external espionage to domestic targeting", "protected": false, "publish_timestamp": "1782099450", "published": true, "threat_level_id": "2", "timestamp": "1782058545", "uuid": "9707a436-2783-4260-9a91-00590fb630a2", "Orgc": { "name": "Rectifyq", "uuid": "cd9bd516-61fa-476b-980f-2f8de03992d4" }, "Tag": [ { "colour": "#8675c7", "local": false, "name": "misp-galaxy:producer=\"ESET\"", "relationship_type": "" }, { "colour": "#ffffff", "local": false, "name": "tlp:clear", "relationship_type": "" }, { "colour": "#004646", "local": false, "name": "type:OSINT", "relationship_type": "" }, { "colour": "#b94b1d", "local": false, "name": "rectifyq:mitre-att&ck=\"from-original-src\"", "relationship_type": "" }, { "colour": "#b94b1d", "local": false, "name": "rectifyq:mitre-att&ck=\"from-OTX\"", "relationship_type": "" }, { "colour": "#3bc6ad", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Code Signing - T1553.002\"", "relationship_type": "" }, { "colour": "#7d7034", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"System Information Discovery - T1082\"", "relationship_type": "" }, { "colour": "#9feaf0", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Exploit Public-Facing Application - T1190\"", "relationship_type": "" }, { "colour": "#75ec20", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Masquerading - T1036\"", "relationship_type": "" }, { "colour": "#43c8db", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Process Injection - T1055\"", "relationship_type": "" }, { "colour": "#682cad", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Remote Services - T1021\"", "relationship_type": "" }, { "colour": "#20f80d", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Command and Scripting Interpreter - T1059\"", "relationship_type": "" }, { "colour": "#3780c6", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"User Execution - T1204\"", "relationship_type": "" }, { "colour": "#a9f8b1", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Exfiltration Over C2 Channel - T1041\"", "relationship_type": "" }, { "colour": "#e08bb2", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Obfuscated Files or Information - T1027\"", "relationship_type": "" }, { "colour": "#356c41", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Encrypted Channel - T1573\"", "relationship_type": "" }, { "colour": "#d596aa", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Compromise Software Supply Chain - T1195.002\"", "relationship_type": "" }, { "colour": "#b596f0", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Lateral Tool Transfer - T1570\"", "relationship_type": "" }, { "colour": "#92e858", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Web Protocols - T1071.001\"", "relationship_type": "" }, { "colour": "#e1e63b", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"DLL Side-Loading - T1574.002\"", "relationship_type": "" }, { "colour": "#4c0fbb", "local": false, "name": "misp-galaxy:mitre-attack-pattern=\"Ingress Tool Transfer - T1105\"", "relationship_type": "" }, { "colour": "#0088cc", "local": false, "name": "misp-galaxy:threat-actor=\"APT32\"", "relationship_type": "" }, { "colour": "#0088cc", "local": false, "name": "misp-galaxy:country=\"vietnam\"", "relationship_type": "" }, { "colour": "#49a260", "local": false, "name": "rectifyq:category=\"threat\"", "relationship_type": "" }, { "colour": "#10003d", "local": false, "name": "rectifyq:sub-category=\"TA-profile\"", "relationship_type": "" }, { "colour": "#f1dfed", "local": false, "name": "rectifyq:TA-category=\"APT\"", "relationship_type": "" }, { "colour": "#ffd12e", "local": false, "name": "rectifyq:target=\"broad-based\"", "relationship_type": "" }, { "colour": "#55acee", "local": false, "name": "rectifyq:MY-relevancy=\"potentially-relevant\"", "relationship_type": "" }, { "colour": "#220082", "local": false, "name": "rectifyq:samples-found-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" }, { "colour": "#3800d9", "local": false, "name": "rectifyq:action-taken=\"VT-comment\"", "relationship_type": "" }, { "colour": "#3d00e9", "local": false, "name": "rectifyq:action-taken=\"telegram\"", "relationship_type": "" } ], "Attribute": [ { "category": "External analysis", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1781233211", "to_ids": false, "type": "link", "uuid": "ff5512fa-cabd-4725-a89e-3a09e4b7eeed", "value": "https://www.welivesecurity.com/en/eset-research/oceanlotus-external-espionage-domestic-targeting/" }, { "category": "Other", "comment": "Description", "deleted": false, "disable_correlation": false, "timestamp": "1781233211", "to_ids": false, "type": "text", "uuid": "19fdac02-0b0f-453e-a4f5-28aad4af5cfa", "value": "Analysis of OceanLotus activities from 2024-2026 reveals a strategic shift toward domestic espionage within Vietnam. The Vietnam-aligned APT group conducted two distinct campaigns using the SPECTRALVIPER backdoor: a supply-chain attack compromising FireAnt Metakit stock trading platform from October 2025 to March 2026, and a prolonged intrusion into a Vietnamese infrastructure and transport construction corporation from mid-2024 through January 2026. The FireAnt compromise exploited the platform's insecure update mechanism, targeting stock investors with selective deployment. This operational pivot coincides with Vietnam's Blazing Furnace anti-corruption campaign, suggesting possible alignment with domestic investigative efforts against financial crime. The group continues demonstrating sophisticated tactics despite public exposure of its front company in 2020, maintaining technical innovation in tooling and infrastructure." }, { "category": "Other", "comment": "Summary", "deleted": false, "disable_correlation": false, "timestamp": "1781233211", "to_ids": false, "type": "text", "uuid": "36f282f9-6285-4624-9e22-d9fc17cb530e", "value": "Name: From external espionage to domestic targeting\nAuthor: AlienVault\nAdversary: APT32\nTags: [\"phoreal\", \"fireant metakit\", \"soundbite\", \"apt32\", \"supply-chain attack\", \"stock investors\"]\nTgtd countries: []\nMlwr families: [\"SPECTRALVIPER\", \"Denis - S0354\", \"SOUNDBITE - S0157\", \"PHOREAL - S0158\", \"WINDSHIELD - S0155\"]\nAttack_ids: [\"T1553.002\", \"T1082\", \"T1190\", \"T1036\", \"T1055\", \"T1021\", \"T1059\", \"T1204\", \"T1041\", \"T1027\", \"T1573\", \"T1195.002\", \"T1570\", \"T1071.001\", \"T1574.002\", \"T1105\"]\nIndustries: [\"Finance\", \"Construction\", \"Transportation\"]" }, { "category": "Attribution", "comment": "Adversary", "deleted": false, "disable_correlation": false, "timestamp": "1781233211", "to_ids": false, "type": "threat-actor", "uuid": "2450c705-c4a3-4d87-9ad8-d8e5f5b7d64c", "value": "APT32" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782033828", "to_ids": true, "type": "domain", "uuid": "851de287-be81-4123-9e05-55943111bf4d", "value": "cnrp7.org", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782033849", "to_ids": true, "type": "domain", "uuid": "4c7e23f4-f67a-46ee-9091-72b4411737f5", "value": "nguoitieudung.com.vn", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "External analysis", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1781233211", "to_ids": false, "type": "vulnerability", "uuid": "7ba6023b-e2d6-42ff-b554-f32f030b8028", "value": "CVE-2017-11882" }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782033870", "to_ids": true, "type": "domain", "uuid": "6f414c57-2412-4724-ae66-f49476f4e3b8", "value": "anessallie.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782033891", "to_ids": true, "type": "domain", "uuid": "edb3c9d9-7f6d-44c1-b792-489892d2e4f3", "value": "arkoimmerma.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782033912", "to_ids": true, "type": "domain", "uuid": "7d70b4fe-e11d-44d1-a535-21c34f2c5069", "value": "carosseda.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782033933", "to_ids": true, "type": "domain", "uuid": "76bc33fb-5a7d-4f51-b311-bc451fc2fbc3", "value": "eighrimeau.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782033954", "to_ids": true, "type": "domain", "uuid": "be35f846-1a04-41bf-8d13-99c6b047d3b9", "value": "hieryells.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782033975", "to_ids": true, "type": "domain", "uuid": "6bae29fe-9497-40a5-9ae3-5dba5b4634f5", "value": "tefanortin.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782033997", "to_ids": true, "type": "domain", "uuid": "afa249e7-3a20-451d-8102-789f53cca012", "value": "adineohler.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034018", "to_ids": true, "type": "domain", "uuid": "05dd697d-6c66-4db5-ba3e-0fadd5dd7c3a", "value": "aisicoin.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034040", "to_ids": true, "type": "domain", "uuid": "6b1ec0bd-5806-434e-9470-747961d4f25a", "value": "alicervois.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034061", "to_ids": true, "type": "domain", "uuid": "a759982f-6b2b-47fb-9551-6b21a49d3650", "value": "antenham.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034082", "to_ids": true, "type": "domain", "uuid": "a60e4a81-afb4-448b-bcc6-d8fa7ba15260", "value": "arinaurna.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034103", "to_ids": true, "type": "domain", "uuid": "d660c2a6-5249-481e-be33-5e68916a68b9", "value": "aulolloy.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034125", "to_ids": true, "type": "domain", "uuid": "7e609988-dcbc-45c7-aff2-d3892b7f95ea", "value": "avidilleneu.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034146", "to_ids": true, "type": "domain", "uuid": "5cc63c18-dda5-43bd-88cb-6c2e8cc67f9a", "value": "avidsontre.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034167", "to_ids": true, "type": "domain", "uuid": "c3105f87-8498-4050-860d-5dc96b0d6468", "value": "aximilian.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034188", "to_ids": true, "type": "domain", "uuid": "5eab545d-da6c-497f-936e-723f52cd3923", "value": "biasatts.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034209", "to_ids": true, "type": "domain", "uuid": "635e3fe8-4c42-4040-8d23-4eb5cb30bb8f", "value": "braydenhateaub.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034230", "to_ids": true, "type": "domain", "uuid": "369b4889-ff66-4f7e-87e2-85426ec662c7", "value": "chascloud.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034251", "to_ids": true, "type": "domain", "uuid": "d470230f-e77d-4c75-aa3d-7347653f5dd6", "value": "dreyoddu.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034272", "to_ids": true, "type": "domain", "uuid": "147fe1ed-f9ad-497f-81d5-58ed48fa17ec", "value": "dwarduong.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034293", "to_ids": true, "type": "domain", "uuid": "cc9dc2a2-6bef-4dda-bf8b-295cc0fe8804", "value": "eckenbaue.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034314", "to_ids": true, "type": "domain", "uuid": "ac3f175a-a4c0-4939-b138-8cc5f68a1f4a", "value": "errellawle.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034335", "to_ids": true, "type": "domain", "uuid": "b26d2e83-fd9d-4132-890f-769e80532187", "value": "erstin.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034356", "to_ids": true, "type": "domain", "uuid": "11a6980e-66f3-4e13-aeb8-e166b1546e1d", "value": "frahreiner.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034377", "to_ids": true, "type": "domain", "uuid": "f63f616a-3d32-4b41-9934-185c1acd09d2", "value": "hristophe.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034398", "to_ids": true, "type": "domain", "uuid": "aba4a648-6c0d-45ea-a0e1-a829254c1fb0", "value": "ichardt.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034419", "to_ids": true, "type": "domain", "uuid": "3fc11c96-e063-4d01-bf9b-e4726070870b", "value": "icmannaws.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034440", "to_ids": true, "type": "domain", "uuid": "4fd1fa00-d12b-4620-8267-2de52e43145a", "value": "iecopeland.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034461", "to_ids": true, "type": "domain", "uuid": "a696fcd3-8e79-4f9b-b34f-8dee9d5d8cbe", "value": "irkaimboeuf.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034482", "to_ids": true, "type": "domain", "uuid": "6cd27220-ae05-4567-8483-c9af4594d208", "value": "jamedalue.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034504", "to_ids": true, "type": "domain", "uuid": "2f37a4ef-3dc8-4546-a5cb-f5565339b96a", "value": "jamyer.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034525", "to_ids": true, "type": "domain", "uuid": "8d44850a-769d-488d-a3cb-3e474666651e", "value": "jeanessbinder.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034546", "to_ids": true, "type": "domain", "uuid": "e3255e40-1160-4cbc-bcb5-f00d67579710", "value": "jeffreyue.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034567", "to_ids": true, "type": "domain", "uuid": "d52b1672-f460-4bb7-b960-49b6911dd125", "value": "keoucha.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034588", "to_ids": true, "type": "domain", "uuid": "ddf56721-319f-4fd6-a025-b1cc7ba89e92", "value": "laudiaouc.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034609", "to_ids": true, "type": "domain", "uuid": "5eff5142-407a-43b1-8c94-db413ad5a4c5", "value": "lbertussbau.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034630", "to_ids": true, "type": "domain", "uuid": "d95eeeb1-dd3d-46ad-ab6a-c034273f29dd", "value": "loridanase.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034651", "to_ids": true, "type": "domain", "uuid": "9119c697-3030-4761-9259-82f87e4fef68", "value": "marrmann.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034672", "to_ids": true, "type": "domain", "uuid": "d42ef6b0-d457-4370-b916-2d65c54645ee", "value": "meroque.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034693", "to_ids": true, "type": "domain", "uuid": "89954381-c0e8-4a0f-9f5e-a78b830bda92", "value": "moureuxacv.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034714", "to_ids": true, "type": "domain", "uuid": "873c5cd2-08f8-47e5-aceb-5b6274fa5e5f", "value": "myolton.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034735", "to_ids": true, "type": "domain", "uuid": "7dc96c14-1c99-4cc7-83f1-6aaebfa9b097", "value": "nasahlaes.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034757", "to_ids": true, "type": "domain", "uuid": "2045407b-0c51-499d-b562-ee2608977b39", "value": "ntjeilliams.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034778", "to_ids": true, "type": "domain", "uuid": "e58d40ac-b20a-4de1-82b9-ea585dc37ec5", "value": "omasicase.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034799", "to_ids": true, "type": "domain", "uuid": "50a535e9-217a-443a-9c96-85ef1bf71f98", "value": "onnaha.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034820", "to_ids": true, "type": "domain", "uuid": "19a6f3b0-2c5c-4627-a801-4eede2a8be56", "value": "onteagle.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034841", "to_ids": true, "type": "domain", "uuid": "56f84851-1e31-4310-98f6-aaf9374dc142", "value": "orinneamoure.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034862", "to_ids": true, "type": "domain", "uuid": "b7602128-4612-4253-85fa-b2e165c40404", "value": "orresto.