{
  "Event": {
    "analysis": "1",
    "date": "2026-02-11",
    "extends_uuid": "",
    "info": "[Threat Intel] Fake recruiter campaign targets crypto developers with RAT",
    "protected": false,
    "publish_timestamp": "1776462976",
    "published": true,
    "threat_level_id": "3",
    "timestamp": "1776462976",
    "uuid": "bf85acac-16da-4de1-b626-91c86ffa33cc",
    "Orgc": {
      "name": "Rectifyq",
      "uuid": "cd9bd516-61fa-476b-980f-2f8de03992d4"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#004646",
        "local": false,
        "name": "type:OSINT",
        "relationship_type": ""
      },
      {
        "colour": "#b94b1d",
        "local": false,
        "name": "rectifyq:mitre-att&ck=\"none-from-src\"",
        "relationship_type": ""
      },
      {
        "colour": "#b94b1d",
        "local": false,
        "name": "rectifyq:mitre-att&ck=\"from-OTX\"",
        "relationship_type": ""
      },
      {
        "colour": "#8ee8d8",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Screen Capture - T1113\"",
        "relationship_type": ""
      },
      {
        "colour": "#bb2745",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Standard Encoding - T1132.001\"",
        "relationship_type": ""
      },
      {
        "colour": "#d3f567",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"JavaScript - T1059.007\"",
        "relationship_type": ""
      },
      {
        "colour": "#201172",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Compromise Software Dependencies and Development Tools - T1195.001\"",
        "relationship_type": ""
      },
      {
        "colour": "#47d9d3",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Malicious File - T1204.002\"",
        "relationship_type": ""
      },
      {
        "colour": "#5539fe",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Spearphishing Attachment - T1566.001\"",
        "relationship_type": ""
      },
      {
        "colour": "#7d7034",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"System Information Discovery - T1082\"",
        "relationship_type": ""
      },
      {
        "colour": "#68f2ff",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Data from Local System - T1005\"",
        "relationship_type": ""
      },
      {
        "colour": "#a92e1c",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Deobfuscate/Decode Files or Information - T1140\"",
        "relationship_type": ""
      },
      {
        "colour": "#62e1b7",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Browser Session Hijacking - T1185\"",
        "relationship_type": ""
      },
      {
        "colour": "#0c0051",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"File and Directory Discovery - T1083\"",
        "relationship_type": ""
      },
      {
        "colour": "#62f4c1",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Process Discovery - T1057\"",
        "relationship_type": ""
      },
      {
        "colour": "#a9f8b1",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Exfiltration Over C2 Channel - T1041\"",
        "relationship_type": ""
      },
      {
        "colour": "#e08bb2",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Obfuscated Files or Information - T1027\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Security Software Discovery - T1518.001\"",
        "relationship_type": ""
      },
      {
        "colour": "#7d37d8",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Python - T1059.006\"",
        "relationship_type": ""
      },
      {
        "colour": "#92e858",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Web Protocols - T1071.001\"",
        "relationship_type": ""
      },
      {
        "colour": "#4c0fbb",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Ingress Tool Transfer - T1105\"",
        "relationship_type": ""
      },
      {
        "colour": "#49a260",
        "local": false,
        "name": "rectifyq:category=\"threat\"",
        "relationship_type": ""
      },
      {
        "colour": "#130049",
        "local": false,
        "name": "rectifyq:sub-category=\"campaign-analysis\"",
        "relationship_type": ""
      },
      {
        "colour": "#1a0065",
        "local": false,
        "name": "rectifyq:topic=\"crypto-related\"",
        "relationship_type": ""
      },
      {
        "colour": "#ffd12e",
        "local": false,
        "name": "rectifyq:target=\"broad-based\"",
        "relationship_type": ""
      },
      {
        "colour": "#55acee",
        "local": false,
        "name": "rectifyq:MY-relevancy=\"potentially-relevant\"",
        "relationship_type": ""
      },
      {
        "colour": "#626567",
        "local": false,
        "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
        "relationship_type": ""
      },
      {
        "colour": "#230087",
        "local": false,
        "name": "rectifyq:samples-found-in=\"Tria.ge\"",
        "relationship_type": ""
      },
      {
        "colour": "#3800d9",
        "local": false,
        "name": "rectifyq:action-taken=\"VT-comment\"",
        "relationship_type": ""
      },
      {
        "colour": "#3d00e9",
        "local": false,
        "name": "rectifyq:action-taken=\"telegram\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776135616",
        "to_ids": false,
        "type": "link",
        "uuid": "c7795421-63b6-47aa-95a0-f7914d6dff63",
        "value": "https://www.reversinglabs.com/blog/fake-recruiter-campaign-crypto-devs",
        "Tag": [
          {
            "colour": "#6b003a",
            "local": true,
            "name": "workflow:todo=\"create-missing-misp-galaxy-cluster\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Other",
        "comment": "Description",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776135616",
        "to_ids": false,
        "type": "text",
        "uuid": "3bd9c8b3-7163-4dea-9d68-90e182f6a8a3",
        "value": "A sophisticated fake recruitment campaign named 'graphalgo' has been active since May 2025, targeting JavaScript and Python developers in the cryptocurrency sector. Attackers approach victims through LinkedIn, Facebook, and Reddit with fabricated job opportunities from fake blockchain companies like Veltrix Capital. The campaign uses malicious dependencies hidden in npm and PyPI packages, delivered through coding test repositories on GitHub. Notable is the bigmathutils package that accumulated over 10,000 downloads before its malicious version was released. The operation deploys a remote access trojan (RAT) with token-protected C2 communication, file manipulation capabilities, and functionality to detect the Metamask browser extension, indicating focus on cryptocurrency theft. The modular campaign design allows threat actors to maintain backend infrastructure while easily replacing compromised frontend elements."