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034883", "to_ids": true, "type": "domain", "uuid": "cab5f683-09b7-4cbd-8d05-26a1394ad732", "value": "orrislark.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034905", "to_ids": true, "type": "domain", "uuid": "0745d1c9-ce14-46e3-b9b5-e40eb8b1e540", "value": "rackerasr.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034926", "to_ids": true, "type": "domain", "uuid": "36758bf5-3930-466b-a5c1-ff632280b012", "value": "rcuselynac.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034947", "to_ids": true, "type": "domain", "uuid": "2f78aea4-ebad-4662-8a8a-91fcd87e4b85", "value": "sanauer.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034968", "to_ids": true, "type": "domain", "uuid": "9bf63a8c-c106-4d8b-8155-e049d8548509", "value": "stopherau.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782034989", "to_ids": true, "type": "domain", "uuid": "e9043787-6b2f-446a-b6eb-64db597f69c1", "value": "tefanie.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035010", "to_ids": true, "type": "domain", "uuid": "297bf374-a594-49fa-bc82-79dbf5d18395", "value": "tephens.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035031", "to_ids": true, "type": "domain", "uuid": "6f2ff21b-7b6a-434e-8b74-9bbdc4d5d951", "value": "traveroyce.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035052", "to_ids": true, "type": "domain", "uuid": "17c8a3a3-44ae-48da-9b1d-3d7785eaf2b6", "value": "tsworthoa.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035073", "to_ids": true, "type": "domain", "uuid": "8eb251ec-0e02-43cf-a3fb-1498e63c5704", "value": "ucaargo.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035094", "to_ids": true, "type": "domain", "uuid": "4cebb2a9-d368-4da8-a1bb-684349ba429d", "value": "ucairtz.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035115", "to_ids": true, "type": "domain", "uuid": "d5fc20c8-006c-48a7-9406-5112fa6d2c07", "value": "urnage.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035136", "to_ids": true, "type": "domain", "uuid": "0c40d6c8-8c55-4a05-8a0f-f0ee04d85b4f", "value": "venionne.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035157", "to_ids": true, "type": "domain", "uuid": "7d1717f7-117a-41be-9534-a63ad0ec1c93", "value": "virginiaar.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "No sample in VT\r\nLast check:21/06/2026", "deleted": false, "disable_correlation": false, "timestamp": "1782033565", "to_ids": true, "type": "sha1", "uuid": "19c80205-e2a5-4f39-afb6-d8907074b121", "value": "032ef58b7978d079287874044dc516af624ae5f5", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "No sample in VT\r\nLast check:21/06/2026", "deleted": false, "disable_correlation": false, "timestamp": "1782033566", "to_ids": true, "type": "sha1", "uuid": "7a7b7f82-c4c2-4aba-a825-d293e36136ef", "value": "2a387d7d47a63d6e47d9cc92d3dc69a53816c2c0", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "No sample in VT\r\nLast check:21/06/2026", "deleted": false, "disable_correlation": false, "timestamp": "1782033567", "to_ids": true, "type": "sha1", "uuid": "18cbc040-5806-4b7b-8a9b-33ee2f071364", "value": "7105caa6d4fd8a2c67523d385277528e556ae4f6", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "No sample in VT\r\nLast check:21/06/2026", "deleted": false, "disable_correlation": false, "timestamp": "1782033568", "to_ids": true, "type": "sha1", "uuid": "aa7b7996-735c-4000-b89a-042d2fe16d8f", "value": "d35695f2366a43628231e73ffa83ca106306a8fa", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "No sample in VT\r\nLast check:21/06/2026", "deleted": false, "disable_correlation": false, "timestamp": "1782033569", "to_ids": true, "type": "sha1", "uuid": "21eb6dd7-055b-4b60-afbb-62e3a4c31957", "value": "f96bcd875836da89800912de1e557891697c7cf4", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035179", "to_ids": true, "type": "domain", "uuid": "951806be-6c97-4313-af76-b0fac3bae1e2", "value": "andreagahuvrauvin.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035200", "to_ids": true, "type": "domain", "uuid": "01f37668-e714-4640-9485-eb4ba2e91945", "value": "byronorenstein.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035221", "to_ids": true, "type": "domain", "uuid": "7614d9ae-0a65-4202-ad40-9d3e3542c23e", "value": "christienoll.xyz", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035242", "to_ids": true, "type": "domain", "uuid": "8d031643-d993-4f59-9d51-edf5426544ff", "value": "dieordaunt.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035263", "to_ids": true, "type": "domain", "uuid": "380fa6bc-3ae1-4fda-b816-be962127722b", "value": "illagedrivestralia.xyz", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035284", "to_ids": true, "type": "domain", "uuid": "147149c4-7ed4-45b5-87cf-dc926d1212fa", "value": "straliaenollma.xyz", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035306", "to_ids": true, "type": "domain", "uuid": "1f954280-adff-4e90-8bba-3d914117ef2e", "value": "ourkekwiciver.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035327", "to_ids": true, "type": "hostname", "uuid": "bff1ae88-4976-43b9-8b1e-bc21092e6cfe", "value": "nav.neat-url.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035348", "to_ids": true, "type": "hostname", "uuid": "60e3f7ad-052d-4626-ad27-167cf7156515", "value": "cyhire.cechire.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035369", "to_ids": true, "type": "domain", "uuid": "f6e2a7c2-e759-41da-b6e0-89761286fade", "value": "ad-appier.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035390", "to_ids": true, "type": "domain", "uuid": "d2c38837-a8f4-4a55-8521-513c36d9b489", "value": "baotgm.net", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035411", "to_ids": true, "type": "domain", "uuid": "398a286e-8eab-46f3-8947-82113d9981a1", "value": "benchtag2.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035432", "to_ids": true, "type": "domain", "uuid": "1eaf0cae-ce92-4a32-a046-2115be9ac3a0", "value": "bootstraplink.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035454", "to_ids": true, "type": "domain", "uuid": "6a5dc80b-ab37-4ca1-8576-95f4119735d8", "value": "cdn-ampproject.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035475", "to_ids": true, "type": "domain", "uuid": "29bc775e-a1e7-4ca7-9521-6088096e3743", "value": "cdn-tynt.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035496", "to_ids": true, "type": "domain", "uuid": "7f1eec51-1a7e-449d-9ba2-dd5fc46de3b6", "value": "cdnazure.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035517", "to_ids": true, "type": "domain", "uuid": "003a8233-f153-4278-96d6-bd7604fe2b26", "value": "daichungvienvinhthanh.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035538", "to_ids": true, "type": "domain", "uuid": "4f20f997-5248-4688-975d-8a1d850b4ed8", "value": "danchimviet.info", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035559", "to_ids": true, "type": "domain", "uuid": "8f0ad464-182e-4e6e-ba04-03d4b12be36d", "value": "danviethouston.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035581", "to_ids": true, "type": "domain", "uuid": "6e608529-8cf2-4ca5-b55d-09c491db8ada", "value": "effecto-azureedge.net", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035602", "to_ids": true, "type": "domain", "uuid": "899428b5-dea8-430a-9f3a-ae73fd0504a1", "value": "fvpoc.org", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035623", "to_ids": true, "type": "domain", "uuid": "64c40080-ed6e-44bd-a538-696d8daa1caa", "value": "gardencityclub.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035644", "to_ids": true, "type": "domain", "uuid": "87faa061-8e06-411c-9521-b6b3da4ad465", "value": "imgincapsula.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035665", "to_ids": true, "type": "domain", "uuid": "57e9a853-54cd-4774-9ef8-20c5c0b4c40e", "value": "labs-apnic.net", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035687", "to_ids": true, "type": "domain", "uuid": "33527e79-d268-4770-84fd-6d7cf9f78c5e", "value": "lb-web-stat.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035708", "to_ids": true, "type": "domain", "uuid": "9bfca607-ed81-435b-bf57-542a87bf3f0a", "value": "lienketqnhn.org", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035729", "to_ids": true, "type": "domain", "uuid": "2e9f2f64-7746-42dd-adbb-aace8727783f", "value": "metacachecdn.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035751", "to_ids": true, "type": "domain", "uuid": "8357aa4b-010b-493e-977d-4e29cc813ddd", "value": "mtgvinh.net", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035773", "to_ids": true, "type": "domain", "uuid": "242e46d9-7544-497c-890f-7ec5cadd8a0f", "value": "optnmstri.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035794", "to_ids": true, "type": "domain", "uuid": "6e097388-edea-4eea-993a-aa1ca1e314bf", "value": "p-typekit.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035816", "to_ids": true, "type": "domain", "uuid": "cbf42789-c708-4e66-b2e5-03075ecfe13a", "value": "pagefairjs.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035837", "to_ids": true, "type": "domain", "uuid": "3564cd4f-7b6f-40bf-a3b6-beaabd560288", "value": "player-cnevids.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035858", "to_ids": true, "type": "domain", "uuid": "e661648a-54d5-4d61-921b-28577751d765", "value": "raovatcalitoday.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035879", "to_ids": true, "type": "domain", "uuid": "c2fd8481-d7b8-4c7c-969b-1e5666656648", "value": "s-adroll.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035900", "to_ids": true, "type": "domain", "uuid": "fad83d06-a4b6-4e9f-a2a6-b4a218aa6894", "value": "s0-2mdn.net", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035921", "to_ids": true, "type": "domain", "uuid": "96d06ff6-4f15-466a-b005-ce8629092ef9", "value": "scdn-cxense.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035942", "to_ids": true, "type": "domain", "uuid": "86e4e6d5-28ad-46ce-a769-63603825e682", "value": "secure-imrworldwide.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035963", "to_ids": true, "type": "domain", "uuid": "bca7fbce-723d-4027-8dff-d567a1df43e1", "value": "sskimresources.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782035984", "to_ids": true, "type": "domain", "uuid": "2eb91a5e-1384-44de-a6ac-6f69699b401f", "value": "static-addtoany.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036005", "to_ids": true, "type": "domain", "uuid": "72444acd-77be-4478-b656-fa380a02f8a6", "value": "thongtinchongphandong.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036027", "to_ids": true, "type": "domain", "uuid": "f6cbf2bf-98ef-477b-816b-e77386a84768", "value": "tinkhongle.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036048", "to_ids": true, "type": "domain", "uuid": "97d9dfd7-e843-459c-906d-d66ad820c310", "value": "tiqqcdn.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036069", "to_ids": true, "type": "domain", "uuid": "12c93ce6-e3b7-4310-aadb-5687e8a5a105", "value": "tiwimg.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036090", "to_ids": true, "type": "domain", "uuid": "04a7ecf3-bcca-4223-8ab5-ab06f56d9d3c", "value": "trieudaiviet.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036111", "to_ids": true, "type": "domain", "uuid": "4722b4a6-8f1f-4623-80ee-85a492dc1a6f", "value": "utagscript.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036132", "to_ids": true, "type": "domain", "uuid": "1fb6c26d-73e5-4073-bd23-048edaf7dedd", "value": "widgets-wp.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "No sample in VT\r\nLast check:21/06/2026", "deleted": false, "disable_correlation": false, "timestamp": "1782033570", "to_ids": true, "type": "sha256", "uuid": "2caa461d-5dce-45ac-bc1e-7be27dc06dd1", "value": "1eda0de280713470878c399d3fb6c331ba0fadd0bd9802ed98ae06218a17f3f7", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "No sample in VT\r\nLast check:21/06/2026", "deleted": false, "disable_correlation": false, "timestamp": "1782033572", "to_ids": true, "type": "sha256", "uuid": "6c4e4f0c-8d96-43db-953d-2202d9771d1a", "value": "8b824be52de7a8723124bad5a45664c574d6e905f300c35719f1e6988887bd62", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036153", "to_ids": true, "type": "hostname", "uuid": "d71e9741-d2f9-4b2d-b751-26641bef8d7d", "value": "10cm.mypets.ws", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036174", "to_ids": true, "type": "hostname", "uuid": "eb02d699-5b39-4ce4-98ce-0f18110425d2", "value": "arabica.podzone.net", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036195", "to_ids": true, "type": "hostname", "uuid": "8d683f19-eadf-4bff-8d04-ad3244232436", "value": "assets-cdn.blogdns.net", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036217", "to_ids": true, "type": "hostname", "uuid": "5189115d-77f6-4467-be99-e84dcfafa354", "value": "cart.gotdns.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036238", "to_ids": true, "type": "hostname", "uuid": "9538ebc9-a2c1-47f4-8aa3-1df0a0dd2b4a", "value": "cdn1.shacknet.us", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036259", "to_ids": true, "type": "hostname", "uuid": "5687ddfe-5411-4203-871d-77b8e03d68d0", "value": "cdnscr.thruhere.net", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036280", "to_ids": true, "type": "hostname", "uuid": "35a80046-1043-43b0-b3f6-03a5b0efa083", "value": "ds-aksb-a.likescandy.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036301", "to_ids": true, "type": "hostname", "uuid": "8f448478-c29e-4258-afd5-a65299416891", "value": "figbc.knowsitall.info", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036322", "to_ids": true, "type": "hostname", "uuid": "61634c47-5fa4-4353-95c5-eb369e19ded3", "value": "gui.dnsdojo.net", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036343", "to_ids": true, "type": "hostname", "uuid": "7b1c6228-4ad8-402a-b901-423e77044ba2", "value": "html5.endofinternet.net", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036364", "to_ids": true, "type": "hostname", "uuid": "074bf677-73b3-4173-ab97-010eb1d57a81", "value": "ichefbcci.is-a-chef.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036385", "to_ids": true, "type": "hostname", "uuid": "48625e4c-acfa-4223-a897-9f47602862d0", "value": "io.blogsite.org", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036406", "to_ids": true, "type": "hostname", "uuid": "138ee204-d6db-4d13-a3b6-437dfb0f830c", "value": "lcontacts.servebbs.net", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036427", "to_ids": true, "type": "hostname", "uuid": "5f814004-407e-4bbd-9755-f58058080167", "value": "pixel1.dnsalias.net", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036449", "to_ids": true, "type": "hostname", "uuid": "bab3634a-0613-465f-bb28-34858fdd542c", "value": "static.tagscdn.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036470", "to_ids": true, "type": "hostname", "uuid": "efe22c44-7647-4854-93af-5313da8151e8", "value": "straits-times.is-an-actor.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036492", "to_ids": true, "type": "hostname", "uuid": "ae003296-6d74-449e-a285-aeb96b2fa088", "value": "tcog.thruhere.net", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036513", "to_ids": true, "type": "hostname", "uuid": "0a76c556-fddf-4fb8-a974-560062b10cb0", "value": "tips-renew.webhop.info", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036534", "to_ids": true, "type": "hostname", "uuid": "de68a8ae-1f8a-4816-a1bd-7e30dff6fe3d", "value": "trc.webhop.net", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036555", "to_ids": true, "type": "hostname", "uuid": "fb1c2ef4-c100-4332-ae0c-1c31825706db", "value": "weblink.selfip.info", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036576", "to_ids": true, "type": "hostname", "uuid": "c7d8d5f8-8dad-4238-b89a-98ab210d2f42", "value": "wfpscripts.homeunix.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036597", "to_ids": true, "type": "hostname", "uuid": "eb37bae2-c30a-487e-9705-8722eba5680b", "value": "your-ip.getmyip.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "No sample in VT\r\nLast check:21/06/2026", "deleted": false, "disable_correlation": false, "timestamp": "1782033573", "to_ids": true, "type": "sha1", "uuid": "21fed271-9516-485c-8157-7b8c1a78a4e8", "value": "2194271c7991d60ae82436129d7f25c0a689050a", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "No sample in VT\r\nLast check:21/06/2026", "deleted": false, "disable_correlation": false, "timestamp": "1782033574", "to_ids": true, "type": "sha1", "uuid": "14e29d1e-c37e-4296-821f-e9e78c8aed9b", "value": "996d0ac930d2cdb16ef96edc27d9d1afc2d89ca8", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036619", "to_ids": true, "type": "ip-dst", "uuid": "a21adfaa-7668-4054-a28c-610003dd0ff0", "value": "192.34.109.163", "Tag": [ { "colour": "#007063", "local": false, "name": "asn:asn=\"27323\"", "relationship_type": "" }, { "colour": "#b3a9eb", "local": false, "name": "asn:as-owner=\"SERVERSTADIUM\"", "relationship_type": "" }, { "colour": "#d16c37", "local": false, "name": "asn:as-country=\"US\"", "relationship_type": "" }, { "colour": "#0088cc", "local": false, "name": "misp-galaxy:country=\"united states of america\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036641", "to_ids": true, "type": "ip-dst", "uuid": "0c8634cc-6606-4180-8496-fb175ce30f04", "value": "192.34.109.173", "Tag": [ { "colour": "#007063", "local": false, "name": "asn:asn=\"27323\"", "relationship_type": "" }, { "colour": "#b3a9eb", "local": false, "name": "asn:as-owner=\"SERVERSTADIUM\"", "relationship_type": "" }, { "colour": "#d16c37", "local": false, "name": "asn:as-country=\"US\"", "relationship_type": "" }, { "colour": "#0088cc", "local": false, "name": "misp-galaxy:country=\"united states of america\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036662", "to_ids": true, "type": "ip-dst", "uuid": "6b4987f2-89e8-4de4-8800-7be493947ad3", "value": "74.121.190.130", "Tag": [ { "colour": "#007063", "local": false, "name": "asn:asn=\"27323\"", "relationship_type": "" }, { "colour": "#b3a9eb", "local": false, "name": "asn:as-owner=\"SERVERSTADIUM\"", "relationship_type": "" }, { "colour": "#d16c37", "local": false, "name": "asn:as-country=\"US\"", "relationship_type": "" }, { "colour": "#0088cc", "local": false, "name": "misp-galaxy:country=\"united states of america\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036683", "to_ids": true, "type": "ip-dst", "uuid": "97089ac7-6bc7-4df5-b0e6-dde5c4ca7872", "value": "74.121.190.150", "Tag": [ { "colour": "#007063", "local": false, "name": "asn:asn=\"27323\"", "relationship_type": "" }, { "colour": "#b3a9eb", "local": false, "name": "asn:as-owner=\"SERVERSTADIUM\"", "relationship_type": "" }, { "colour": "#d16c37", "local": false, "name": "asn:as-country=\"US\"", "relationship_type": "" }, { "colour": "#0088cc", "local": false, "name": "misp-galaxy:country=\"united states of america\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036704", "to_ids": true, "type": "ip-dst", "uuid": "460fa78d-89cc-46e5-93a3-36c30736fe8b", "value": "79.143.87.230", "Tag": [ { "colour": "#23d92f", "local": false, "name": "asn:asn=\"25369\"", "relationship_type": "" }, { "colour": "#0e9e0b", "local": false, "name": "asn:as-owner=\"BANDWIDTH-AS\"", "relationship_type": "" }, { "colour": "#e1449b", "local": false, "name": "asn:as-country=\"GB\"", "relationship_type": "" }, { "colour": "#0088cc", "local": false, "name": "misp-galaxy:country=\"united kingdom\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036725", "to_ids": true, "type": "ip-dst", "uuid": "3dd09c07-27a2-4980-8100-acd0cbc907e4", "value": "79.143.87.233", "Tag": [ { "colour": "#23d92f", "local": false, "name": "asn:asn=\"25369\"", "relationship_type": "" }, { "colour": "#0e9e0b", "local": false, "name": "asn:as-owner=\"BANDWIDTH-AS\"", "relationship_type": "" }, { "colour": "#e1449b", "local": false, "name": "asn:as-country=\"GB\"", "relationship_type": "" }, { "colour": "#0088cc", "local": false, "name": "misp-galaxy:country=\"united kingdom\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036746", "to_ids": true, "type": "domain", "uuid": "c7fae1ad-b69f-443c-8049-e2f0ee2296e5", "value": "triviet.news", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036767", "to_ids": true, "type": "domain", "uuid": "650a3cce-7d49-43ff-9a7b-38a448e83890", "value": "lauradesnoyers.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036788", "to_ids": true, "type": "domain", "uuid": "579e8a2b-6134-4314-8f8b-d2e743a65346", "value": "andreagbridge.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036809", "to_ids": true, "type": "domain", "uuid": "4bd5c3ac-6024-41db-b98d-31039d1c53d4", "value": "karelbecker.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036830", "to_ids": true, "type": "domain", "uuid": "6a6d3057-f648-477e-9315-707272058179", "value": "becreybour.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036851", "to_ids": true, "type": "domain", "uuid": "adb4d923-eb3f-415b-ad42-52e67b66431d", "value": "beaudrysang.xyz", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036872", "to_ids": true, "type": "domain", "uuid": "f7b63bd2-0a05-4cb5-a80d-2d9e24e8cecf", "value": "ursulapapst.xyz", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036893", "to_ids": true, "type": "domain", "uuid": "8f430a89-3a76-415c-a980-9380277e7bf5", "value": "stienollmache.xyz", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036914", "to_ids": true, "type": "domain", "uuid": "f80eb595-5a37-4d76-ab72-f032411bfe67", "value": "christienollmache.xyz", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036935", "to_ids": true, "type": "domain", "uuid": "deb0bc66-3afa-44a8-a634-70a783d03990", "value": "chinaport.org", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036956", "to_ids": true, "type": "domain", "uuid": "b0d44ac3-9b56-4db2-84da-083d36c62498", "value": "karolinblair.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036977", "to_ids": true, "type": "domain", "uuid": "f841236e-df00-41be-b6d5-acb43b640817", "value": "sophiahoule.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782036998", "to_ids": true, "type": "domain", "uuid": "341743d4-09b2-465f-86de-cac0053e6206", "value": "aliexpresscn.net", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782037019", "to_ids": true, "type": "hostname", "uuid": "08680a35-388a-4aad-8ad3-7cc541f3a065", "value": "exploit.agent.lt", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782037041", "to_ids": true, "type": "hostname", "uuid": "333eb983-c655-4ce2-bf71-c051dca2d375", "value": "cloud.360cn.info", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782037062", "to_ids": true, "type": "hostname", "uuid": "f80a3adf-b100-4975-83ac-7e9bda9e2c30", "value": "ntop.dieordaunt.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782037083", "to_ids": true, "type": "hostname", "uuid": "d4b1b44c-56c5-42c7-ad45-d9486509c4f0", "value": "dns.chinanews.network", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782037104", "to_ids": true, "type": "hostname", "uuid": "e16fcdbc-4490-4409-aaca-c69ec7314f2b", "value": "office.ourkekwiciver.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782037125", "to_ids": true, "type": "hostname", "uuid": "4db1aba3-821d-4506-9a2a-b1e373a9066c", "value": "aol.straliaenollma.xyz", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782037146", "to_ids": true, "type": "hostname", "uuid": "7432a1ec-a980-4cb8-a323-ebf911d3c660", "value": "au.charlineopkesston.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782037167", "to_ids": true, "type": "hostname", "uuid": "21760634-74bb-4acb-8e6c-a95678192bdb", "value": "sarc.onteagleroad.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782037189", "to_ids": true, "type": "hostname", "uuid": "95bcee3f-c776-4194-8c3f-00c1f2e1a542", "value": "daff.faybilodeau.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782037210", "to_ids": true, "type": "domain", "uuid": "0acc30e7-e553-4ce5-889b-cbe58d7786a6", "value": "financemachinelearning.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782037231", "to_ids": true, "type": "domain", "uuid": "4cd79e2a-2604-45ab-af79-a86fe1580377", "value": "rity.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782037252", "to_ids": true, "type": "domain", "uuid": "658b20fc-f95e-4fbd-9218-e3e8b1041eca", "value": "coachcybersecurity.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782037273", "to_ids": true, "type": "domain", "uuid": "403ff109-a5fb-4b8d-a2e5-28b36e6f1a0c", "value": "mxprodesign.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "No sample in VT\r\nLast check:21/06/2026", "deleted": false, "disable_correlation": false, "timestamp": "1782033575", "to_ids": true, "type": "sha1", "uuid": "893eb501-4f7e-4aa4-8939-24461193c577", "value": "150764a71deef498de6f8c95ecccb4455c1b601f", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "No sample in VT\r\nLast check:21/06/2026", "deleted": false, "disable_correlation": false, "timestamp": "1782033576", "to_ids": true, "type": "sha1", "uuid": "22aca195-0bd3-4875-ab04-3361b0380787", "value": "48febb91a10d1462461a012fafc0918bb028e947", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "No sample in VT\r\nLast check:21/06/2026", "deleted": false, "disable_correlation": false, "timestamp": "1782033577", "to_ids": true, "type": "sha1", "uuid": "b3d3cafd-48e7-4c72-9364-1c46114b6adc", "value": "4ad36ad6c165b5174967020cb1a3358f78d7a283", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "No sample in VT\r\nLast check:21/06/2026", "deleted": false, "disable_correlation": false, "timestamp": "1782033578", "to_ids": true, "type": "sha1", "uuid": "5d206bdc-5c35-4346-8027-5d6fc25972e7", "value": "51176139b0b2220b802c1578a4994df68df5bcd1", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "No sample in VT\r\nLast check:21/06/2026", "deleted": false, "disable_correlation": false, "timestamp": "1782033579", "to_ids": true, "type": "sha1", "uuid": "f2614eb6-4f7f-49b8-8126-eb42836424a7", "value": "511b77459673ec42163f19e300ff1d233b6c39fb", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "No sample in VT\r\nLast check:21/06/2026", "deleted": false, "disable_correlation": false, "timestamp": "1782033579", "to_ids": true, "type": "sha1", "uuid": "9e4c4487-915c-437f-94bd-2121452f1197", "value": "57352b3ceee32216e5aa20baa848483d7ab5a6fb", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "No sample in VT\r\nLast check:21/06/2026", "deleted": false, "disable_correlation": false, "timestamp": "1782033580", "to_ids": true, "type": "sha1", "uuid": "cfb840cc-06f7-4bd2-b3fc-50fb5a8871c3", "value": "59a8553a4f8130f576ab234e0b220be4d4da0e98", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "No sample in VT\r\nLast check:21/06/2026", "deleted": false, "disable_correlation": false, "timestamp": "1782033581", "to_ids": true, "type": "sha1", "uuid": "f3524c72-232b-4420-94bf-d069d045a481", "value": "865a1739337d3303b3ab02c5e694c22b79c42b7d", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "No sample in VT\r\nLast check:21/06/2026", "deleted": false, "disable_correlation": false, "timestamp": "1782033582", "to_ids": true, "type": "sha1", "uuid": "9fe5f76c-fd66-4ccb-a8ba-dd45eaa30365", "value": "91f042f59be4bdcb6e5ea21b91decd731c175b54", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "No sample in VT\r\nLast check:21/06/2026", "deleted": false, "disable_correlation": false, "timestamp": "1782033583", "to_ids": true, "type": "sha1", "uuid": "7242df6e-59a5-4889-b814-eceb5f8210b4", "value": "9bc06df9f932746a05ee728c8b103bd3ba6bf395", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "No sample in VT\r\nLast check:21/06/2026", "deleted": false, "disable_correlation": false, "timestamp": "1782033584", "to_ids": true, "type": "sha1", "uuid": "09c056ee-2220-4914-8654-d5b6d084de64", "value": "9ca1a5c7f79882db913534c1e62b26bcdcb9f6dd", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "No sample in VT\r\nLast check:21/06/2026", "deleted": false, "disable_correlation": false, "timestamp": "1782033586", "to_ids": true, "type": "sha1", "uuid": "c50c72ba-d3a9-43e5-a07e-175346a6297b", "value": "a177ed0bffeb1efe1d9d31d72a82ef2625ae646d", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "No sample in VT\r\nLast check:21/06/2026", "deleted": false, "disable_correlation": false, "timestamp": "1782033587", "to_ids": true, "type": "sha1", "uuid": "642d0e2f-a894-4f62-980c-ea03abca3408", "value": "a8e2bbbfcb86500322d2367744fa12755ab0c165", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "No sample in VT\r\nLast check:21/06/2026", "deleted": false, "disable_correlation": false, "timestamp": "1782033588", "to_ids": true, "type": "sha1", "uuid": "5f004b54-8f8d-4b6d-99fe-ac56b802a54c", "value": "b0fea981d02f6f76de81ebaefcb68b7d205d6194", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "No sample in VT\r\nLast check:21/06/2026", "deleted": false, "disable_correlation": false, "timestamp": "1782033589", "to_ids": true, "type": "sha1", "uuid": "5cd687c1-02b4-4edc-bde4-a3fd791bb6c9", "value": "f74f1feb62b662cda489fdb2453727824e55acb9", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "No sample in VT\r\nLast check:21/06/2026", "deleted": false, "disable_correlation": false, "timestamp": "1782033590", "to_ids": true, "type": "sha1", "uuid": "0f1ac876-3d20-43b1-9597-ef67540de1d8", "value": "f8f8209987ca7f139de6a62f9e6ee21bd2ae93a9", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782037294", "to_ids": true, "type": "ip-dst", "uuid": "89ccd81b-9f04-4a90-9e50-4e90e0e50d67", "value": "166.88.77.186", "Tag": [ { "colour": "#14d0ec", "local": false, "name": "asn:asn=\"149440\"", "relationship_type": "" }, { "colour": "#1b81cb", "local": false, "name": "asn:as-owner=\"EVOXTENTERPRISE-AS-AP Evoxt Enterprise\"", "relationship_type": "" }, { "colour": "#12ee4d", "local": false, "name": "asn:as-country=\"MY\"", "relationship_type": "" }, { "colour": "#0088cc", "local": false, "name": "misp-galaxy:country=\"malaysia\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782037315", "to_ids": true, "type": "ip-dst", "uuid": "6becc9df-31d5-47f6-a949-3a4f53970af0", "value": "38.60.245.37", "Tag": [ { "colour": "#e7643a", "local": false, "name": "asn:asn=\"138915\"", "relationship_type": "" }, { "colour": "#1ec497", "local": false, "name": "asn:as-owner=\"KAOPU-HK Kaopu Cloud HK Limited\"", "relationship_type": "" }, { "colour": "#fbf8fb", "local": false, "name": "asn:as-country=\"HK\"", "relationship_type": "" }, { "colour": "#daa28c", "local": false, "name": "misp-galaxy:country=\"hong kong\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782037336", "to_ids": true, "type": "domain", "uuid": "215bfad7-7a20-4a43-afab-681768cda0c5", "value": "gatewayrvcenter.