      },
      {
        "category": "Other",
        "comment": "Summary",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776135616",
        "to_ids": false,
        "type": "text",
        "uuid": "fbd4e641-9107-47f3-8ad9-57eca4502ea8",
        "value": "Name: Fake recruiter campaign targets crypto developers with RAT\nAuthor: AlienVault\nAdversary: Lazarus Group\nTags: [\"netstruct\", \"bigmathlib\", \"graphrix\", \"terminal-kleur\", \"bignum\", \"pypi packages\", \"graphorbit\", \"graphnetworkx\", \"bigmathix\", \"fake recruitment\", \"graphalgo\", \"graphnode\", \"bignumx\", \"graphlibx\", \"graphflowx\", \"bignumberx\", \"npm packages\", \"bignumex\", \"graphhub\", \"javascript developers\", \"graphlink\", \"graphdict\", \"supply chain attack\", \"cryptocurrency targeting\", \"graphflux\", \"graphlibcore\", \"graphnet\", \"graphsync\", \"bigmathex\", \"graphkitx\", \"graphex\", \"graphchain\", \"bigmathutils\", \"bigpyx\", \"north korea\", \"blockchain\", \"terminalcolor256\", \"python developers\"]\nTgtd countries: []\nMlwr families: [\"graphalgo\", \"bigmathutils\", \"graphnetworkx\", \"graphlibcore\", \"netstruct\", \"terminalcolor256\", \"graphkitx\", \"graphchain\", \"graphflux\", \"graphorbit\", \"graphnet\", \"graphhub\", \"terminal-kleur\", \"graphrix\", \"bignumx\", \"bignumberx\", \"bignumex\", \"bigmathex\", \"bigmathlib\", \"bigmathix\", \"graphlink\", \"graphflowx\", \"graphex\", \"graphlibx\", \"graphdict\", \"graphnode\", \"graphsync\", \"bigpyx\", \"bignum\"]\nAttack_ids: [\"T1113\", \"T1132.001\", \"T1059.007\", \"T1195.001\", \"T1204.002\", \"T1566.001\", \"T1082\", \"T1005\", \"T1140\", \"T1185\", \"T1083\", \"T1057\", \"T1041\", \"T1027\", \"T1518.001\", \"T1059.006\", \"T1071.001\", \"T1105\"]\nIndustries: [\"Technology\"]"
      },
      {
        "category": "Attribution",
        "comment": "Adversary",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776135616",
        "to_ids": false,
        "type": "threat-actor",
        "uuid": "ebf4eade-818f-4158-b524-a35f85f21de2",
        "value": "Lazarus Group"
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399151",
        "to_ids": true,
        "type": "md5",
        "uuid": "cc3e1b3d-b2e0-4604-930a-abbf4625997f",
        "value": "0eb5d17f6c48e108355e26271ce1c115",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399151",
        "to_ids": true,
        "type": "md5",
        "uuid": "cb0f6374-643f-4c4c-b62d-740e2cd70fe5",
        "value": "3c1a44a8fb59cf0d7fc1adbb2ff92e9e",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399152",
        "to_ids": true,
        "type": "md5",
        "uuid": "eded1f27-8fa7-4b78-8442-78618bb125fc",
        "value": "58dde1adb94f541bb0c5e77077b227ed",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399153",
        "to_ids": true,
        "type": "md5",
        "uuid": "8d2e83c4-7549-448d-9aba-54a62658a34d",
        "value": "5ed917ccd2a023f1d2bf1a9ed0b10baf",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399154",
        "to_ids": true,
        "type": "md5",
        "uuid": "efcc4039-f0ef-4467-b8f8-e8a13c0d6ce1",
        "value": "96f466c9f9a1cacfc1b02a7d524ac395",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399155",
        "to_ids": true,
        "type": "md5",
        "uuid": "b4838edf-c7e3-4da8-8057-09f2f94a1339",
        "value": "9c129e14c522a0a6d3e310067dc22800",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399156",
        "to_ids": true,
        "type": "md5",
        "uuid": "730be770-edf1-440c-ac00-1a8fd030d148",
        "value": "a4fcc8f59c84e1bf2af8285d83210fc7",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399156",
        "to_ids": true,
        "type": "md5",
        "uuid": "7c2efba3-89f3-485c-ae80-c71615325ff0",
        "value": "a5dd3601da6d65ac5100873471ca9dab",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399158",
        "to_ids": true,
        "type": "md5",
        "uuid": "37c71ab6-e000-4885-b545-75fd8427ca74",
        "value": "ba62d2a52b02244e739132327100747f",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399159",
        "to_ids": true,
        "type": "md5",
        "uuid": "ed99df37-0521-4e5a-9fc1-e2961da9d049",
        "value": "cffb88bbdf9f0c1bff7fea9e5176fb9f",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399159",
        "to_ids": true,
        "type": "md5",
        "uuid": "0df9ad7e-b2a8-4c84-8389-89f6c42704c6",
        "value": "d5f5a46bddfd2fa40597cdf0b1125698",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399160",
        "to_ids": true,
        "type": "md5",
        "uuid": "f03bf6ce-c508-4a42-91d0-34d1a7e21330",
        "value": "ddef73ccbd032ab29402e7fb270304b8",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399160",
        "to_ids": true,
        "type": "md5",
        "uuid": "6b11bf04-9e4f-46f5-8754-01448695fcfa",
        "value": "e4b04f0778f0793ab53cd27b984f60dc",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399161",
        "to_ids": true,
        "type": "md5",
        "uuid": "daad4023-27f2-4fd9-8572-f75162c9c980",
        "value": "f418bb433cd972517b087cfcb2a85739",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399162",
        "to_ids": true,
        "type": "md5",
        "uuid": "1dc7a024-c3b6-4a04-9bcd-eb27c9cf791b",
        "value": "fca1f02389f13136bcc299a3fc32c08f",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399163",
        "to_ids": true,
        "type": "sha1",
        "uuid": "ed1342b2-cd36-4d33-b4b4-895b14a44838",
        "value": "00c3c60aea42bc85ab4166caf00a9da9dfcd31ad",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399164",
        "to_ids": true,
        "type": "sha1",
        "uuid": "1b3da0bb-898e-41ca-b5be-b5c1cb39bdc2",
        "value": "033555f315d1ce6e63eda1e6e6821d481d163865",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399165",
        "to_ids": true,
        "type": "sha1",
        "uuid": "6131287e-ed54-4265-857e-87f63287d962",
        "value": "03609909b138f75bec5b52732eb512118cc68cda",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399166",
        "to_ids": true,
        "type": "sha1",
        "uuid": "1dad9959-e4a4-4b0b-b55e-5fcbe971e45f",
        "value": "0365f525ea5618d9564c30671b18e9bf3b917e1c",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399167",
        "to_ids": true,
        "type": "sha1",
        "uuid": "558624a1-9181-409d-bc33-d4a438daa6d5",
        "value": "091de0f6c0a7d4713c83819a538a553ad2e3bb73",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399168",
        "to_ids": true,
        "type": "sha1",
        "uuid": "1cc4cbdd-0eea-471a-8f00-34eed0f77ebf",
        "value": "09ff80412f707fecc242b18ac232b18e93dbab27",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399168",
        "to_ids": true,
        "type": "sha1",
        "uuid": "c13cbe3d-f45d-42eb-b514-e29c58e2ee97",
        "value": "0b30a1b7f0a2d23eac10e844ef489e7e1117a867",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399169",
        "to_ids": true,
        "type": "sha1",
        "uuid": "a6f0838e-3b0d-43be-9ffe-910a45960e24",
        "value": "0bb0148df7c183be5322ed0529182a06a2ca5cf3",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399170",
        "to_ids": true,
        "type": "sha1",
        "uuid": "0b4e2f4e-4072-48c5-9846-cf99ed0a533f",
        "value": "0be039e3391b2904d6d015b4974939d32c109605",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399171",
        "to_ids": true,
        "type": "sha1",
        "uuid": "5deb874e-7135-477d-a9a1-86fc47f62f64",
        "value": "10b958180dc3f9e3cce02a8fab86cb5099746ce4",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399171",
        "to_ids": true,
        "type": "sha1",
        "uuid": "e2adaccb-bdfc-4211-a498-2a6c5c814ac1",
        "value": "12198337384feec6a71260fddde961b5f30e64a2",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399172",
        "to_ids": true,
        "type": "sha1",
        "uuid": "3bee51ba-ac6c-427a-a516-d2caac4ee52f",
        "value": "134dfb95bd64b371b66b34b8f30ad2181938244d",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399173",
        "to_ids": true,
        "type": "sha1",
        "uuid": "4d97ab43-43c9-4a27-a2d5-38c03703097d",
        "value": "142268facd71d20feabea97f8867cb505306e26d",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399174",
        "to_ids": true,
        "type": "sha1",
        "uuid": "521840a5-e59d-472e-8710-2c959dc46511",
        "value": "167b9822840628479524a35424ec2429ba3595cb",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399174",
        "to_ids": true,
        "type": "sha1",
        "uuid": "b4f9b58a-5c97-4001-b1cd-c2d70b0ec585",
        "value": "16aa31d991b25a5e498d7101ef9891b211ecafbf",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399175",
        "to_ids": true,
        "type": "sha1",
        "uuid": "f6b5ba32-febf-43a2-b32b-0d20838918c5",
        "value": "18f60badb67c98b4ef70f07aff2b3d579cf1e68f",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399177",
        "to_ids": true,
        "type": "sha1",
        "uuid": "7a6c67d6-caf1-4f5b-bd4d-f102dfce84db",
        "value": "1c11118bbbe0944c99c6130154aae7a49183ab96",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399177",
        "to_ids": true,
        "type": "sha1",
        "uuid": "ffa28504-aa57-41d4-aaf1-20372d51d35c",
        "value": "1d3d040f3cc2bd4de04f906d4f84d891c4125913",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399178",
        "to_ids": true,
        "type": "sha1",
        "uuid": "5bfe6558-6ca7-42ce-ad42-9817e493e9ed",
        "value": "1f4f73d8b599a6e4176149b69500b30b3396b201",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399178",
        "to_ids": true,
        "type": "sha1",
        "uuid": "de7f0e8c-d9e0-4365-a281-cb7eca8cf8d6",
        "value": "20a7e464276f4e1a5338230522a446ca7ffba486",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399179",
        "to_ids": true,
        "type": "sha1",
        "uuid": "fe88ec30-1a74-46ce-b202-b122bed689ab",
        "value": "20c4e927e172a60799c47f71cfaf6b5e82faba64",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399180",
        "to_ids": true,
        "type": "sha1",
        "uuid": "45bfb5b3-cb51-407a-9316-5e31f896a1b3",
        "value": "20eaf2e2913ba6017446e16df1f3f1b9ea69e721",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399181",
        "to_ids": true,
        "type": "sha1",
        "uuid": "1a45086f-6851-4fd6-a69e-febedc041305",
        "value": "2283aefe0d59b37af0ce86465b0e770d0ffc364b",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399182",
        "to_ids": true,
        "type": "sha1",
        "uuid": "7df9adbc-f54d-4ede-a49b-c3a38a535d15",
        "value": "249ad4622d3046892f819cd0094c056694dcef57",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399183",
        "to_ids": true,
        "type": "sha1",
        "uuid": "c8b7b366-19fb-4805-b470-ea6022e57f48",
        "value": "254ef870c2e48a15ffc577a6bc9a3de7c68099ce",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399184",
        "to_ids": true,
        "type": "sha1",
        "uuid": "21547c49-4893-4fa7-908f-72ad8881b095",
        "value": "269ec49a563433993cd216ef5dddd0f923de97b7",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399184",
        "to_ids": true,
        "type": "sha1",
        "uuid": "87d6dd37-790f-4bfe-ac6a-2a72438ae35a",
        "value": "28f34f5b52b0c307c30a6721bb137eced2e167e9",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399185",
        "to_ids": true,
        "type": "sha1",
        "uuid": "902af37e-7a10-4c4a-8525-2e0e705ae609",
        "value": "29ce03eb28cc848e15e5ad9919ce4c263a2cbfd0",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399186",
        "to_ids": true,
        "type": "sha1",
        "uuid": "85d628c3-3255-479c-ad2d-8a8d934e90f1",
        "value": "29f31fac84020d647af1961547638b6be51651aa",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399187",
        "to_ids": true,
        "type": "sha1",
        "uuid": "a7a343d5-2e78-4932-ab16-6e457aadced8",
        "value": "2a9bf45acbcead76a54dd2f655949ea67dd09f7f",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399188",
        "to_ids": true,
        "type": "sha1",
        "uuid": "2e0afc17-65ca-4e2e-9e2a-a16fff8a430a",
        "value": "2b2d02bdb2f5a5f36452de13f0880b213f53e0c9",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399188",
        "to_ids": true,
        "type": "sha1",
        "uuid": "bb94562b-372d-48ac-af71-35ead2e9f587",
        "value": "2becc8dfd662ac79994c1cac59914f2c00be7a30",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399190",
        "to_ids": true,
        "type": "sha1",
        "uuid": "d3fdd478-9d5b-447a-b83d-cafa0ad01c63",
        "value": "2dcd9901fa0743f8dc35597c2d027a5ef6804c2f",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399191",
        "to_ids": true,
        "type": "sha1",
        "uuid": "dc8b8324-91c6-4c48-86b0-094f54906dc9",
        "value": "2e06ddc88ef4a3583df2e30078b4f05723e23f51",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399191",
        "to_ids": true,
        "type": "sha1",
        "uuid": "38569f75-9813-48ce-b036-cbe67562b719",
        "value": "3211392eb14e624fbc11a3b6e42da99950a1f78e",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399192",
        "to_ids": true,
        "type": "sha1",
        "uuid": "8fdf35fd-3bbb-4a86-8738-ee095b5ea82d",
        "value": "3c0e265ac38c2d75d75f41a3334148d486234063",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399194",
        "to_ids": true,
        "type": "sha1",
        "uuid": "03074e48-8213-49aa-bbfa-24c9c2f6a196",
        "value": "3e14c0ca61c51b399c6a3426c77a3376c33afc69",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399194",
        "to_ids": true,
        "type": "sha1",
        "uuid": "3cb33e32-3460-41ad-b447-e53435565dd7",
        "value": "3fa294c4314d25cd341a600ac24f5d6f708c4a38",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399195",
        "to_ids": true,
        "type": "sha1",
        "uuid": "ea9ee09d-0373-4160-842f-ae4d7337226a",
        "value": "3fce78c9a7ba3e113404b2b9ae32c36eda5001e3",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399196",
        "to_ids": true,
        "type": "sha1",
        "uuid": "667dc32f-c028-4761-a2a8-afd64baec1fa",
        "value": "3fe294dafca9a86961d2f426b76f327521e55c40",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399197",
        "to_ids": true,
        "type": "sha1",
        "uuid": "1060fb4d-1ca0-4568-8795-a551df9075c2",
        "value": "40ba273eb7495f97ba813ea903834495a47a91d6",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399198",
        "to_ids": true,
        "type": "sha1",
        "uuid": "1409c9da-8f89-4425-9683-f1b4e3c27f96",
        "value": "426a964a533de9fe7b9d033582770e167961f5bc",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399199",
        "to_ids": true,
        "type": "sha1",
        "uuid": "713bd03c-e893-4e52-b547-e04e1f0842c8",
        "value": "43d2a634a90e168ccadac47f50769a2a6a98416e",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399199",
        "to_ids": true,