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782037357", "to_ids": true, "type": "domain", "uuid": "2cc3359b-d3d6-4471-84d8-e548980414d1", "value": "leadingfilipinoteams.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782037378", "to_ids": true, "type": "ip-dst", "uuid": "157b7032-fa26-46f0-9e26-280f95b9fe3a", "value": "103.119.47.104", "Tag": [ { "colour": "#b03a08", "local": false, "name": "asn:asn=\"135330\"", "relationship_type": "" }, { "colour": "#0048a1", "local": false, "name": "asn:as-owner=\"ADCDATACOM-AS-AP ADCDATA.COM\"", "relationship_type": "" }, { "colour": "#fbf8fb", "local": false, "name": "asn:as-country=\"HK\"", "relationship_type": "" }, { "colour": "#daa28c", "local": false, "name": "misp-galaxy:country=\"hong kong\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782037399", "to_ids": true, "type": "url", "uuid": "e8dd7e80-5f4b-48eb-bbd3-c1d6a0317d89", "value": "http://metakit.fireant.vn/Software/setup.exe", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782037420", "to_ids": true, "type": "url", "uuid": "43086d45-9f6d-4f0e-94a5-90ce135aef38", "value": "http://metakit.fireant.vn/Software/version.xml", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782037442", "to_ids": true, "type": "url", "uuid": "3d70d178-bbd5-4120-a8f3-007266415742", "value": "https://financemachinelearning.com/apparatus/wind/twig/statement.html", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782037463", "to_ids": true, "type": "domain", "uuid": "24b29158-c024-4a4b-b746-036b96109e4d", "value": "oteams.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782037485", "to_ids": true, "type": "domain", "uuid": "72870925-783f-4499-9203-730fe7960570", "value": "power-sync-services.com", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1782037505", "to_ids": true, "type": "hostname", "uuid": "1f20531a-ea7b-4467-ba64-cbf745897551", "value": "metakit.fireant.vn", "Tag": [ { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "SPECTRALVIPER C&C server.", "deleted": false, "disable_correlation": false, "timestamp": "1782037526", "to_ids": true, "type": "ip-dst", "uuid": "321d8bd2-4504-4ccd-8d00-3d4615e8351e", "value": "139.99.33.239", "Tag": [ { "colour": "#21ca95", "local": false, "name": "asn:asn=\"16276\"", "relationship_type": "" }, { "colour": "#983aa5", "local": false, "name": "asn:as-owner=\"OVH\"", "relationship_type": "" }, { "colour": "#93736f", "local": false, "name": "asn:as-country=\"FR\"", "relationship_type": "" }, { "colour": "#f6cea1", "local": false, "name": "misp-galaxy:country=\"france\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "SPECTRALVIPER C&C server.", "deleted": false, "disable_correlation": false, "timestamp": "1782037547", "to_ids": true, "type": "ip-dst", "uuid": "2f8a60c8-35d0-44a5-8c09-520f207b5b6e", "value": "139.162.11.152", "Tag": [ { "colour": "#680e86", "local": false, "name": "asn:asn=\"63949\"", "relationship_type": "" }, { "colour": "#edf21f", "local": false, "name": "asn:as-owner=\"AKAMAI-LINODE-AP Akamai Connected Cloud\"", "relationship_type": "" }, { "colour": "#d906de", "local": false, "name": "asn:as-country=\"SG\"", "relationship_type": "" }, { "colour": "#ad61df", "local": false, "name": "misp-galaxy:country=\"singapore\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "SPECTRALVIPER C&C server.", "deleted": false, "disable_correlation": false, "timestamp": "1782037568", "to_ids": true, "type": "ip-dst", "uuid": "c064966f-50d4-464c-8b9a-3583cd44dd7b", "value": "139.180.128.42", "Tag": [ { "colour": "#133012", "local": false, "name": "asn:asn=\"20473\"", "relationship_type": "" }, { "colour": "#650025", "local": false, "name": "asn:as-owner=\"AS-VULTR\"", "relationship_type": "" }, { "colour": "#d16c37", "local": false, "name": "asn:as-country=\"US\"", "relationship_type": "" }, { "colour": "#0088cc", "local": false, "name": "misp-galaxy:country=\"united states of america\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "SPECTRALVIPER hosting server.", "deleted": false, "disable_correlation": false, "timestamp": "1782037589", "to_ids": true, "type": "ip-dst", "uuid": "e1d558da-a52d-460d-a7fb-9ec3ffe18840", "value": "142.91.98.77", "Tag": [ { "colour": "#77f9d4", "local": false, "name": "asn:asn=\"59253\"", "relationship_type": "" }, { "colour": "#5b3a52", "local": false, "name": "asn:as-owner=\"LEASEWEB-APAC-SIN-11 LEASEWEB SINGAPORE PTE. LTD.\"", "relationship_type": "" }, { "colour": "#d906de", "local": false, "name": "asn:as-country=\"SG\"", "relationship_type": "" }, { "colour": "#ad61df", "local": false, "name": "misp-galaxy:country=\"singapore\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Network activity", "comment": "SPECTRALVIPER C&C server.", "deleted": false, "disable_correlation": false, "timestamp": "1782037610", "to_ids": true, "type": "ip-dst", "uuid": "1199c83e-12fd-4bfc-9a97-a520453c4a79", "value": "194.68.26.241", "Tag": [ { "colour": "#64bed2", "local": false, "name": "asn:asn=\"9009\"", "relationship_type": "" }, { "colour": "#41c276", "local": false, "name": "asn:as-owner=\"M247\"", "relationship_type": "" }, { "colour": "#26f3a1", "local": false, "name": "asn:as-country=\"RO\"", "relationship_type": "" }, { "colour": "#026417", "local": false, "name": "misp-galaxy:country=\"romania\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] } ], "Object": [ { "comment": "", "deleted": false, "description": "File object describing a file with meta-information", "meta-category": "file", "name": "file", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "25", "timestamp": "1782037631", "uuid": "f2b0de4d-6456-4985-9a7e-e1d1c10c8f34", "Attribute": [ { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "md5", "timestamp": "1782037631", "to_ids": true, "type": "md5", "uuid": "ba20ebc6-9394-4262-9cb2-78115c56c8a5", "value": "c212074b43b6ef811f2a8fb72e670e0c", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#220082", "local": false, "name": "rectifyq:samples-found-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha1", "timestamp": "1782033523", "to_ids": true, "type": "sha1", "uuid": "afdf6e01-8680-4579-9a7a-4c69042ac688", "value": "202fb56edb2fb542e05c845d62ffbdcfbebed9ec", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#220082", "local": false, "name": "rectifyq:samples-found-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha256", "timestamp": "1782033524", "to_ids": true, "type": "sha256", "uuid": "b68572af-7c25-4e58-b853-d93927d934a6", "value": "4ce7c9e9ca6f785921921de4d0b75c5436cd0d760ac71ddb30b8c5a610ae34dd", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#220082", "local": false, "name": "rectifyq:samples-found-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "ssdeep", "timestamp": "1782032148", "to_ids": true, "type": "ssdeep", "uuid": "e8513648-04b9-454a-9d8f-4c002eca5c5f", "value": "6144:ajgbwP5vZfAJIM65reiS/mXVjskG4hrfLjuZxh4iPiKb/c:BbkZZJ5reiSur9rLjZ8iIc" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "size-in-bytes", "timestamp": "1782032148", "to_ids": false, "type": "size-in-bytes", "uuid": "c8bb3b73-aea7-4f15-9e1f-ff47292d2724", "value": "344064" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "vhash", "timestamp": "1782032148", "to_ids": true, "type": "vhash", "uuid": "1080266c-e09f-4604-9b6b-c9c491db0f04", "value": "135056655d55756078z6a!z" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "filename", "timestamp": "1782032148", "to_ids": true, "type": "filename", "uuid": "b5d37e39-704f-47be-bfac-a2fc19362ecb", "value": "4ce7c9e9ca6f785921921de4d0b75c5436cd0d760ac71ddb30b8c5a610ae34dd.exe" }, { "category": "Other", "comment": "Checked: 21/06/2026\nLast-scan\t: 13/06/2026", "deleted": false, "disable_correlation": true, "object_relation": "text", "timestamp": "1782032148", "to_ids": false, "type": "text", "uuid": "0a971609-5d37-4a11-aa65-39eebdff578b", "value": "Type Description: Win32 DLL\nMicrosoft: Trojan:Win32/CryptInject.AD\nVT Total Detection:59/71\nFirst Submission:2018-02-18T18:42:07.000000+00:00\nLast Submission:2026-02-24T03:45:12.000000+00:00" } ] }, { "comment": "", "deleted": false, "description": "File object describing a file with meta-information", "meta-category": "file", "name": "file", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "25", "timestamp": "1782037653", "uuid": "ddb5e6b3-7f67-488b-8962-95cdc5962030", "Attribute": [ { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "md5", "timestamp": "1782037653", "to_ids": true, "type": "md5", "uuid": "806345a7-350c-4df1-9fdf-a53e2e04c065", "value": "b65b82eddcecd719c55d6d222926e648", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha1", "timestamp": "1782033525", "to_ids": true, "type": "sha1", "uuid": "6ecfec7f-a560-43fe-af15-a2ba319789c3", "value": "82e579bd49d69845133c9aa8585f8bd26736437b", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha256", "timestamp": "1782033525", "to_ids": true, "type": "sha256", "uuid": "422749e4-7d94-41a3-86d1-90db62c80409", "value": "06dec0082eac094dc0b4b3de8854f190f1d3112dada0d414d9a085a0ee309199", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "ssdeep", "timestamp": "1782032212", "to_ids": true, "type": "ssdeep", "uuid": "373f7817-9583-4b25-8ce4-6b62a829a6ba", "value": "1536:rq3vKpdUQ5hHhjF9Smvu8W7hW1VvXANksSTiO6/DIC3:rwSJhBo8oW3vXAhSTh6/Dj" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "size-in-bytes", "timestamp": "1782032212", "to_ids": false, "type": "size-in-bytes", "uuid": "f1d3ccfc-2103-4407-8eda-a6723e2e61fd", "value": "79872" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "vhash", "timestamp": "1782032212", "to_ids": true, "type": "vhash", "uuid": "78087b90-22db-40a5-b374-54d859d0d427", "value": "174056655d15551068z3e?zf" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "filename", "timestamp": "1782032212", "to_ids": true, "type": "filename", "uuid": "9655b091-5a8a-4c4a-a8f8-763bc03a848b", "value": "localfile~" }, { "category": "Other", "comment": "Checked: 21/06/2026\nLast-scan\t: 13/06/2026", "deleted": false, "disable_correlation": true, "object_relation": "text", "timestamp": "1782032212", "to_ids": false, "type": "text", "uuid": "1dd61ea4-2fee-4b1d-a3be-7ecba0ac9590", "value": "Type Description: Win32 DLL\nMicrosoft: Trojan:Win32/CryptInject.AH\nVT Total Detection:58/71\nFirst Submission:2017-10-05T18:18:33.000000+00:00\nLast Submission:2025-11-21T04:35:04.000000+00:00" } ] }, { "comment": "", "deleted": false, "description": "File object describing a file with meta-information", "meta-category": "file", "name": "file", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "25", "timestamp": "1782037674", "uuid": "c40913b1-b64a-414d-9e58-fc65c237a193", "Attribute": [ { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "md5", "timestamp": "1782037674", "to_ids": true, "type": "md5", "uuid": "b4b560aa-f9e9-4c82-b4cf-a5eef70ec838", "value": "eb2b52ed27346962c4b7b26df51ebafa", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha1", "timestamp": "1782033526", "to_ids": true, "type": "sha1", "uuid": "182bb2f6-566a-4791-b1c8-49adcdb5a8e7", "value": "a40ee8ff313e59aa92d48592c494a4c3d81449af", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha256", "timestamp": "1782033526", "to_ids": true, "type": "sha256", "uuid": "d4e880c2-d859-41b1-a03c-647c14905ab1", "value": "bdb83301a470d202480274df161638f83f8f26e7dda131a11b89a5a3d8259c73", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "ssdeep", "timestamp": "1782032234", "to_ids": true, "type": "ssdeep", "uuid": "f124d926-66fc-433e-8958-21a645e50acf", "value": "49152:nP0z7+WlQD0B+oID1aJN3IjxxLpvHxRJl5:CqhB1y3IlZpPxHl5" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "size-in-bytes", "timestamp": "1782032234", "to_ids": false, "type": "size-in-bytes", "uuid": "6ed21e40-a2f2-4e9d-8a6c-b4a733cd688d", "value": "1673728" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "vhash", "timestamp": "1782032234", "to_ids": true, "type": "vhash", "uuid": "6db5cd95-6ec9-45ab-b4c1-df41ed1b67c7", "value": "016056655d15755az53hz1lz" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "filename", "timestamp": "1782032234", "to_ids": true, "type": "filename", "uuid": "900bf255-b4a6-4d55-92fe-f157353d59b3", "value": "7zS.sfx.exe" }, { "category": "Other", "comment": "Checked: 21/06/2026\nLast-scan\t: 13/06/2026", "deleted": false, "disable_correlation": true, "object_relation": "text", "timestamp": "1782032234", "to_ids": false, "type": "text", "uuid": "ddb8ae82-5025-4253-95d0-1355bfb85e85", "value": "Type Description: Win32 EXE\nMicrosoft: VirTool:Win32/CeeInject.WC!bit\nVT Total Detection:60/71\nFirst Submission:2017-09-28T12:23:55.000000+00:00\nLast Submission:2026-02-24T04:37:36.000000+00:00" } ] }, { "comment": "", "deleted": false, "description": "File object describing a file with meta-information", "meta-category": "file", "name": "file", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "25", "timestamp": "1782037695", "uuid": "7caa53ba-d7c0-4c61-a497-68f7ae40c93c", "Attribute": [ { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "md5", "timestamp": "1782037695", "to_ids": true, "type": "md5", "uuid": "51552c7c-89cf-4704-b916-d9ba6e99b6b2", "value": "88152846c45924d5706a11523942c82b", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha1", "timestamp": "1782033528", "to_ids": true, "type": "sha1", "uuid": "84520a15-58d5-4b41-8400-0f452c2b6e6f", "value": "c2eb1033bc01ab0fd732a7ba4967be02c0690bf0", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha256", "timestamp": "1782033528", "to_ids": true, "type": "sha256", "uuid": "05978a2c-d534-4976-944d-eef0d0d30072", "value": "8f00c2dab8cc32e0052b7779de0bdc8faa385e890415555e86efdfc3b01cc504", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "ssdeep", "timestamp": "1782032256", "to_ids": true, "type": "ssdeep", "uuid": "f3130346-1d27-4c23-81b2-2e8821bc227c", "value": "49152:lP0z7+WlQoR+H+alIkRPFOOl8iT8RH2tZIVpipDxcvo+SiI21UE:g9R+eaC2tT8Uoo2ssZo2" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "size-in-bytes", "timestamp": "1782032256", "to_ids": false, "type": "size-in-bytes", "uuid": "0f9155dc-9697-46ed-acdb-08200b0c0b9a", "value": "1719808" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "vhash", "timestamp": "1782032256", "to_ids": true, "type": "vhash", "uuid": "d10ecab1-dcd9-4ef3-b14a-505192aa7b8a", "value": "016056655d15755az53hz1lz" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "filename", "timestamp": "1782032256", "to_ids": true, "type": "filename", "uuid": "35198390-5256-4145-8ca2-eca9469de3dd", "value": "Excel.exe" }, { "category": "Other", "comment": "Checked: 21/06/2026\nLast-scan\t: 13/06/2026", "deleted": false, "disable_correlation": true, "object_relation": "text", "timestamp": "1782032256", "to_ids": false, "type": "text", "uuid": "79dd44b7-bc67-4cc8-8916-902e5196ac1b", "value": "Type Description: Win32 EXE\nMicrosoft: VirTool:Win32/CeeInject.WC!bit\nVT Total Detection:59/71\nFirst Submission:2017-09-08T09:11:04.000000+00:00\nLast Submission:2024-09-24T03:15:47.000000+00:00" } ] }, { "comment": "", "deleted": false, "description": "File object describing a file with meta-information", "meta-category": "file", "name": "file", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "25", "timestamp": "1782037716", "uuid": "fa5d55bd-9efd-4b22-b140-9696d9eb8fb8", "Attribute": [ { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "md5", "timestamp": "1782037716", "to_ids": true, "type": "md5", "uuid": "22f00b84-d4d6-4d5e-b5bc-08d9e79b7c76", "value": "96b971c9ac868c8d9ae98618b9a9bddc", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha1", "timestamp": "1782033529", "to_ids": true, "type": "sha1", "uuid": "00f928d7-9a23-4370-9ae2-93c9c9d5275f", "value": "fdcb35cd9cb8dc1474cbcdf1c9bb03200dcf3f18", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha256", "timestamp": "1782033529", "to_ids": true, "type": "sha256", "uuid": "094d98ce-8bad-433e-a513-047d4474d56a", "value": "4ab2df974e5e563f611d7267916a00c18f819f5b8770ffcfadc5e1959047fb8e", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "ssdeep", "timestamp": "1782032320", "to_ids": true, "type": "ssdeep", "uuid": "eff6fc71-808b-470f-b4a0-7dd0a522c002", "value": "49152:hP0z7+WlQ5zqPinJybvdcKaeg+MSaU3UOqqpsavC9og1:EkzYbvdcf1EUVavPg1" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "size-in-bytes", "timestamp": "1782032320", "to_ids": false, "type": "size-in-bytes", "uuid": "c902bf82-28fb-478e-9ddb-d9289ee52be0", "value": "1573376" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "vhash", "timestamp": "1782032320", "to_ids": true, "type": "vhash", "uuid": "3f01c3d5-f0bb-4e63-8556-b652378ac8c0", "value": "016056655d15755az53hz1lz" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "filename", "timestamp": "1782032320", "to_ids": true, "type": "filename", "uuid": "733c791f-70d5-47d6-8dd5-22adc1468313", "value": "FontExt.dll" }, { "category": "Other", "comment": "Checked: 21/06/2026\nLast-scan\t: 13/06/2026", "deleted": false, "disable_correlation": true, "object_relation": "text", "timestamp": "1782032320", "to_ids": false, "type": "text", "uuid": "36712e08-7b50-4789-ae4e-004f718917ae", "value": "Type Description: Win32 EXE\nMicrosoft: VirTool:Win32/CeeInject.WC!bit\nVT Total Detection:60/71\nFirst Submission:2017-10-05T10:38:10.000000+00:00\nLast Submission:2023-02-21T08:38:53.000000+00:00" } ] }, { "comment": "", "deleted": false, "description": "File object describing a file with meta-information", "meta-category": "file", "name": "file", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "25", "timestamp": "1782037737", "uuid": "68a251b6-cff4-47ac-bbe8-8d640df53877", "Attribute": [ { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "md5", "timestamp": "1782037737", "to_ids": true, "type": "md5", "uuid": "362c7b3d-f427-45d0-bac5-19c21e9cb1fd", "value": "d592b06f9d112c8650091166c19ea05a", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha1", "timestamp": "1782033530", "to_ids": true, "type": "sha1", "uuid": "b83f3325-19a9-4f35-9d80-cba8433c2894", "value": "fe0161fb8a26a0bf4afad746c7ebf89499dcd3a7", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha256", "timestamp": "1782033531", "to_ids": true, "type": "sha256", "uuid": "ba670ac7-ed37-4caf-b47f-bf10ec841b47", "value": "a17d4568ad5f745d36fc17846d3e0edf63d4e3c9fccb9861579e957f7a560217", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "ssdeep", "timestamp": "1782032342", "to_ids": true, "type": "ssdeep", "uuid": "5a0c3405-518c-494e-b22f-b99805b7c544", "value": "24576:jeMP0z7+KvlQhToShHQikFX4aaR8lMg8BpQ2hluaRVaC6ld+md5g8/wpsQccDInE:dP0z7+WlQhToShw3X41RQMvpThluana/" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "size-in-bytes", "timestamp": "1782032342", "to_ids": false, "type": "size-in-bytes", "uuid": "452283e1-5a6e-4ca6-9dd2-219ca1ea5282", "value": "1503232" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "vhash", "timestamp": "1782032342", "to_ids": true, "type": "vhash", "uuid": "a0359c2d-7dfb-4be9-85a9-2865a7d2bcef", "value": "016056655d15755az53hz1lz" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "filename", "timestamp": "1782032342", "to_ids": true, "type": "filename", "uuid": "c9c7d8d5-58ec-41f6-831f-77725b8ee475", "value": "WinWord.exe" }, { "category": "Other", "comment": "Checked: 21/06/2026\nLast-scan\t: 13/06/2026", "deleted": false, "disable_correlation": true, "object_relation": "text", "timestamp": "1782032342", "to_ids": false, "type": "text", "uuid": "5d0909ba-5f55-45ce-a066-08e27d393f96", "value": "Type Description: Win32 EXE\nMicrosoft: VirTool:Win32/CeeInject.WC!bit\nVT Total Detection:64/71\nFirst Submission:2017-09-13T03:50:36.000000+00:00\nLast Submission:2025-12-09T16:00:33.000000+00:00" } ] }, { "comment": "", "deleted": false, "description": "File object describing a file with meta-information", "meta-category": "file", "name": "file", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "25", "timestamp": "1782037758", "uuid": "360a52b5-ca84-41b7-9970-641e7d8d97a6", "Attribute": [ { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "md5", "timestamp": "1782037758", "to_ids": true, "type": "md5", "uuid": "17ecc316-fdc4-4828-bc07-2bc809c01179", "value": "02ae075da4fb2a6d38ce06f8f40e397e", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha1", "timestamp": "1782033532", "to_ids": true, "type": "sha1", "uuid": "0834dc77-acd0-4ce2-a209-306a165b5798", "value": "e2d949cf06842b5f7ae6b2dffaa49771a93a00d9", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha256", "timestamp": "1782033532", "to_ids": true, "type": "sha256", "uuid": "41fc0db6-3ce2-47db-bf17-0676c8905d40", "value": "e5c766ad580b5bc5f74acc8d2f5dd028c11495d2ce503de7c7a294f94583849d", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "ssdeep", "timestamp": "1782032364", "to_ids": true, "type": "ssdeep", "uuid": "101a2249-1cfd-4638-951f-147b183e0eea", "value": "49152:vNLlOvt4SK+AHh+LkPJOvfem/G6O+T1+nXAZQhsadssZC84ed08o/:vNL8/K3QLOcfTzNp0wXassiedRa" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "size-in-bytes", "timestamp": "1782032364", "to_ids": false, "type": "size-in-bytes", "uuid": "82088c1c-8780-432c-b472-3bde0072f870", "value": "3139367" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "vhash", "timestamp": "1782032364", "to_ids": true, "type": "vhash", "uuid": "ad432a1f-1ee4-4eda-af31-8d281ecb8599", "value": "85a9f6b57ae1bd45d7610bbc2e04db95f" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "filename", "timestamp": "1782032364", "to_ids": true, "type": "filename", "uuid": "17830a00-16aa-466a-833d-aa0446c18e99", "value": "test" }, { "category": "Other", "comment": "Checked: 21/06/2026\nLast-scan\t: 13/06/2026", "deleted": false, "disable_correlation": true, "object_relation": "text", "timestamp": "1782032364", "to_ids": false, "type": "text", "uuid": "0c5cc523-5f80-4ffe-976f-5dbb52b77219", "value": "Type Description: Rich Text Format\nMicrosoft: Exploit:O97M/CVE-2017-11882\nVT Total Detection:43/61\nFirst Submission:2018-04-19T02:23:18.000000+00:00\nLast Submission:2023-08-15T06:19:20.000000+00:00" } ] }, { "comment": "", "deleted": false, "description": "File object describing a file with meta-information", "meta-category": "file", "name": "file", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "25", "timestamp": "1782037779", "uuid": "58fecb6a-f223-46fd-adbf-40e73583c309", "Attribute": [ { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "md5", "timestamp": "1782037779", "to_ids": true, "type": "md5", "uuid": "1525e5a3-1fce-4266-8796-f7667818e36d", "value": "e58f436a95f967a324c6df506c76b5a7", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha1", "timestamp": "1782033533", "to_ids": true, "type": "sha1", "uuid": "6dad3b33-f114-4718-9ba0-932c45908751", "value": "9df3f0d8525edf2b88c4a150134c7699a85a1508", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha256", "timestamp": "1782033533", "to_ids": true, "type": "sha256", "uuid": "7216c38d-e5f3-49c3-b100-034ceb9a180e", "value": "0d1577802d4560b9ba184a2d13570ba28ed0318eee520f2f7a6c5ef238671dd9", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "ssdeep", "timestamp": "1782032386", "to_ids": true, "type": "ssdeep", "uuid": "fe542ce6-d6cb-45bc-90f4-7e259d192d1a", "value": "24576:S3raO8YqerAaow6UWhhk1Wpfe7O/izVKXZMBCWTzZPmSbjfJcpgNKM+vqkro2XEd:HO1FcS3fJcpgo/Vzh3xM9GVud3GTj+ZJ" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "size-in-bytes", "timestamp": "1782032386", "to_ids": false, "type": "size-in-bytes", "uuid": "c1be59d2-11aa-4a01-a10c-d52182fd0af0", "value": "3257231" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "vhash", "timestamp": "1782032386", "to_ids": true, "type": "vhash", "uuid": "279e242f-c5cb-4501-a7d9-cb53707377e0", "value": "85a9f6b57ae1bd45d7610bbc2e04db95f" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "filename", "timestamp": "1782032386", "to_ids": true, "type": "filename", "uuid": "36ae8688-db42-43dc-ad39-734c3049400c", "value": "UFOjmMmw.exe" }, { "category": "Other", "comment": "Checked: 21/06/2026\nLast-scan\t: 13/06/2026", "deleted": false, "disable_correlation": true, "object_relation": "text", "timestamp": "1782032386", "to_ids": false, "type": "text", "uuid": "60d33842-2ea6-4ddc-8f8b-8214aa0a18c9", "value": "Type Description: Rich Text Format\nMicrosoft: Trojan:O97M/Obfuse.H\nVT Total Detection:42/61\nFirst Submission:2018-04-13T21:24:53.000000+00:00\nLast Submission:2019-03-20T14:52:04.000000+00:00" } ] }, { "comment": "", "deleted": false, "description": "File object describing a file with meta-information", "meta-category": "file", "name": "file", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "25", "timestamp": "1782037800", "uuid": "c09789b8-1cc5-4505-98e7-7864276a4c36", "Attribute": [ { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "md5", "timestamp": "1782037800", "to_ids": true, "type": "md5", "uuid": "8a0e1c0d-fd61-41b6-8e2a-0db309d18d42", "value": "e3e99f6d1333ca76a80ba2899a4e2587", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha1", "timestamp": "1782033534", "to_ids": true, "type": "sha1", "uuid": "75419a22-17c9-4327-a45c-e897bbfdea39", "value": "bb060e5e7f7e946613a3497d58fbf026ae7c369a", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha256", "timestamp": "1782033534", "to_ids": true, "type": "sha256", "uuid": "740d30f3-c15f-4a0f-aed9-0f6427d96585", "value": "cb8c176a29003a0474837a6c6dbb871b9f20a520a9232c4705fbd5a87ead1380", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "ssdeep", "timestamp": "1782032408", "to_ids": true, "type": "ssdeep", "uuid": "f60691d3-d362-4824-a0e9-ea89b9e41f97", "value": "49152:TSbfuUGWkqRB98/psdAsNFXQlFxl9dHUxBklH:SQWRa9sMFxe4p" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "size-in-bytes", "timestamp": "1782032408", "to_ids": false, "type": "size-in-bytes", "uuid": "847d5979-61c1-45c3-98c0-facda393dbc3", "value": "2978983" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "vhash", "timestamp": "1782032408", "to_ids": true, "type": "vhash", "uuid": "6368a532-620b-4e83-a043-b25133d29ecc", "value": "85a9f6b57ae1bd45d7610bbc2e04db95f" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "filename", "timestamp": "1782032408", "to_ids": true, "type": "filename", "uuid": "a6baa6c3-6362-45af-90f6-a55f2c34b4e7", "value": "test" }, { "category": "Other", "comment": "Checked: 21/06/2026\nLast-scan\t: 13/06/2026", "deleted": false, "disable_correlation": true, "object_relation": "text", "timestamp": "1782032408", "to_ids": false, "type": "text", "uuid": "0a25cc11-ea9a-4661-ac1b-a581e2a86478", "value": "Type Description: Rich Text Format\nMicrosoft: Trojan:O97M/Obfuse.H\nVT Total Detection:42/61\nFirst Submission:2018-06-08T07:27:37.000000+00:00\nLast Submission:2019-03-20T14:57:46.000000+00:00" } ] }, { "comment": "", "deleted": false, "description": "File object describing a file with meta-information", "meta-category": "file", "name": "file", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "25", "timestamp": "1782037821", "uuid": "a07a2ec0-1ed9-4a5f-ab00-c7a251cc5443", "Attribute": [ { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "md5", "timestamp": "1782037821", "to_ids": true, "type": "md5", "uuid": "11ba5b70-7ebe-4948-9bdc-4043b7032afa", "value": "9453f31cdb02533d509948cc4fd0c44f", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha1", "timestamp": "1782033535", "to_ids": true, "type": "sha1", "uuid": "70f4e89e-2f3a-4b5c-8998-2e69024fc806", "value": "d1357b284c951470066aaa7a8228190b88a5c7c3", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha256", "timestamp": "1782033536", "to_ids": true, "type": "sha256", "uuid": "52934dde-75ac-4f15-9a02-d160194af9e2", "value": "0abe0a3b1fd81272417471e7e5cc489b234a9f84909b019d5f63af702b4058c5", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "ssdeep", "timestamp": "1782032430", "to_ids": true, "type": "ssdeep", "uuid": "3fc6025c-36c7-4f95-a081-d4236ce94e08", "value": "49152:VkGQebxTFWZZb3rtdDpikF91pRyr+d0c1Yr:HQe9TFWZZTjpbbjRg+Gz" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "size-in-bytes", "timestamp": "1782032430", "to_ids": false, "type": "size-in-bytes", "uuid": "b9cf9ed4-44e0-4d21-8053-0043efe04144", "value": "6774619" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "vhash", "timestamp": "1782032430", "to_ids": true, "type": "vhash", "uuid": "30830734-61e0-4c25-b537-9f973a124607", "value": "85a9f6b57ae1bd45d7610bbc2e04db95f" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "filename", "timestamp": "1782032430", "to_ids": true, "type": "filename", "uuid": "4917e38f-7e4c-4c79-b274-7bc0e72ae199", "value": "CeMZfWSA.exe" }, { "category": "Other", "comment": "Checked: 21/06/2026\nLast-scan\t: 13/06/2026", "deleted": false, "disable_correlation": true, "object_relation": "text", "timestamp": "1782032430", "to_ids": false, "type": "text", "uuid": "d4639217-545d-4cbc-9f32-210cef6c6fb1", "value": "Type Description: Rich Text Format\nMicrosoft: Trojan:O97M/Obfuse.H\nVT Total Detection:42/61\nFirst Submission:2018-07-17T07:12:05.000000+00:00\nLast Submission:2018-07-17T07:12:05.000000+00:00" } ] }, { "comment": "", "deleted": false, "description": "File object describing a file with meta-information", "meta-category": "file", "name": "file", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "25", "timestamp": "1782037843", "uuid": "9bf02d1f-f248-4ce4-8e41-e010d84d9215", "Attribute": [ { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "md5", "timestamp": "1782037843", "to_ids": true, "type": "md5", "uuid": "076394f3-92e1-43a9-8912-3ed4bbc31fb2", "value": "3dfc49add45ad35a7c6e21054a53a351", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha1", "timestamp": "1782033537", "to_ids": true, "type": "sha1", "uuid": "2270dd9e-d309-4473-83b8-854b803d5179", "value": "3dfc3d81572e16ceaae3d07922255eb88068b91d", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha256", "timestamp": "1782033537", "to_ids": true, "type": "sha256", "uuid": "9477f82f-06e8-49ae-97b3-aeb82771668d", "value": "78a1f6d9b91334e5435a45b4362f508ae27d7ad784b96621d825c2e966d04064", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "ssdeep", "timestamp": "1782032451", "to_ids": true, "type": "ssdeep", "uuid": "3ce850a5-dec7-4319-b3d9-5ef0a9872393", "value": "49152:oijWryb1mZU7S6VshBf/+jmjSy9aL9x10TRb09Dx:BOyb1mZUmxVTZgL9H0Tm9Dx" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "size-in-bytes", "timestamp": "1782032451", "to_ids": false, "type": "size-in-bytes", "uuid": "91e48cc8-23b0-47b8-a99d-62616c78eff9", "value": "2291904" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "vhash", "timestamp": "1782032451", "to_ids": true, "type": "vhash", "uuid": "cc6a37f7-f1c1-414a-9747-9e5352f93360", "value": "026066655d1515156az75!z" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "filename", "timestamp": "1782032451", "to_ids": true, "type": "filename", "uuid": "bf77afcc-9ad2-48db-b60c-7e70cce88b7b", "value": "WinWord.exe" }, { "category": "Other", "comment": "Checked: 