        "type": "sha1",
        "uuid": "d2bed85e-66e4-4bad-9974-0e1808db8b02",
        "value": "44cd449ab5d35668ac6f5bb71f9f90d6469e976f",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399200",
        "to_ids": true,
        "type": "sha1",
        "uuid": "11c1feb4-ee04-464f-990b-c21772770ee8",
        "value": "457594493ca35292541b2ce57ba4d610b8fca71c",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399201",
        "to_ids": true,
        "type": "sha1",
        "uuid": "30222a01-f5b4-4e53-89e3-aacd9325bbf9",
        "value": "45ca547179f02b6c5c9e2d4bc08add1bead67cf5",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399202",
        "to_ids": true,
        "type": "sha1",
        "uuid": "d4c66daa-46fb-4622-b105-8590f091d4f2",
        "value": "46cbc3e9426f83bcc6a6e5d1c86839fe8436150c",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399203",
        "to_ids": true,
        "type": "sha1",
        "uuid": "d0f8c179-7d8b-4b10-8ace-c1dbc484d82c",
        "value": "47cc6b384cab1c0499ff525a8c4fcf9113beecf0",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399204",
        "to_ids": true,
        "type": "sha1",
        "uuid": "7947cf7d-ba7c-4915-944c-3b1618c4b5cb",
        "value": "492c45688dc1e568d01693c724d3ef562a95680a",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399204",
        "to_ids": true,
        "type": "sha1",
        "uuid": "65bb9917-b115-416f-bae6-5c27a1bcc8a9",
        "value": "4b6be3b4a2747be35eb065ef4dc6f57c60180a01",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399206",
        "to_ids": true,
        "type": "sha1",
        "uuid": "bf7a3a1f-19ce-4c2a-98b2-0b25fd516c86",
        "value": "4d7e20f1b1421db366ae9b95d678e474e3d2238a",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399207",
        "to_ids": true,
        "type": "sha1",
        "uuid": "e606cfb7-7813-4984-a332-13402c296440",
        "value": "4dab7e9201a431495b3babb165b0e5362287b178",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399208",
        "to_ids": true,
        "type": "sha1",
        "uuid": "87ad28d7-899b-40b8-ac07-c1438598c156",
        "value": "5200922519c6813561653d363483eb4384579d16",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399208",
        "to_ids": true,
        "type": "sha1",
        "uuid": "785bb417-430e-4fbe-9497-de73889c6472",
        "value": "53f8e29944bf36be007061380e3f4ddb1f2e379b",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399209",
        "to_ids": true,
        "type": "sha1",
        "uuid": "dea53a72-161e-403e-a715-1e93de8e7e51",
        "value": "557b02cc261ad4655cc7cd9efccb180340dd287e",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399210",
        "to_ids": true,
        "type": "sha1",
        "uuid": "f5340c7c-712d-4abc-a77a-8dcabd24bebf",
        "value": "567e1b1638f6ddea977ba80d9e0ecb7abe4df7ac",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399210",
        "to_ids": true,
        "type": "sha1",
        "uuid": "58b35123-c58e-4b2c-89d1-baa9eb3158de",
        "value": "5af8efdd7a95161e6e5996d95778cf79064fb069",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399211",
        "to_ids": true,
        "type": "sha1",
        "uuid": "d44c0066-b7c6-438d-b0ce-dafbc187cabe",
        "value": "5c01ed7a8d4686603db797b817ee949d871138cd",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399211",
        "to_ids": true,
        "type": "sha1",
        "uuid": "e84472b9-e1a5-42f3-9c2d-9c748a0b4ec6",
        "value": "5cb58fe4a9053d8ecdd90a254344b0cc73f6a778",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399212",
        "to_ids": true,
        "type": "sha1",
        "uuid": "cbc6f307-5460-4269-9ead-0b47e9446565",
        "value": "5f71af195874a7a582c523fe020c0ed183d9b083",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399213",
        "to_ids": true,
        "type": "sha1",
        "uuid": "83d128ac-e0f9-4f58-82b0-54ac58269a7e",
        "value": "60100d8d7f7dd0cf53088d38a08b2772a5d6e9e7",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399214",
        "to_ids": true,
        "type": "sha1",
        "uuid": "9ff3e208-0e06-468f-9b36-49a1f1b4da7c",
        "value": "6216e9a70d00d33f1dfc437a51d98dba1f012801",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399214",
        "to_ids": true,
        "type": "sha1",
        "uuid": "0525438b-b8c9-47f1-84b0-e2452f6116f6",
        "value": "63100569f6bb327c5785cdb8d9e6d8b2de992fb3",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399215",
        "to_ids": true,
        "type": "sha1",
        "uuid": "fad13f1c-8cab-49d1-a9fe-afe8248c05a4",
        "value": "65cde10d69ce708919fa68e03b6dccc9e583dbe6",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399216",
        "to_ids": true,
        "type": "sha1",
        "uuid": "459cca43-b15c-4288-8157-409af6843d0c",
        "value": "664af994c85d23468f6efd891026f69e27def1fa",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399217",
        "to_ids": true,
        "type": "sha1",
        "uuid": "bd3e7333-f5b3-44a2-861c-a7f59d8b6a3a",
        "value": "66abee65f46121b5551fcf103961a8828d2f4395",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399218",
        "to_ids": true,
        "type": "sha1",
        "uuid": "96229bd1-b5f3-453b-8ab7-338af53507c0",
        "value": "68ba7ef842fa586cea851b0c5c8acbeaaec5a871",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399218",
        "to_ids": true,
        "type": "sha1",
        "uuid": "5b392efe-978b-4fbc-a9b2-a4efaaccad4e",
        "value": "6abff4b4fe8701bd7e0013fcb12fea373ca8b0b9",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399219",
        "to_ids": true,
        "type": "sha1",
        "uuid": "0015b5a5-abfe-47ff-8da2-c295ebf50e2b",
        "value": "6bb7e15c199604907d561382ef193421db09e7e8",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399220",
        "to_ids": true,
        "type": "sha1",
        "uuid": "b18b3597-4ec4-4a39-a449-e20cf771777c",
        "value": "6caaa280c6280843fd14f63b4b2bc6fc5fa900f3",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399221",
        "to_ids": true,
        "type": "sha1",
        "uuid": "b3a23e1a-579f-4da3-94fd-924931097b63",
        "value": "6cdd085286b941f8e2bfda641b3be527e18360c0",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399221",
        "to_ids": true,
        "type": "sha1",
        "uuid": "16af964f-f3c5-4e50-aa8a-820c0aa21535",
        "value": "6dfc750fb1c30cbbcdb935bb140ac44982d3961b",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399222",
        "to_ids": true,
        "type": "sha1",
        "uuid": "a86ff68b-5f00-4bcb-878d-376ced1948e1",
        "value": "6ebf66318f9fdcd4be42fc73218674128e69df58",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399223",
        "to_ids": true,
        "type": "sha1",
        "uuid": "47151120-92b5-4cc0-aa22-687f046d3e39",
        "value": "7067522a2c34d2e91c7ffb8dc59def269b24c1dd",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399224",
        "to_ids": true,
        "type": "sha1",
        "uuid": "4f19def1-2108-44f4-b518-2cd271e56247",
        "value": "70db64caa7070b5a2abaf842fa663586525de644",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399225",
        "to_ids": true,
        "type": "sha1",
        "uuid": "4c4229fc-e712-449d-815f-e1e0368ee5a2",
        "value": "70f1aaf238548a666423458f225d98dff74386da",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399226",
        "to_ids": true,
        "type": "sha1",
        "uuid": "3c2d4891-b33d-4dc0-a741-f794d03be2b4",
        "value": "73951e3d352491ef40473df055b5c8b9cc2b1820",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399227",
        "to_ids": true,
        "type": "sha1",
        "uuid": "7b356408-dbef-4b40-912d-e45f766efb00",
        "value": "73e4903608da9e3f730ee35ffd07d561d0ca35cb",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399228",
        "to_ids": true,
        "type": "sha1",
        "uuid": "c98bd462-30ed-415c-8638-64bf6b6ae452",
        "value": "742d5f027889b9686614b0e24e9eb60ef4cd5f78",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399228",
        "to_ids": true,
        "type": "sha1",
        "uuid": "013e2f9d-f952-4584-85ed-1f50a8b4ab56",
        "value": "756a14ca3baf5ccfc18b2316d52d7fe98e31dfef",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399229",
        "to_ids": true,
        "type": "sha1",
        "uuid": "08e3aa62-bae2-4d7d-9aca-40d40b945ad9",
        "value": "759e78b8b7392686021881951d9329144d7da998",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399230",
        "to_ids": true,
        "type": "sha1",
        "uuid": "974401ff-9452-461f-8807-e32a5cecae98",
        "value": "784b3cda328a49bc6ba5d20be03d7bd76db41917",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399231",
        "to_ids": true,
        "type": "sha1",
        "uuid": "36d23bbc-a119-4eca-bd50-0acff723748f",
        "value": "78a2db508108506ad453a2298117237702df10a8",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399231",
        "to_ids": true,
        "type": "sha1",
        "uuid": "281380b6-ad7c-4793-9e78-a53969568589",
        "value": "7acf1e9d52630a89b38133be149f95af8a8b810b",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399232",
        "to_ids": true,
        "type": "sha1",
        "uuid": "341db509-12c7-48e2-838a-483bf83ddacf",
        "value": "7d0a69b61b590c4615ab9096e2e4f48478a68312",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399233",
        "to_ids": true,
        "type": "sha1",
        "uuid": "6ef9d65b-3956-4117-85f8-62e171180392",
        "value": "7ee57e51d157c9aabe1afc59855e90401fd0e2a7",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399234",
        "to_ids": true,
        "type": "sha1",
        "uuid": "264db606-7e4e-4c7a-882c-5e2bdfc8de24",
        "value": "7fe51338c41c875bf7bb7d96dfa6e8443314a9b7",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399234",
        "to_ids": true,
        "type": "sha1",
        "uuid": "29e28b8e-9f09-4ac3-a997-c58a973873f8",
        "value": "83021cfead0849a738ea557588647be634039b01",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399235",
        "to_ids": true,
        "type": "sha1",
        "uuid": "0c2a2497-25b0-44eb-a058-5c342351f6cd",
        "value": "834cbb4671d038261c609f2de3312025f773bd4d",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399235",
        "to_ids": true,
        "type": "sha1",
        "uuid": "3526d44e-f241-45af-ac9d-a5409f1f251c",
        "value": "8435d36e2e410a003b6d5568b192c0e153f06ea9",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399237",
        "to_ids": true,
        "type": "sha1",
        "uuid": "f2516b3b-2e48-4dd9-b6b6-5a96d76ca978",
        "value": "86c55cc76b918dec25dcb0db4746a3cc58ca8f5a",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399237",
        "to_ids": true,
        "type": "sha1",
        "uuid": "b702e9d5-08bf-4a18-8734-5db8df0c678d",
        "value": "86dc6c1cc0c33086d5749883a17bed24e9fa0010",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399238",
        "to_ids": true,
        "type": "sha1",
        "uuid": "e737e2e6-b994-4766-8502-3f03abcbb066",
        "value": "86f1839df0be17d4d156f69df16eaf5944a29da4",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399239",
        "to_ids": true,
        "type": "sha1",
        "uuid": "24165dfb-3d78-4876-9d7e-0010b90c301a",
        "value": "89b41008256e7684ba798e0edb27619e7c35c4d7",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399240",
        "to_ids": true,
        "type": "sha1",
        "uuid": "a2872b8c-5668-403b-b250-c545a7324f3e",
        "value": "8a6c7cbff4f66b61862c66c6c1394dc550c54f95",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399240",
        "to_ids": true,
        "type": "sha1",
        "uuid": "4bb0565a-1c59-4223-af7b-afeae767ce08",
        "value": "8baaf0694234a06cce73ccc0910f63dd513329e4",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399242",
        "to_ids": true,
        "type": "sha1",
        "uuid": "52d0ae12-2032-40ff-b55c-e090c0bf4d8e",
        "value": "8ff23154805c304a9863cffc61b1453ddf9ee721",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399243",
        "to_ids": true,
        "type": "sha1",
        "uuid": "601b16c1-87f6-4bfd-8a51-6d1041ecf8aa",
        "value": "901c3a0b449322c030d8a6efc6c1332036a414c9",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399243",
        "to_ids": true,
        "type": "sha1",
        "uuid": "dcf3d0df-b69e-45da-9564-6fb789b53524",
        "value": "915131dccbc1234c6560952385185f07de1b3929",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399244",
        "to_ids": true,
        "type": "sha1",
        "uuid": "ae0bc373-4cfa-4568-9324-ad70fff18584",
        "value": "96080e0159c455e3de443526b880a774e9cabbb2",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399245",
        "to_ids": true,
        "type": "sha1",
        "uuid": "8ad784de-4ee4-47fb-a84b-b18e762617e1",
        "value": "9622181de887925f692bf51ba69bc6b6694ecc6f",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399245",
        "to_ids": true,
        "type": "sha1",
        "uuid": "6f05b4c4-6000-46f5-83f7-6854dfcf7196",
        "value": "96447faded23c699025d03406063ac2f425a1bc2",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399246",
        "to_ids": true,
        "type": "sha1",
        "uuid": "9fa86132-49f9-409e-9489-ab498009ab70",
        "value": "9b9ec71e1aae94a29487e9936985f71ce18010f9",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399248",
        "to_ids": true,
        "type": "sha1",
        "uuid": "95be1d2b-0340-433f-b20a-2c547ab9fa91",
        "value": "a574ae8b6904cc1c9cafb26e1ccf5e87e6261ad6",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399248",
        "to_ids": true,
        "type": "sha1",
        "uuid": "c7912b0d-d822-456a-b7b4-638bce71f214",
        "value": "a8dfbdb54252af72d8c3898656d49f542bbf4407",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399249",
        "to_ids": true,
        "type": "sha1",
        "uuid": "c9daad41-8508-46c6-9653-c6bdb016e93c",
        "value": "a9c1d537ae937580a51293008d78dd507355ee0c",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399250",
        "to_ids": true,
        "type": "sha1",
        "uuid": "7089d97d-d61b-4687-8915-65c34a93102e",
        "value": "ab827c68d4be6002385b9008fc89eef4e04c6912",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399250",
        "to_ids": true,
        "type": "sha1",
        "uuid": "2f0fda54-d1dc-498e-80fe-b15429f44620",
        "value": "b125f586dae2c664147c4499d7d5c3d43c2678c8",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399251",
        "to_ids": true,
        "type": "sha1",
        "uuid": "44d491a5-dafb-4423-bf89-8c8142e327bf",
        "value": "b1d6b677917221673dc7e419c535600c129931fb",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399252",
        "to_ids": true,
        "type": "sha1",
        "uuid": "8aef2603-0b1d-4e0c-9247-f386311c8211",
        "value": "b21a4affb019afd4eb05bcb5428798ea623bb75c",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399252",