21/06/2026\nLast-scan\t: 13/06/2026", "deleted": false, "disable_correlation": true, "object_relation": "text", "timestamp": "1782032451", "to_ids": false, "type": "text", "uuid": "2b5ed0cc-2e1c-4776-8b1a-7cd46b8a41d4", "value": "Type Description: Win32 EXE\nMicrosoft: None\nVT Total Detection:54/71\nFirst Submission:2018-07-20T03:04:43.000000+00:00\nLast Submission:2023-05-15T17:46:49.000000+00:00" } ] }, { "comment": "", "deleted": false, "description": "File object describing a file with meta-information", "meta-category": "file", "name": "file", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "25", "timestamp": "1782037864", "uuid": "461f0d1a-f125-4e0b-b5d4-9d169a1a252d", "Attribute": [ { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "md5", "timestamp": "1782037864", "to_ids": true, "type": "md5", "uuid": "65302f8a-c110-4bc8-b593-7aff615c2ca4", "value": "b123f9151c5e7057f061f3e03c1e8416", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha1", "timestamp": "1782033538", "to_ids": true, "type": "sha1", "uuid": "fe9f39b4-0046-46bc-9822-e22955b72cde", "value": "49dff13500116b6c085c5ce3de3c233c28669678", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha256", "timestamp": "1782033538", "to_ids": true, "type": "sha256", "uuid": "8f0592bd-f925-4129-8e1a-51d4d5928cf8", "value": "e7f997778ca54b87eb4109d6d4bd5a905e8261ad410a088daec7f3f695bb8189", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "ssdeep", "timestamp": "1782032473", "to_ids": true, "type": "ssdeep", "uuid": "2705c43b-0cca-4cd2-835d-7dec36108e3c", "value": "49152:DILJ7BhgWdn93m+emN0mtsvlN75wcu/Zixg+5lqWoq5KBrUBywk:sl7bV9qmibNN757uRixgCFyUwJ" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "size-in-bytes", "timestamp": "1782032473", "to_ids": false, "type": "size-in-bytes", "uuid": "9f76eff4-a1d8-45b0-9c6d-31e17dd5c2c5", "value": "7327957" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "vhash", "timestamp": "1782032473", "to_ids": true, "type": "vhash", "uuid": "d1f97804-4200-4290-911a-a4bdf7fed16d", "value": "85a9f6b57ae1bd45d7610bbc2e04db95f" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "filename", "timestamp": "1782032473", "to_ids": true, "type": "filename", "uuid": "eaa61217-8c56-4894-a1e1-1d2090df647f", "value": "test" }, { "category": "Other", "comment": "Checked: 21/06/2026\nLast-scan\t: 13/06/2026", "deleted": false, "disable_correlation": true, "object_relation": "text", "timestamp": "1782032473", "to_ids": false, "type": "text", "uuid": "54c2dde1-9790-45b3-866b-d7e7c3c62938", "value": "Type Description: Rich Text Format\nMicrosoft: Trojan:O97M/Obfuse.H\nVT Total Detection:43/61\nFirst Submission:2018-08-14T21:28:46.000000+00:00\nLast Submission:2025-09-29T02:41:42.000000+00:00" } ] }, { "comment": "", "deleted": false, "description": "File object describing a file with meta-information", "meta-category": "file", "name": "file", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "25", "timestamp": "1782037885", "uuid": "ba85b450-1220-4aa0-b354-c665e76f80bb", "Attribute": [ { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "md5", "timestamp": "1782037885", "to_ids": true, "type": "md5", "uuid": "9fa19ac4-ed0d-4d54-b54a-c0ad14e161ce", "value": "4282c6633122dce395de35c05159282d", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha1", "timestamp": "1782033540", "to_ids": true, "type": "sha1", "uuid": "f996dae7-8565-4cf0-a29b-6823f234d107", "value": "8b991d4f2c108fd572c9c2059685fc574591e0be", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha256", "timestamp": "1782033540", "to_ids": true, "type": "sha256", "uuid": "8c9c55e3-958c-4691-b86b-1511cbbf8c58", "value": "58e294513641374ff0b42b7c652d3b4a471e8bde8664a79311e4244be0546df4", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "ssdeep", "timestamp": "1782032495", "to_ids": true, "type": "ssdeep", "uuid": "8afa4ebb-ea73-4dcf-ba99-394eaba8b1eb", "value": "49152:mikLNjOLhLlGRntiIYA3OQiAmiJLJ6OxIlBvjtYC5Tm7h4NaIxJr:6q9LlGRtiIrOjc/CBvJHtm7MxN" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "size-in-bytes", "timestamp": "1782032495", "to_ids": false, "type": "size-in-bytes", "uuid": "88e77037-4237-42a6-9bec-0ad95885e831", "value": "2999152" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "vhash", "timestamp": "1782032495", "to_ids": true, "type": "vhash", "uuid": "29e4c2d0-15ef-4421-9638-9133d01e83cf", "value": "026066655d1515156az75!z" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "filename", "timestamp": "1782032495", "to_ids": true, "type": "filename", "uuid": "b6bc6238-2f4f-4b2a-a991-236bafd237a5", "value": "WinWord.exe" }, { "category": "Other", "comment": "Checked: 21/06/2026\nLast-scan\t: 14/06/2026", "deleted": false, "disable_correlation": true, "object_relation": "text", "timestamp": "1782032495", "to_ids": false, "type": "text", "uuid": "13f33663-96c9-4328-a0a0-bacd38a7385f", "value": "Type Description: Win32 EXE\nMicrosoft: None\nVT Total Detection:54/71\nFirst Submission:2018-08-10T08:08:49.000000+00:00\nLast Submission:2018-08-10T08:08:49.000000+00:00" } ] }, { "comment": "", "deleted": false, "description": "File object describing a file with meta-information", "meta-category": "file", "name": "file", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "25", "timestamp": "1782037906", "uuid": "8287ea28-d032-4aea-8a62-8cb070667adb", "Attribute": [ { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "md5", "timestamp": "1782037906", "to_ids": true, "type": "md5", "uuid": "f66b99e2-bfb8-4c8f-9302-97600828ec15", "value": "d2d332fd3e0aa7b7745d32756e704e12", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha1", "timestamp": "1782033541", "to_ids": true, "type": "sha1", "uuid": "5d9c94c7-4fc7-40ad-a25a-799734df88b3", "value": "377fdc842d4a721a103c32ce8cb4daf50b49f303", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha256", "timestamp": "1782033542", "to_ids": true, "type": "sha256", "uuid": "808507b0-f2b1-4170-b400-1ae108546dc7", "value": "0636ec8d69e14391321ed45ca1d5f868febd13c5cf5d71e7accbd098c6fe13b0", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "ssdeep", "timestamp": "1782032603", "to_ids": true, "type": "ssdeep", "uuid": "d4a5ffa0-0c4d-4c8a-bf36-fce2faa87cdf", "value": "24576:zm4jSYACzfIVZjGfH83aRtu1D2+PpuXxmOoR66mBa+t6a3ZPJotU66pMyCh1:y483VMkor+PoxmOo0fByymUtpMbh1" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "size-in-bytes", "timestamp": "1782032603", "to_ids": false, "type": "size-in-bytes", "uuid": "edb52297-777e-409a-a900-319ea72fad6d", "value": "1686528" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "vhash", "timestamp": "1782032603", "to_ids": true, "type": "vhash", "uuid": "0404dc85-1db6-4c76-870d-87af341cda51", "value": "116056655d15751058z3e?z1" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "filename", "timestamp": "1782032603", "to_ids": true, "type": "filename", "uuid": "43b596ef-69c2-482a-9770-11b2273c5733", "value": "{db646ea2-5d7a-4f27-b7e1-642bd9555af5}.ocx" }, { "category": "Other", "comment": "Checked: 21/06/2026\nLast-scan\t: 13/06/2026", "deleted": false, "disable_correlation": true, "object_relation": "text", "timestamp": "1782032603", "to_ids": false, "type": "text", "uuid": "14bfdf86-90d9-4cd2-8435-5e713c98771f", "value": "Type Description: Win32 DLL\nMicrosoft: Trojan:Win32/CryptInject.AC\nVT Total Detection:56/71\nFirst Submission:2018-05-08T06:14:15.000000+00:00\nLast Submission:2023-01-13T03:45:21.000000+00:00" } ] }, { "comment": "", "deleted": false, "description": "File object describing a file with meta-information", "meta-category": "file", "name": "file", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "25", "timestamp": "1782037927", "uuid": "a461d6e4-918a-4d51-9f94-951271df3c6b", "Attribute": [ { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "md5", "timestamp": "1782037927", "to_ids": true, "type": "md5", "uuid": "92cd466c-e82a-4c0b-9918-8c1692bad04f", "value": "e33fce35e3fd7bb2241190f2cafc5acf", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha1", "timestamp": "1782033543", "to_ids": true, "type": "sha1", "uuid": "dd3c0b6a-0662-4074-9642-309f7b1009d9", "value": "cc918f0da51794f0174437d336e6f3edfdd3cbe4", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha256", "timestamp": "1782033543", "to_ids": true, "type": "sha256", "uuid": "b2f6529a-e775-441e-906a-233f4ab49439", "value": "e9ae768262d227e89b36f2a5cef74bb832d7de3d28ccffc000e7bbd5137fe5f4", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "ssdeep", "timestamp": "1782032625", "to_ids": true, "type": "ssdeep", "uuid": "39546b74-582e-4c71-bced-0a43fc115170", "value": "24576:qUXvfeb+E1H2wRRTpYU289tSfFzRVlwHsy/Q6D:q5b+3whezVlwMy/Q6D" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "size-in-bytes", "timestamp": "1782032625", "to_ids": false, "type": "size-in-bytes", "uuid": "46c65eba-518e-46ab-90c3-ca02e1a95625", "value": "1572064" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "vhash", "timestamp": "1782032625", "to_ids": true, "type": "vhash", "uuid": "50c27333-234d-483a-956d-f7070b8ab33c", "value": "016066655d1515556az75!z" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "filename", "timestamp": "1782032625", "to_ids": true, "type": "filename", "uuid": "f6b77fd7-a311-48f3-a9a0-847153ae5d1c", "value": "AcroRd32.exe" }, { "category": "Other", "comment": "Checked: 21/06/2026\nLast-scan\t: 14/06/2026", "deleted": false, "disable_correlation": true, "object_relation": "text", "timestamp": "1782032625", "to_ids": false, "type": "text", "uuid": "807d67cc-329f-4879-8431-963cc609ac66", "value": "Type Description: Win32 EXE\nMicrosoft: None\nVT Total Detection:54/71\nFirst Submission:2019-01-19T10:51:17.000000+00:00\nLast Submission:2023-01-24T06:12:42.000000+00:00" } ] }, { "comment": "", "deleted": false, "description": "File object describing a file with meta-information", "meta-category": "file", "name": "file", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "25", "timestamp": "1782037948", "uuid": "b2b2e9aa-3263-4142-8305-5243e71b87fa", "Attribute": [ { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "md5", "timestamp": "1782037948", "to_ids": true, "type": "md5", "uuid": "adead8d4-b3bb-4c1a-a7c5-349a491e90cf", "value": "87a421dcf17d40d8157a0d8f1dca6585", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha1", "timestamp": "1782033544", "to_ids": true, "type": "sha1", "uuid": "41175f98-ea40-4f9a-a8c8-710c619726cb", "value": "50a755b30e8f3646f9476080f2c3ae1347f8f556", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha256", "timestamp": "1782033544", "to_ids": true, "type": "sha256", "uuid": "aa2ec6ab-4cf1-4494-956b-f8dab0b12b8d", "value": "c2728fd832f0f7bc3a2747814e3c4eee313235dc2abb93e2f85436017ee41a88", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "ssdeep", "timestamp": "1782032647", "to_ids": true, "type": "ssdeep", "uuid": "79326e1e-023e-47c0-ba42-9b09eece5ab1", "value": "49152:DILJ7BhgWdn93m+emN0mtsvlN75wcu/Zixg+5lqWoq5KBrUBywk:sl7bV9qmibNN757uRixgCFyUwJ" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "size-in-bytes", "timestamp": "1782032647", "to_ids": false, "type": "size-in-bytes", "uuid": "fcc438c5-23fe-4a55-a770-7b5479f0f770", "value": "7327904" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "vhash", "timestamp": "1782032647", "to_ids": true, "type": "vhash", "uuid": "a3c93b12-742c-4d68-bd44-b16888d48b2e", "value": "8a32845e0f7d59b8383b7c0e7116e5b67" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "filename", "timestamp": "1782032647", "to_ids": true, "type": "filename", "uuid": "30787969-7229-49d2-a9e4-b3a57d8ea7b8", "value": "NNlauxKa.exe" }, { "category": "Other", "comment": "Checked: 21/06/2026\nLast-scan\t: 13/06/2026", "deleted": false, "disable_correlation": true, "object_relation": "text", "timestamp": "1782032647", "to_ids": false, "type": "text", "uuid": "566b6a3d-0144-4957-8e43-8a70c8741fa7", "value": "Type Description: Rich Text Format\nMicrosoft: Exploit:O97M/CVE-2017-11882\nVT Total Detection:40/61\nFirst Submission:2018-11-07T09:42:05.000000+00:00\nLast Submission:2018-11-07T09:42:05.000000+00:00" } ] }, { "comment": "", "deleted": false, "description": "File object describing a file with meta-information", "meta-category": "file", "name": "file", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "25", "timestamp": "1782037969", "uuid": "b53a2d05-1243-4196-a49e-ccaeacc6f667", "Attribute": [ { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "md5", "timestamp": "1782037969", "to_ids": true, "type": "md5", "uuid": "e6c091fb-bcca-46c0-bf6c-96413ec8e193", "value": "2aa2d2cc63122b498c82f76244646199", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha1", "timestamp": "1782033546", "to_ids": true, "type": "sha1", "uuid": "ef178f6b-1fba-4c70-82bb-9028885a2ea5", "value": "ac10f5b1d5ecab22b7b418d6e98fa18e32bbdeab", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha256", "timestamp": "1782033546", "to_ids": true, "type": "sha256", "uuid": "42ee75f9-2fb0-4789-a818-852b461ab78c", "value": "4fec545d27684756f2ae21b2a9bca62df72c9ad7c37c4645aa50c6a262793678", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "ssdeep", "timestamp": "1782032669", "to_ids": true, "type": "ssdeep", "uuid": "84d936bb-685b-4662-ba15-247500fe9a56", "value": "49152:sgjTMDwoOZmUeN9xIZgdmFrVhO9U5x1PQkIOm:tjT0wNeNLIPF5hOy5XRI5" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "size-in-bytes", "timestamp": "1782032669", "to_ids": false, "type": "size-in-bytes", "uuid": "5b390fcc-75f2-4e90-afc4-4f4a8fc3a915", "value": "1621061" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "vhash", "timestamp": "1782032669", "to_ids": true, "type": "vhash", "uuid": "bfcf807c-d437-45ec-955c-1f756a755dec", "value": "016066655d1515756az75!z" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "filename", "timestamp": "1782032669", "to_ids": true, "type": "filename", "uuid": "7f7608c7-fc61-4a92-9530-8a92a599d0eb", "value": "x8lxnok4.exe" }, { "category": "Other", "comment": "Checked: 21/06/2026\nLast-scan\t: 14/06/2026", "deleted": false, "disable_correlation": true, "object_relation": "text", "timestamp": "1782032669", "to_ids": false, "type": "text", "uuid": "49d99252-9249-43df-bdcc-2c34736767e6", "value": "Type Description: Win32 EXE\nMicrosoft: VirTool:MSIL/CryptInject!rfn\nVT Total Detection:59/71\nFirst Submission:2018-09-12T11:14:52.000000+00:00\nLast Submission:2018-09-12T11:14:52.000000+00:00" } ] }, { "comment": "", "deleted": false, "description": "File object describing a file with meta-information", "meta-category": "file", "name": "file", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "25", "timestamp": "1782037990", "uuid": "a70bc22f-3681-4eab-a295-5753295c2101", "Attribute": [ { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "md5", "timestamp": "1782037990", "to_ids": true, "type": "md5", "uuid": "41d03b28-2a71-41a4-b8f8-02611ff3c7a3", "value": "6e0ce271ea2872eeaab5f126058df3ca", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha1", "timestamp": "1782033547", "to_ids": true, "type": "sha1", "uuid": "38cfdfbe-1a45-4e09-9c42-d18b85101242", "value": "b998f1b92ed6246ded13b79d069aa91c35637dec", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha256", "timestamp": "1782033547", "to_ids": true, "type": "sha256", "uuid": "eaa22c45-c26b-4355-9dd7-f5b5e7743270", "value": "eac9e4dd6839353a0c43ae29b6c93e3bf45a06cb3d6d4c0e4f5934023c4b91e5", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "ssdeep", "timestamp": "1782032690", "to_ids": true, "type": "ssdeep", "uuid": "846338cc-74a9-4f4c-b0f8-01f8f091fb63", "value": "12288:lBH2KJoFoYoPNtxMapPXsE60qTB8SAko+nM3ec52aoiUEuyySb6iLjifF784U+3+:jH2E9ztxGOEiwnSHbjRXrcZxUz" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "size-in-bytes", "timestamp": "1782032690", "to_ids": false, "type": "size-in-bytes", "uuid": "8c794644-da9c-421d-abaa-64a765e90dd4", "value": "978944" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "vhash", "timestamp": "1782032690", "to_ids": true, "type": "vhash", "uuid": "c86ef2c3-8b11-45ae-8b5d-83024b969b28", "value": "195056655d15751058z3e?z1" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "filename", "timestamp": "1782032690", "to_ids": true, "type": "filename", "uuid": "c2a9ac36-78ba-4416-b11f-d986742f3046", "value": "5v8vkmo7b.exe" }, { "category": "Other", "comment": "Checked: 21/06/2026\nLast-scan\t: 13/06/2026", "deleted": false, "disable_correlation": true, "object_relation": "text", "timestamp": "1782032690", "to_ids": false, "type": "text", "uuid": "1bd21657-1c66-4b5e-a8b3-951142c525f3", "value": "Type Description: Win32 DLL\nMicrosoft: Trojan:Win32/CryptInject.AC\nVT Total Detection:54/71\nFirst Submission:2019-01-24T03:28:41.000000+00:00\nLast Submission:2019-12-25T16:10:23.000000+00:00" } ] }, { "comment": "", "deleted": false, "description": "File object describing a file with meta-information", "meta-category": "file", "name": "file", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "25", "timestamp": "1782038011", "uuid": "99afee3b-a3ff-4604-b814-3d3a7f74f7de", "Attribute": [ { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "md5", "timestamp": "1782038011", "to_ids": true, "type": "md5", "uuid": "35f77969-32dc-48ff-b694-11374a62a330", "value": "8bf63f758356c2b40f1249c108c37257", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha1", "timestamp": "1782033549", "to_ids": true, "type": "sha1", "uuid": "5cb96414-fc0f-4833-9253-c2c3674a8f5a", "value": "cd13210a142da4bc02da47455eb2cfe13f35804a", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha256", "timestamp": "1782033549", "to_ids": true, "type": "sha256", "uuid": "a79bdf66-2579-4a70-8d50-8948ba8114a9", "value": "310bac13316b93f571fa4f8b7230a0fc4324a61f8c49bafc036f778a2b6e5b5a", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "ssdeep", "timestamp": "1782032712", "to_ids": true, "type": "ssdeep", "uuid": "efe5962e-31d1-4be0-ad6c-60dca136b37c", "value": "49152:HfR+h74OnhowShSTC/EOoSp1yeSUFjeFJ7:/R+140hB7OMOoSpvZeFJ7" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "size-in-bytes", "timestamp": "1782032712", "to_ids": false, "type": "size-in-bytes", "uuid": "ead5facc-5076-47e3-a29d-821267a3e3a1", "value": "1926784" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "vhash", "timestamp": "1782032712", "to_ids": true, "type": "vhash", "uuid": "37dd96b4-1482-42a8-9cda-6addd543a6c2", "value": "016066655d1515756az75!z" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "filename", "timestamp": "1782032712", "to_ids": true, "type": "filename", "uuid": "e4fffc9e-c25a-40ba-ba93-e6ab5ee95c41", "value": "Excel.exe" }, { "category": "Other", "comment": "Checked: 21/06/2026\nLast-scan\t: 13/06/2026", "deleted": false, "disable_correlation": true, "object_relation": "text", "timestamp": "1782032712", "to_ids": false, "type": "text", "uuid": "0dc37c2c-20ba-4a0a-9415-7de47e12b827", "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/CryptInject.AC\nVT Total Detection:52/71\nFirst Submission:2018-05-08T06:09:21.000000+00:00\nLast Submission:2020-09-24T12:45:35.000000+00:00" } ] }, { "comment": "", "deleted": false, "description": "File object describing a file with meta-information", "meta-category": "file", "name": "file", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "25", "timestamp": "1782038032", "uuid": "4df123e7-721b-4694-9673-ec517846a037", "Attribute": [ { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "md5", "timestamp": "1782038032", "to_ids": true, "type": "md5", "uuid": "865d4056-790b-4119-83c5-af46eaec0dd9", "value": "3679911b0566259a1e5255eec7511c0e", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha1", "timestamp": "1782033550", "to_ids": true, "type": "sha1", "uuid": "44889507-99b8-40aa-8a02-c4b09f0801d8", "value": "b744878e150a2c254c867bad610778852c66d50a", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha256", "timestamp": "1782033550", "to_ids": true, "type": "sha256", "uuid": "217d6368-8cca-4478-a383-648232cf29d5", "value": "aaf3d294e9103cdbf33fe5ab1e28a7bffa181b5d9faa690c98816535e50dc8c3", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "ssdeep", "timestamp": "1782032734", "to_ids": true, "type": "ssdeep", "uuid": "8e839b80-8619-4b4a-aada-eb91fb09e757", "value": "49152:AjOrXNJ61PWEwu7gIIsGMTzPCuxIlFxdB:AiTNJ6ZWEXg9wfcFxd" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "size-in-bytes", "timestamp": "1782032734", "to_ids": false, "type": "size-in-bytes", "uuid": "b4d51510-8e42-40ca-b8a2-de2021b57d0d", "value": "1689088" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "vhash", "timestamp": "1782032734", "to_ids": true, "type": "vhash", "uuid": "e33b3415-8261-4d7c-9f88-7648b4800928", "value": "116056655d15751058z3e?z1" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "filename", "timestamp": "1782032734", "to_ids": true, "type": "filename", "uuid": "b69b9f3c-106d-40a0-96e6-e25e32e6ace3", "value": "{bb31f5a0-a119-4667-ba38-3cf4ceee97bf}.ocx" }, { "category": "Other", "comment": "Checked: 21/06/2026\nLast-scan\t: 13/06/2026", "deleted": false, "disable_correlation": true, "object_relation": "text", "timestamp": "1782032734", "to_ids": false, "type": "text", "uuid": "f05a1736-0b8e-4972-8073-1f20ddba4cb6", "value": "Type Description: Win32 DLL\nMicrosoft: Trojan:Win32/CryptInject.AC\nVT Total Detection:52/71\nFirst Submission:2018-08-11T06:19:28.000000+00:00\nLast Submission:2019-03-20T15:13:00.000000+00:00" } ] }, { "comment": "", "deleted": false, "description": "File object describing a file with meta-information", "meta-category": "file", "name": "file", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "25", "timestamp": "1782038053", "uuid": "32fbb602-6ba8-4cec-ad42-04760cb0ebd1", "Attribute": [ { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "md5", "timestamp": "1782038053", "to_ids": true, "type": "md5", "uuid": "9ae45ca9-a2bd-4fcc-a2f9-cc3776a04edc", "value": "fb2b48d856b9c3db882fb4026d5b056b", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha1", "timestamp": "1782033551", "to_ids": true, "type": "sha1", "uuid": "6b6cfea5-267d-4d28-a62c-bc9d0a0b85c6", "value": "83d520e8c3fdaefb5c8b180187b45c65590db21a", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha256", "timestamp": "1782033551", "to_ids": true, "type": "sha256", "uuid": "de2d592c-b404-454d-8229-cfb4451995af", "value": "1f9766a086cf4a3a692b2a15c0cfe204b7021a2b352306f565de48da166d65a1", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "ssdeep", "timestamp": "1782032756", "to_ids": true, "type": "ssdeep", "uuid": "74a62ed6-9112-4c77-9f86-2e98c3c43e64", "value": "12288:lBH2KJoFoYoPNtxMapPXsE60qTB8SAko+nM3ec52aoiUEuyySb6iLjifF784U+3u:jH2E9ztxGOEiwnSHbjRXrcZxU" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "size-in-bytes", "timestamp": "1782032756", "to_ids": false, "type": "size-in-bytes", "uuid": "bd52f720-6a26-4c63-a6fc-747d94d8dbf1", "value": "978944" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "vhash", "timestamp": "1782032756", "to_ids": true, "type": "vhash", "uuid": "b938e829-956c-463c-81fd-a14d54cbec1c", "value": "195056655d15751058z3e?z1" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "filename", "timestamp": "1782032756", "to_ids": true, "type": "filename", "uuid": "eae4ffa6-2db9-4e61-b0b9-5a5cae064851", "value": "{07959185-524a-4d92-9652-f25f83d1e95a}.ocx" }, { "category": "Other", "comment": "Checked: 21/06/2026\nLast-scan\t: 13/06/2026", "deleted": false, "disable_correlation": true, "object_relation": "text", "timestamp": "1782032756", "to_ids": false, "type": "text", "uuid": "42fe368c-5e28-4ee1-9079-83dbe3ff535f", "value": "Type Description: Win32 DLL\nMicrosoft: Trojan:Win32/CryptInject.AC\nVT Total Detection:57/71\nFirst Submission:2019-01-19T15:01:36.000000+00:00\nLast Submission:2023-02-15T13:15:30.000000+00:00" } ] }, { "comment": "", "deleted": false, "description": "File object describing a file with meta-information", "meta-category": "file", "name": "file", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "25", "timestamp": "1782038075", "uuid": "9961b1c0-4d69-42de-afbb-9fafed645280", "Attribute": [ { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "md5", "timestamp": "1782038075", "to_ids": true, "type": "md5", "uuid": "8bd5e5a4-911a-4a1b-b868-56ed8cba0913", "value": "ebf6a950b26261cd353015ed567c6ac6", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha1", "timestamp": "1782033553", "to_ids": true, "type": "sha1", "uuid": "b7d11f17-ddf6-4d7c-9dd5-3aa868eb60a9", "value": "77c42f66dadf5b579f6bcd0771030adc7aefa97c", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha256", "timestamp": "1782033553", "to_ids": true, "type": "sha256", "uuid": "b1f372ee-dae8-4b20-950b-51f9ec9435cf", "value": "f22dfd57bca864a84dfd0c76dfb46ab0fcaafe1cc411d9b5ee28b254061e53de", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "ssdeep", "timestamp": "1782032777", "to_ids": true, "type": "ssdeep", "uuid": "7eab0c5e-36d4-4496-acb6-d380279498ad", "value": "49152:FInhmtUXC6J43rF5kFej6yRSPRLp0N/Al:FInhmtUyFv5Z4PRN0N" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "size-in-bytes", "timestamp": "1782032777", "to_ids": false, "type": "size-in-bytes", "uuid": "731f480f-4a67-4303-bc54-0f68d8731b6f", "value": "1689088" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "vhash", "timestamp": "1782032777", "to_ids": true, "type": "vhash", "uuid": "1ccf80bd-8dbe-4d19-bba9-d2c68b63f11c", "value": "116056655d15751058z3e?z1" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "filename", "timestamp": "1782032777", "to_ids": true, "type": "filename", "uuid": "85a3c2d1-4dfb-444a-a574-5aa2cfbf3486", "value": "{7c1d6a86-94ff-4113-a04d-84251023012a}.ocx" }, { "category": "Other", "comment": "Checked: 21/06/2026\nLast-scan\t: 13/06/2026", "deleted": false, "disable_correlation": true, "object_relation": "text", "timestamp": "1782032777", "to_ids": false, "type": "text", "uuid": "39caacbe-a8e4-4426-ab72-f9bbcdc8b363", "value": "Type Description: Win32 DLL\nMicrosoft: Trojan:Win32/CryptInject.AC\nVT Total Detection:54/71\nFirst Submission:2018-07-21T01:15:14.000000+00:00\nLast Submission:2018-07-21T02:31:02.000000+00:00" } ] }, { "comment": "", "deleted": false, "description": "File object describing a file with meta-information", "meta-category": "file", "name": "file", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "25", "timestamp": "1782038096", "uuid": "55f73563-582f-4fc3-8b1a-4eee054492ed", "Attribute": [ { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "md5", "timestamp": "1782038096", "to_ids": true, "type": "md5", "uuid": "2b5cda21-57ba-4724-964c-7f8a31b5c7d6", "value": "6b1908bc8cdae9646febbd8574dce523", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha1", "timestamp": "1782033554", "to_ids": true, "type": "sha1", "uuid": "fc897a7d-81aa-4ad9-a6f0-2d86f1b08be5", "value": "b4e6ddcd78884f64825fdf4710b35cdbeaabe8e2", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha256", "timestamp": "1782033554", "to_ids": true, "type": "sha256", "uuid": "edc2d76e-6fde-4f04-bf23-b74c5aedad5f", "value": "8b3fac153610cedbbc22221618c9a58997e5293458739b4854136ac56c7bffc2", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "ssdeep", "timestamp": "1782032799", "to_ids": true, "type": "ssdeep", "uuid": "08199a11-0c6d-4b4d-8368-ce9dc933f7d4", "value": "49152:XiR95jEREi135KgjvJ0sK53P3k3Uju1rg+FedEK9dz:m5wO4N0153P3k3Qke6K9dz" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "size-in-bytes", "timestamp": "1782032799", "to_ids": false, "type": "size-in-bytes", "uuid": "ba8ce355-63d6-4623-b6b8-cd7f5b1f9aca", "value": "2050800" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "vhash", "timestamp": "1782032799", "to_ids": true, "type": "vhash", "uuid": "167a846d-833a-468a-a5c8-37063d0adedf", "value": "026066655d1515156az75!z" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "filename", "timestamp": "1782032799", "to_ids": true, "type": "filename", "uuid": "b5e7113b-56ae-4762-90b4-ec4973ca3555", "value": "WinWord.exe" }, { "category": "Other", "comment": "Checked: 21/06/2026\nLast-scan\t: 13/06/2026", "deleted": false, "disable_correlation": true, "object_relation": "text", "timestamp": "1782032799", "to_ids": false, "type": "text", "uuid": "7b98f540-2747-4d1e-a17f-1b332bddbc8b", "value": "Type Description: Win32 EXE\nMicrosoft: None\nVT Total Detection:51/71\nFirst Submission:2019-01-24T08:15:12.000000+00:00\nLast Submission:2021-02-27T21:32:50.000000+00:00" } ] }, { "comment": "", "deleted": false, "description": "File object describing a file with meta-information", "meta-category": "file", "name": "file", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "25", "timestamp": "1782038118", "uuid": "ae33c005-b38f-40ae-9aba-625002282e62", "Attribute": [ { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "md5", "timestamp": "1782038118", "to_ids": true, "type": "md5", "uuid": "a5bdf906-06b9-4cf8-848a-9d2fa9bd6ed5", "value": "686b61c2d1274c81db691866c8646e2d", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha1", "timestamp": "1782033556", "to_ids": true, "type": "sha1", "uuid": "f432f006-20aa-4d8c-9916-f53bf18808a5", "value": "bd39591a02b4e403a25aae502648264308085ded", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha256", "timestamp": "1782033556", "to_ids": true, "type": "sha256", "uuid": "44380a99-1624-4cbd-9605-ab1ff6ae42bc", "value": "073bdff73d61350b64d10c46cdf678f097aaa236d2a0182f2dc2c3d073d60259", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "ssdeep", "timestamp": "1782032821", "to_ids": true, "type": "ssdeep", "uuid": "7477dbad-ed1b-43a3-81b9-dc0effc4fff2", "value": "49152:nH5/MXCCRbnMnoP0WiVRNnW3MjCDBguzUjKKxvD:H5kSMJ0HVRNnW3ouUOKxv" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "size-in-bytes", "timestamp": "1782032821", "to_ids": false, "type": "size-in-bytes", "uuid": "9f497e90-fdd7-4598-8e12-7ad6a7fe2584", "value": "1674752" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "vhash", "timestamp": "1782032821", "to_ids": true, "type": "vhash", "uuid": "f38a3497-6eb7-4f7c-bd4e-5f058bdb077c", "value": "116056655d15751058z3e?z1" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "filename", "timestamp": "1782032821", "to_ids": true, "type": "filename", "uuid": "80b68284-4919-4b33-a817-d5988cf13030", "value": "{5d706adc-0933-4af8-be59-a14ab73a8bc4}.ocx" }, { "category": "Other", "comment": "Checked: 