        "to_ids": true,
        "type": "sha1",
        "uuid": "ac3e6a26-b469-4eab-a2bb-cb8c383936ee",
        "value": "b384f23953f4f621e3e9bd1d742edd6ddf9cf4c1",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399254",
        "to_ids": true,
        "type": "sha1",
        "uuid": "ed1e6a01-6604-4b3a-95fb-4dfa590ef642",
        "value": "b55921f502ec6839b08545a582a4291eaf3d902c",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399255",
        "to_ids": true,
        "type": "sha1",
        "uuid": "d404564d-1964-4bae-b75a-5e9a78130806",
        "value": "b5d8bb1d4a14c85b9996f05b602c36ef2c508a3b",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399256",
        "to_ids": true,
        "type": "sha1",
        "uuid": "863749aa-621a-4a12-84bc-fc7837a4c1f7",
        "value": "b5f43299a66f6f8c8200bbde1b690a1ab8a5ef75",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399257",
        "to_ids": true,
        "type": "sha1",
        "uuid": "dfebad0b-f088-490d-9aa4-6c70fb8a785a",
        "value": "bdf9b400e2935947c30fc1e5b79352129969dbf7",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399257",
        "to_ids": true,
        "type": "sha1",
        "uuid": "2c40a1a8-a48b-466f-877d-cf494938ac84",
        "value": "be2d5cf002a3e0d3414081c5c6b1840962ab9a10",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399259",
        "to_ids": true,
        "type": "sha1",
        "uuid": "4b18115e-aace-4ab8-807f-fbdc95700344",
        "value": "be756aaaf4135c7ec500d14c45a284cb6e8765c9",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399259",
        "to_ids": true,
        "type": "sha1",
        "uuid": "de01c185-9b79-4c6e-9e30-78bc30469182",
        "value": "c118c35a8a5a1160ca1cb1b16a7f62da5c32b8c8",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399260",
        "to_ids": true,
        "type": "sha1",
        "uuid": "81bdadb9-a010-4bd1-9acb-de41b0f2a298",
        "value": "c2f1f955059e30313f0738e98845d039ca3d7937",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399261",
        "to_ids": true,
        "type": "sha1",
        "uuid": "f0d99260-1fc7-4fdc-ad46-7e9ca766b273",
        "value": "c379c40dedb6a54437786572284c249031690249",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399262",
        "to_ids": true,
        "type": "sha1",
        "uuid": "03c9af0b-a8f4-480b-a1f6-ab58bef24d21",
        "value": "c3c225bd5e5d0d53bdc403f8da183c63e7a16b7e",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399263",
        "to_ids": true,
        "type": "sha1",
        "uuid": "b156f8c3-99ed-426b-b82f-b0fcb39ee496",
        "value": "c7141b43dd62c712cc625cd5e9f27ea6fd34955d",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399263",
        "to_ids": true,
        "type": "sha1",
        "uuid": "21bf90a4-8e44-4973-a3fe-d703a6899e31",
        "value": "ca29de9683e093e2930bf1b3138b9fbace8862e5",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399264",
        "to_ids": true,
        "type": "sha1",
        "uuid": "b0e0c254-d160-4467-a246-1c0a32cd54ff",
        "value": "ca9196dd69b93c07126654024c19da991302ed71",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399265",
        "to_ids": true,
        "type": "sha1",
        "uuid": "36d4b92b-0ab5-444d-92e6-20cd7af86fbd",
        "value": "cd4884dc181a011c75405940172a994b7923daba",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399266",
        "to_ids": true,
        "type": "sha1",
        "uuid": "780576bc-59e8-4e4e-9148-94306493180a",
        "value": "ce41fc66abc67957cbe8828b439f31c1f1227b35",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399266",
        "to_ids": true,
        "type": "sha1",
        "uuid": "9ed12fcc-8de4-4cf5-9e0f-4206cc8300d5",
        "value": "cffcb81564f598b9cb55bb8430399497ea366da1",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399267",
        "to_ids": true,
        "type": "sha1",
        "uuid": "6412b102-4a84-41e8-9a5b-7ce3ab110431",
        "value": "d15ea1735d6b057884faaa90afa46c8ee0be5927",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399268",
        "to_ids": true,
        "type": "sha1",
        "uuid": "9fd6ea9e-29ce-4fb6-82c4-fad501a35d73",
        "value": "d1ad29b721ee4ed29ce2bf7ffe0be84d32d57924",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399269",
        "to_ids": true,
        "type": "sha1",
        "uuid": "9b7dc899-5ce0-43c9-be4e-4b7dcbca880e",
        "value": "d228a43e5b158532b5ffd2f526b34b2ee6024de8",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399270",
        "to_ids": true,
        "type": "sha1",
        "uuid": "af0aae96-74be-42f0-8095-09ef88751a9e",
        "value": "d9648b415ddb8f45fad1f129a64960f49aa6e42b",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399271",
        "to_ids": true,
        "type": "sha1",
        "uuid": "4194d2c7-c7ae-431b-97f1-24c6173236f3",
        "value": "dac7f0061abde4d0e517d044d3360d4e6dde2418",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399271",
        "to_ids": true,
        "type": "sha1",
        "uuid": "33866f36-2976-44a1-a64b-4685c464cb1e",
        "value": "e00defa7cbdd9d79ccb6e33caa9f9b0c704a0dbd",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399272",
        "to_ids": true,
        "type": "sha1",
        "uuid": "4365c784-9157-46b8-918d-c8e2507230a2",
        "value": "e131392b3897ef6ccfb54770fd2e47811681610a",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399273",
        "to_ids": true,
        "type": "sha1",
        "uuid": "daba4b68-66fc-4d68-a3cf-414364dfa2a1",
        "value": "e1cb6f690371fa76f3d062a80054e18d6b02461e",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399274",
        "to_ids": true,
        "type": "sha1",
        "uuid": "a54c20a2-c7d2-48c9-ba7b-3bbe7ed02a29",
        "value": "e44b02e1bcad6493a925181cb5ccc9f3a64ebc31",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399274",
        "to_ids": true,
        "type": "sha1",
        "uuid": "34ab279d-97db-4537-b38d-dac0645d4d50",
        "value": "e4551317d305111fa15081ddbbf5ab6aa744d84c",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399275",
        "to_ids": true,
        "type": "sha1",
        "uuid": "9903f1d0-6e46-4eb0-8cc3-43ec2b9ccb02",
        "value": "e58a77ecfaa1e0a481581ec6831874d655976203",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399276",
        "to_ids": true,
        "type": "sha1",
        "uuid": "b870c2c4-6432-404b-8ed8-7bff7f9bc902",
        "value": "e9740a495371fae13f997786089ab941cd5633dd",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399277",
        "to_ids": true,
        "type": "sha1",
        "uuid": "4f1622a1-8255-4263-b513-6704235ae21b",
        "value": "ea0b470b55f57dd8d2359894ad9143093a46e3e4",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399277",
        "to_ids": true,
        "type": "sha1",
        "uuid": "74d4b9a7-14a2-4e25-9884-a871581e6f7d",
        "value": "ec7a06d3184c5c0265cf2e9c2f2a7d3eaa91fffe",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399278",
        "to_ids": true,
        "type": "sha1",
        "uuid": "a919e48e-a566-4513-aa5f-ca5c888d4487",
        "value": "ed4e8c98a71e9763d23d0275f17ad2712c327944",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399279",
        "to_ids": true,
        "type": "sha1",
        "uuid": "8b794a47-c311-4509-b292-a7d08203ad87",
        "value": "f0e406f821ffccb0eb56d7c6a9b62267eb9c21f6",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399279",
        "to_ids": true,
        "type": "sha1",
        "uuid": "e325d889-c3a3-4472-b544-cd60e94a0449",