21/06/2026\nLast-scan\t: 14/06/2026", "deleted": false, "disable_correlation": true, "object_relation": "text", "timestamp": "1782032821", "to_ids": false, "type": "text", "uuid": "ac268eeb-1b8c-40ff-b1e8-5386ad5589dd", "value": "Type Description: Win32 DLL\nMicrosoft: Trojan:Win32/CryptInject.AC\nVT Total Detection:55/71\nFirst Submission:2019-01-24T08:17:51.000000+00:00\nLast Submission:2023-02-10T11:52:29.000000+00:00" } ] }, { "comment": "", "deleted": false, "description": "File object describing a file with meta-information", "meta-category": "file", "name": "file", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "25", "timestamp": "1782038139", "uuid": "d6525f68-db49-488a-b9bc-5d4b59971bbc", "Attribute": [ { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "md5", "timestamp": "1782038139", "to_ids": true, "type": "md5", "uuid": "7116a6a3-57ec-432a-87a3-929262658f8b", "value": "56142bbd9a218b2f6ce56350c0a88d43", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha1", "timestamp": "1782033557", "to_ids": true, "type": "sha1", "uuid": "78a9f25c-d89c-48ab-b326-dfd671e84c55", "value": "efac23b0e6395b1178bcf7086f72344b24c04dcc", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha256", "timestamp": "1782033557", "to_ids": true, "type": "sha256", "uuid": "6f8a76bb-5d03-48dc-aa88-2a974bfaf96e", "value": "3019f9c7763644bc0159ce433199b2b12f04843c3c8e231557c4f732317f4223", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "ssdeep", "timestamp": "1782032844", "to_ids": true, "type": "ssdeep", "uuid": "279f781b-3a48-4d54-846b-5d828027bb42", "value": "24576:sg17ro9cowy/s/9llVMd9gTBAno5SNDF38BuUzhMGKf1mb:syPo9coE/9ly9gTSFNR1AhMjf1A" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "size-in-bytes", "timestamp": "1782032844", "to_ids": false, "type": "size-in-bytes", "uuid": "85c68616-2684-4b72-a61a-1e72bb6b74ae", "value": "1284608" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "vhash", "timestamp": "1782032844", "to_ids": true, "type": "vhash", "uuid": "871ae62b-845a-4342-a6b9-67e4423e05e4", "value": "116056655d15751058z3e?z1" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "filename", "timestamp": "1782032844", "to_ids": true, "type": "filename", "uuid": "03b8a1ce-3da1-4d93-9e88-32bb4594c969", "value": "{9ec60ada-a200-4159-b310-8071892ed0c3}.ocx" }, { "category": "Other", "comment": "Checked: 21/06/2026\nLast-scan\t: 13/06/2026", "deleted": false, "disable_correlation": true, "object_relation": "text", "timestamp": "1782032844", "to_ids": false, "type": "text", "uuid": "f7834da0-ccfd-4607-8d15-9ba3b5998225", "value": "Type Description: Win32 DLL\nMicrosoft: Trojan:Win32/CryptInject.AC\nVT Total Detection:54/71\nFirst Submission:2018-09-13T09:55:33.000000+00:00\nLast Submission:2022-12-26T10:53:27.000000+00:00" } ] }, { "comment": "", "deleted": false, "description": "File object describing a file with meta-information", "meta-category": "file", "name": "file", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "25", "timestamp": "1782038161", "uuid": "6cca9c54-4701-4acb-acab-1f7f03a51606", "Attribute": [ { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "md5", "timestamp": "1782038161", "to_ids": true, "type": "md5", "uuid": "02ec935f-48e5-4158-abe2-6de47d19543d", "value": "bf7c5bc086694a6e909013d63fccf6d6", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha1", "timestamp": "1782033558", "to_ids": true, "type": "sha1", "uuid": "5441b59d-f538-429b-b252-3fc16bc0cfc3", "value": "7642f2181cb189965c596964d2edf8fe50da742b", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha256", "timestamp": "1782033558", "to_ids": true, "type": "sha256", "uuid": "116a0ecd-6570-429c-945e-9367569a16a3", "value": "5e3367ce792c88147cdcff2c121b7ba33dbe2627c8368d0471a253e14844ab18", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "ssdeep", "timestamp": "1782032866", "to_ids": true, "type": "ssdeep", "uuid": "27caf32c-125e-49d2-89bf-f1cde1502ebb", "value": "24576:dM838O5EEYFB8O6VLQ3109rvSkuWeuTFCMLoIKT:73mETOJ31kvSLWjCMLobT" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "size-in-bytes", "timestamp": "1782032866", "to_ids": false, "type": "size-in-bytes", "uuid": "d3e297a7-ce3e-4510-b2bd-f76d8439fd30", "value": "992768" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "vhash", "timestamp": "1782032866", "to_ids": true, "type": "vhash", "uuid": "675c62eb-6021-4c66-b614-b05216eef1f2", "value": "195056655d15751058z3e?z1" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "filename", "timestamp": "1782032866", "to_ids": true, "type": "filename", "uuid": "12181a46-5296-4d98-9575-167d59f2bba8", "value": "i8fft.exe" }, { "category": "Other", "comment": "Checked: 21/06/2026\nLast-scan\t: 13/06/2026", "deleted": false, "disable_correlation": true, "object_relation": "text", "timestamp": "1782032866", "to_ids": false, "type": "text", "uuid": "cb24021b-b0ac-410f-9dfd-9b1b90cd9546", "value": "Type Description: Win32 DLL\nMicrosoft: Trojan:Win32/CryptInject.AC\nVT Total Detection:57/71\nFirst Submission:2019-01-18T01:03:42.000000+00:00\nLast Submission:2023-05-15T18:38:50.000000+00:00" } ] }, { "comment": "", "deleted": false, "description": "File object describing a file with meta-information", "meta-category": "file", "name": "file", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "25", "timestamp": "1782038182", "uuid": "7b962d7c-b0c6-4f62-91a3-25fc1b6d205b", "Attribute": [ { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "md5", "timestamp": "1782038182", "to_ids": true, "type": "md5", "uuid": "1a785282-72b2-4136-8c6a-35eb3adb1a18", "value": "06334cb14c1512bf2794af8dae5ab357", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha1", "timestamp": "1782033559", "to_ids": true, "type": "sha1", "uuid": "10620fd5-744c-46e4-93ac-7e7117f79249", "value": "e615632c9998e4d3e5acd8851864ed09b02c77d2", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha256", "timestamp": "1782033559", "to_ids": true, "type": "sha256", "uuid": "6dc26d22-010a-4bc1-b526-1162b8a7126b", "value": "e94781e3da02c7f1426fd23cbd0a375cceac8766fe79c8bc4d4458d6fe64697c", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "ssdeep", "timestamp": "1782032887", "to_ids": true, "type": "ssdeep", "uuid": "8fd12182-5919-40f1-af7d-d44e5eca6286", "value": "768:TmVQsnZgS+zTFDWF51Fc/AaIf2Ozprbs120mhhK7n0LTneAHJ/8lJh:TSQs+NzB+Hc/At+OVrNLe0LiWkD" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "size-in-bytes", "timestamp": "1782032887", "to_ids": false, "type": "size-in-bytes", "uuid": "a376b911-c01c-4de0-acd1-5264099f0c81", "value": "47944" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "vhash", "timestamp": "1782032887", "to_ids": true, "type": "vhash", "uuid": "8ed20f54-c031-406a-b54f-f11c043d2104", "value": "da3cdad932dd0634f61f44575ce3da80" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "filename", "timestamp": "1782032887", "to_ids": true, "type": "filename", "uuid": "7835234b-b3a5-471a-b87a-8a1e09eb7fb8", "value": "ntdll.dll" }, { "category": "Other", "comment": "Checked: 21/06/2026\nLast-scan\t: 16/06/2026", "deleted": false, "disable_correlation": true, "object_relation": "text", "timestamp": "1782032887", "to_ids": false, "type": "text", "uuid": "2d0eaf80-c410-4aee-96df-983e4d2b3664", "value": "Type Description: Mach-O\nMicrosoft: Trojan:MacOS/OceanLotus\nVT Total Detection:41/63\nFirst Submission:2019-03-05T06:32:34.000000+00:00\nLast Submission:2021-11-08T09:07:00.000000+00:00" } ] }, { "comment": "", "deleted": false, "description": "File object describing a file with meta-information", "meta-category": "file", "name": "file", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "25", "timestamp": "1782038203", "uuid": "0196120a-dbdd-4b22-9658-394b42d5d0ed", "Attribute": [ { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "md5", "timestamp": "1782038203", "to_ids": true, "type": "md5", "uuid": "c84babb4-abf1-46db-b2dc-834e560682ae", "value": "9b66c815bd292244d337bd6ced3c16c2", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha1", "timestamp": "1782033561", "to_ids": true, "type": "sha1", "uuid": "73c669b3-b3b4-470b-95af-90c518e02355", "value": "19a69f856efa811c376f68e4feb0997b4724f8bd", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha256", "timestamp": "1782033561", "to_ids": true, "type": "sha256", "uuid": "c7837d4b-bb6b-4afd-8308-d86db6bff539", "value": "2bfaf9773b7fac658ab439b9b763a92e144e5388301ca03021ef56501be3036a", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "ssdeep", "timestamp": "1782032909", "to_ids": true, "type": "ssdeep", "uuid": "6034aad2-6255-4ca7-a88c-49aaf994be8c", "value": "6144:FOXnDyYmnVpATYmolf2u0wzGnYhrhOMhAPkTD5XNbY1J0Ap:oEpATYmolf2u0wzGYhrxbe0Ap" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "size-in-bytes", "timestamp": "1782032909", "to_ids": false, "type": "size-in-bytes", "uuid": "3dc57922-d77e-4285-a9a4-2f43ad8a9d7d", "value": "279552" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "vhash", "timestamp": "1782032909", "to_ids": true, "type": "vhash", "uuid": "41964071-d770-405e-be48-1cb20df451fe", "value": "025056655d15556az5oz1fz" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "filename", "timestamp": "1782032909", "to_ids": true, "type": "filename", "uuid": "ccf17872-3aac-47a5-9865-54436bee9ea7", "value": "localfile~" }, { "category": "Other", "comment": "Checked: 21/06/2026\nLast-scan\t: 17/06/2026", "deleted": false, "disable_correlation": true, "object_relation": "text", "timestamp": "1782032909", "to_ids": false, "type": "text", "uuid": "b147693c-0dd5-4e74-a237-aff2212cf616", "value": "Type Description: Win32 EXE\nMicrosoft: Backdoor:Win32/SpectralViper.MKY!MTB\nVT Total Detection:45/69\nFirst Submission:2025-12-06T09:41:08.000000+00:00\nLast Submission:2025-12-06T09:41:08.000000+00:00" } ] }, { "comment": "", "deleted": false, "description": "File object describing a file with meta-information", "meta-category": "file", "name": "file", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "25", "timestamp": "1782038224", "uuid": "761d3b74-eed7-4cdd-bfc4-908acc5ab5d2", "Attribute": [ { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "md5", "timestamp": "1782038224", "to_ids": true, "type": "md5", "uuid": "27a6da01-52cb-4235-862f-b6d2f8abb7ba", "value": "fd2c2f1bf90592604febf404e5579f89", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha1", "timestamp": "1782033562", "to_ids": true, "type": "sha1", "uuid": "9ec8eb94-aa46-41e6-9e6e-6c93ac2c4100", "value": "b7b2d2db544f9eea74453cdf2b8beea58cf07c48", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha256", "timestamp": "1782033562", "to_ids": true, "type": "sha256", "uuid": "477f8d22-ba90-43a6-b0c6-adcad712e9de", "value": "eb52d1791fc861e459ee14f15ef8d4819a4afde3ac7ce5e8cebdcd5f7840925f", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "ssdeep", "timestamp": "1782032931", "to_ids": true, "type": "ssdeep", "uuid": "1e8fcf47-0091-42a8-9d44-e29d01054901", "value": "6144:C9XdIadV4NM9cd/CZm8xuxSYrXGf+bi9:0VqM9q8xYyGbi9" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "size-in-bytes", "timestamp": "1782032931", "to_ids": false, "type": "size-in-bytes", "uuid": "ff216122-d43c-469b-8238-51aa8d844815", "value": "224256" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "vhash", "timestamp": "1782032931", "to_ids": true, "type": "vhash", "uuid": "7cacaa44-a92f-4368-a33f-7f142a82692b", "value": "025056655d15556az4d!z" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "filename", "timestamp": "1782032931", "to_ids": true, "type": "filename", "uuid": "3e398be2-a28c-4a6f-a1ac-bf927338aabb", "value": "u8x66xdy.exe" }, { "category": "Other", "comment": "Checked: 21/06/2026\nLast-scan\t: 20/06/2026", "deleted": false, "disable_correlation": true, "object_relation": "text", "timestamp": "1782032931", "to_ids": false, "type": "text", "uuid": "f1a694a0-70cd-49a1-ba3b-18215bacbc91", "value": "Type Description: Win32 EXE\nMicrosoft: Backdoor:Win32/SpectralViper.MKZ!MTB\nVT Total Detection:44/70\nFirst Submission:2026-03-06T11:15:19.000000+00:00\nLast Submission:2026-03-06T11:15:19.000000+00:00" } ] }, { "comment": "", "deleted": false, "description": "File object describing a file with meta-information", "meta-category": "file", "name": "file", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "25", "timestamp": "1782038245", "uuid": "7718fa3f-2679-4b79-be2a-512e3efef6f7", "Attribute": [ { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "md5", "timestamp": "1782038245", "to_ids": true, "type": "md5", "uuid": "47d2755e-4c11-4339-a177-ed8d14317dc6", "value": "7c09d9d62c4a64db9bf5fa1c8cbad0a9", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" }, { "colour": "#342294", "local": false, "name": "CommentAdded", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha1", "timestamp": "1782033563", "to_ids": true, "type": "sha1", "uuid": "aa15f66e-4b1a-4e76-880c-adf785a5905b", "value": "490194e9bb5128eca8693ad9e610891c2ed185af", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "sha256", "timestamp": "1782033564", "to_ids": true, "type": "sha256", "uuid": "478405e6-72d4-4bf8-91ca-ecae69c3c0a9", "value": "0c637485810974241aa48ed0d1d66819a966d7fbf2198776fe973ae8cc5788b9", "Tag": [ { "colour": "#260091", "local": false, "name": "rectifyq:ioc=\"enriched\"", "relationship_type": "" }, { "colour": "#220085", "local": false, "name": "rectifyq:samples-found-in=\"VirusTotal\"", "relationship_type": "" }, { "colour": "#626567", "local": false, "name": "rectifyq:no-samples-in=\"MalwareBazaar\"", "relationship_type": "" }, { "colour": "#230087", "local": false, "name": "rectifyq:samples-found-in=\"Tria.ge\"", "relationship_type": "" } ] }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "ssdeep", "timestamp": "1782032995", "to_ids": true, "type": "ssdeep", "uuid": "abcb9a8b-3a87-405a-8212-a830c8664819", "value": "6144:vlnXydm45Cty8qphuMLusERPXmDwf9aqJ0ApB:vgCty8qphuyoh0ApB" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "size-in-bytes", "timestamp": "1782032995", "to_ids": false, "type": "size-in-bytes", "uuid": "6fe1e0bc-d50d-4d4b-a155-cbdfa719aae6", "value": "293540" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "object_relation": "vhash", "timestamp": "1782032995", "to_ids": true, "type": "vhash", "uuid": "91c1f8d4-8164-461c-a490-74568f7b884f", "value": "025056655d15556az5oz1fz" }, { "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": true, "object_relation": "filename", "timestamp": "1782032995", "to_ids": true, "type": "filename", "uuid": "5ecb0ab4-dae7-4e52-bba2-d2015d8bb083", "value": "g4js1.exe" }, { "category": "Other", "comment": "Checked: 21/06/2026\nLast-scan\t: 17/06/2026", "deleted": false, "disable_correlation": true, "object_relation": "text", "timestamp": "1782032995", "to_ids": false, "type": "text", "uuid": "2b2deed3-cfc7-4216-9094-790f6b6d5e48", "value": "Type Description: Win32 EXE\nMicrosoft: Backdoor:Win32/SpectralViper.MKY!MTB\nVT Total Detection:44/69\nFirst Submission:2025-12-06T11:53:27.000000+00:00\nLast Submission:2025-12-06T18:33:30.000000+00:00" } ] } ] } }