        "value": "f1668ee99e6f7a5a7aa4577c9298f8efb154653e",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399280",
        "to_ids": true,
        "type": "sha1",
        "uuid": "62cef45c-39bf-4dd5-80c7-df2fb8b596e2",
        "value": "f1bb514e2ef6bc4a1d11637cb92c08161520183f",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399280",
        "to_ids": true,
        "type": "sha1",
        "uuid": "f2223023-76dd-4a2c-84fb-d90760178a51",
        "value": "f33dc1bfbece7ada203e00477ca029baaaa6f61d",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399282",
        "to_ids": true,
        "type": "sha1",
        "uuid": "734f827d-5e96-422d-8b5f-8c556f9e2bad",
        "value": "f40725fc376828fa099414166a097f179e6cb62b",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399282",
        "to_ids": true,
        "type": "sha1",
        "uuid": "957b7a71-f6a9-49d1-aa6d-4a63c9676122",
        "value": "ff388fd9a3e85af541949f2087bf09e276a3d75f",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399283",
        "to_ids": true,
        "type": "sha1",
        "uuid": "3984ae2d-914e-4e61-a56d-1940c0bb30dd",
        "value": "ff683cdbbcdfbd18f4d8f99e62c202add282e216",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399284",
        "to_ids": true,
        "type": "sha256",
        "uuid": "bb130078-382f-4ab9-9897-517194c0f073",
        "value": "22ff67a2e57ec1f1373143e220b28215b026a0748c19b83b4d54ca9a6c4d3a58",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399285",
        "to_ids": true,
        "type": "sha256",
        "uuid": "94fc155c-09d6-4849-8763-c01c3ad86d34",
        "value": "26a19684f04cbb8a844c8d7dfa4ac65b0c3567438ddcf117e239ad859afa569f",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399286",
        "to_ids": true,
        "type": "sha256",
        "uuid": "a05025fe-3826-4b33-a254-8e06ebc6a20a",
        "value": "326ebad30ea740784bcb98c1cf92bddf1d805ba50a04813bcc295cae2faa5d45",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399287",
        "to_ids": true,
        "type": "sha256",
        "uuid": "cd9ff1a8-8b95-4fec-a180-4342079f1b21",
        "value": "3b8219d0fd71bd2fdfda433da6cce13efd420e7d94cd440d7048c072893ce471",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399287",
        "to_ids": true,
        "type": "sha256",
        "uuid": "93eb3784-88f0-4727-a992-b4c2b686d0f0",
        "value": "46c1c4b2d348b59d681a3b7c65bc2e2bfa27c0b23c703156e013e251e53aa4ab",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399288",
        "to_ids": true,
        "type": "sha256",
        "uuid": "9dfa55f8-8a74-4a23-a25f-c27620aca3fa",
        "value": "5d5a1fa2052dce1908510936ffa6a522300a9702aa779d488db0213a9668bb5a",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399289",
        "to_ids": true,
        "type": "sha256",
        "uuid": "05c9c887-94f2-445b-9a4d-8336fa32ac34",
        "value": "816fe99ee818eaadd09d0cbe868dc11e9fca6124ffaf712ad0a44c8789ada3a2",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399290",
        "to_ids": true,
        "type": "sha256",
        "uuid": "14321b40-99cd-477f-9ac0-9c62bc9235d4",
        "value": "8204a9ce7b69379d86f946914d46a905634b69a2c80385b002f9353e642b9832",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399291",
        "to_ids": true,
        "type": "sha256",
        "uuid": "81174be9-8eae-4214-a288-6fb2b0e40f98",
        "value": "8f97ec17e9c0682997cb0bb3c7f243305ee61d08a8531b71d1fce41ceb508017",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399292",
        "to_ids": true,
        "type": "sha256",
        "uuid": "5b95e9a1-211a-4ac0-8e65-81ae5d686806",
        "value": "9ead546dc6d6490d8e73cccdd7b2a58b1864840224f572f6bbee57897cd9d585",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399293",
        "to_ids": true,
        "type": "sha256",
        "uuid": "297eea7a-8551-4838-869a-399c3e249433",
        "value": "a7f21fd455ef7efa8589132451566294149de93f717a84da07992f4d93191cd1",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399294",
        "to_ids": true,
        "type": "sha256",
        "uuid": "1a26a5e2-2c51-48ec-9119-9e3a6f24dc8e",
        "value": "c6849ec54dfd51df596ee9099dc2f628f2f0bd4821e4d7ea7b22dd2c3d898fa4",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399295",
        "to_ids": true,
        "type": "sha256",
        "uuid": "9b98c4b7-fdc7-4d45-a1c5-757ece89b62a",
        "value": "cfa311221d2e2b22a6d60ec71ec69b7f8ba044aee43da0763be02529ffe99f1d",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399295",
        "to_ids": true,
        "type": "sha256",
        "uuid": "163586ff-601b-49ee-b1b4-2cf0c0a19e44",
        "value": "d75fd0feac1d15b92bb76353fffdbb5658e80b730b3eadc204aebd5495cec0bc",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:17/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399296",
        "to_ids": true,
        "type": "sha256",
        "uuid": "c908b689-9f64-48a3-ad9d-951002839bf1",
        "value": "dd734aa1369e4b47e6eeae8ed4690b9097a5769493a52447adf22fce3562ec07",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399343",
        "to_ids": true,
        "type": "domain",
        "uuid": "0153b771-34b3-4df6-9dcc-b2603ae6c240",
        "value": "aurevian.cloud",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399364",
        "to_ids": true,
        "type": "domain",
        "uuid": "a7163d67-b571-4a28-852d-c707ea00a1d9",
        "value": "codepool.cloud",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399385",
        "to_ids": true,
        "type": "domain",
        "uuid": "5650ab31-3f62-43b2-a79c-4ff8dd01f43b",
        "value": "veltrixcapital.ai",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776399406",
        "to_ids": true,
        "type": "hostname",
        "uuid": "b53b281d-e300-4eb7-b5f1-bf242cf111fd",
        "value": "www.veltrixcap.org",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776350840",
        "to_ids": true,
        "type": "filename",
        "uuid": "1ae80e21-e2fa-4096-98d3-90889929579e",
        "value": "3.5.1rc0.dev0"
      }
    ],
    "Object": [
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776399428",
        "uuid": "b4a35b2f-154c-446f-b5bb-e09469667fc1",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776399428",
            "to_ids": true,
            "type": "md5",
            "uuid": "2a500b4c-6ee9-485e-8dc3-63e804a3b5f8",
            "value": "0ad0f487a9423dc77949d3a235b96a1d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399102",
            "to_ids": true,
            "type": "sha1",
            "uuid": "6ce14b5a-0f97-4a98-9e43-c8fd97fcf7fe",
            "value": "26ab088510f0e3fad1280d2d4d6934268a7dd4d1",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399102",
            "to_ids": true,
            "type": "sha256",
            "uuid": "86e58494-74f5-4d8d-a507-d2d06082cfb5",
            "value": "4397cb928902b7901419e10699600914bb050d3b526d53259343ab4c5a854fde",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776393134",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "e9e10ac1-957b-4496-8246-4759588739b3",
            "value": "3072:uOljJ6Osdb1Nbz3OM/wKWe1bXCNCM5RN96bVp0NyL0:uOyb1Jf/qehyNCMbN9jyL0"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776393134",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "e1ab926d-abaa-49ef-90ca-dbee16d54474",
            "value": "145089"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776393134",
            "to_ids": true,
            "type": "vhash",
            "uuid": "d51a8e30-9794-4c1a-85f0-d5e56602f37b",
            "value": "595642a6fe3b98c513e2fd3e0021c4ab"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776393134",
            "to_ids": true,
            "type": "filename",
            "uuid": "2df6ef41-7b8b-41cc-8341-b03b3c8f3a9f",
            "value": "bigmathutils-0.0.3.tar.gz"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776393134",
            "to_ids": false,
            "type": "text",
            "uuid": "491776ef-3e95-4407-844a-e65e39c0c764",
            "value": "Type Description: GZIP\nMicrosoft: None\nVT Total Detection:1/63\nFirst Submission:2026-02-12T15:41:21.000000+00:00\nLast Submission:2026-02-12T15:41:21.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776399449",
        "uuid": "d7a917be-6ca3-4f36-802c-191b780ed100",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776399449",
            "to_ids": true,
            "type": "md5",
            "uuid": "493b2a1e-3d25-4210-a863-b3da3d453968",
            "value": "0f2d18e58c6160f347cda6707ae81f30",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399103",
            "to_ids": true,
            "type": "sha1",
            "uuid": "84fc77aa-00b5-4df5-a598-acf4e72c341c",
            "value": "dbb4031e9bb8f8821a5758a6c308932b88599f18",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399103",
            "to_ids": true,
            "type": "sha256",
            "uuid": "9b1a09ad-1301-461c-808a-b95f66271d78",
            "value": "2aaf4c62372fb1c84178d258576561d35d2a437341905db0c7c7a3d75219333f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776393177",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "3d277912-902b-4793-917b-7d4f6c30393d",
            "value": "384:FrLo+Dx06DREwZCt1/I0Cv7RNuFgjl0jupuNkM7X4yP4lY3:Fv3DRXZCtpI0U7bLjl0jupuNkGX404q3"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776393177",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "788868f5-839e-4ce8-8f2c-064696490363",
            "value": "19766"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776393177",
            "to_ids": true,
            "type": "vhash",
            "uuid": "dfb95f7b-5540-46c1-bba9-53a0a48b3bc0",
            "value": "06f828d28726ab79387e63b9ef151781"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776393177",
            "to_ids": false,
            "type": "text",
            "uuid": "9bd3be43-e9b1-42f6-927c-630fc8e5ec02",
            "value": "Type Description: VBA\nMicrosoft: Trojan:Script/Wacatac.B!ml\nVT Total Detection:28/62\nFirst Submission:2026-02-04T10:34:18.000000+00:00\nLast Submission:2026-02-04T10:34:18.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776399470",
        "uuid": "8f19434b-dc09-41d3-b995-f235aba2f8c0",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776399470",
            "to_ids": true,
            "type": "md5",
            "uuid": "326d5cf1-f051-4c61-a092-7a4d814638ee",
            "value": "204882fd8d184e268ce810a548db4284",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399104",
            "to_ids": true,
            "type": "sha1",
            "uuid": "68f986c3-a611-42e5-a697-1d034c3eb242",
            "value": "b32c00c384160bbc18b8dde2299005639a48c18d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399105",
            "to_ids": true,
            "type": "sha256",
            "uuid": "c882bd01-3d52-4942-9993-1c7a5dd20464",
            "value": "7c35107a0d46c7dc9ab2f6c0fb057ef55935c84ec911fbdb2b2ae894242792b4",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776393199",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "7d7b5452-0ad3-410d-8815-536cba8580a4",
            "value": "49152:CzTVnTgf1eUYYGZdq2NZK2TvurI1mXdYjo:2hnTgdem5EX0nX2k"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776393199",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "e42cfb10-0566-4ff1-a93f-9a8a6944c85b",
            "value": "2049631"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776393199",
            "to_ids": true,
            "type": "vhash",
            "uuid": "4bf9d8e5-d007-4ffe-b288-e9c6e24c64a8",
            "value": "8917e539e7b5bd82b44e178d04fa3dbf"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776393199",
            "to_ids": true,
            "type": "filename",
            "uuid": "9883893e-e102-4356-a3a4-cb5111e52da7",
            "value": "graphdict-3.4.0-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776393199",
            "to_ids": false,
            "type": "text",
            "uuid": "a41e26af-e241-4940-879b-ebc537dc1d46",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:0/67\nFirst Submission:2025-07-01T13:15:26.000000+00:00\nLast Submission:2025-07-01T13:45:25.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776399491",
        "uuid": "18c1f2ef-ea05-405b-ae50-fa9ffdffe3ff",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776399491",
            "to_ids": true,
            "type": "md5",
            "uuid": "44e135ec-8484-44de-bab6-699c16b9db3e",
            "value": "2a1290d839245d8ab7fab54b3374511c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399106",
            "to_ids": true,
            "type": "sha1",
            "uuid": "0bcb6eef-2e81-4fd3-8509-3f5cdfbf6040",
            "value": "b31f2162e886683b65b017e1d1a841bd4f10cc11",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399106",
            "to_ids": true,
            "type": "sha256",
            "uuid": "5fcc5433-1ed3-4dcc-b5a8-48fb95e79791",
            "value": "ad16226be25146b99e5756152a10fb7e0433e96daa704e893f510392b9e69a0b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776393222",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "7502976c-3495-48bd-bf5f-3991801abbb5",
            "value": "49152:7mmqmdQ+3p4Jqqr5DvGempm2OG4nBTznfQbR4bwxUVHt:7mmqoQcVqt7GemMYcnf0RwVN"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776393222",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "381e814a-97ef-4ecd-9e6c-9e52708337fc",
            "value": "1936754"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776393222",
            "to_ids": true,
            "type": "vhash",
            "uuid": "2448a0f8-2673-4188-a215-08065708f383",
            "value": "14d671228dcf37eef99559f6ac37cc56"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776393222",
            "to_ids": true,
            "type": "filename",
            "uuid": "1ea9a582-74fd-49a1-a00e-48e958cf2433",
            "value": "graphflux-3.4.2-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776393222",
            "to_ids": false,
            "type": "text",
            "uuid": "baaa15a0-e243-4a49-af98-7a0567d69438",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:0/67\nFirst Submission:2025-10-27T01:30:21.000000+00:00\nLast Submission:2025-10-27T01:30:21.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776399512",
        "uuid": "92b95d8c-48ba-4a10-9435-29b8256c21df",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776399512",
            "to_ids": true,
            "type": "md5",
            "uuid": "a977f000-2b56-437a-b460-935ee546af67",
            "value": "2bbe5b60e04891a8a8856a81b2b1cf6e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399107",
            "to_ids": true,
            "type": "sha1",
            "uuid": "3b6b798f-6a2e-479f-af36-a0fc9b569071",
            "value": "a8df8cb07bac3c2f6434a21beb58e45f73ab66b2",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399107",
            "to_ids": true,
            "type": "sha256",
            "uuid": "57d14d97-c6ba-44c3-82a3-f792174f5b54",
            "value": "772f2c0d4211d89133723208232c3d9c556915b7019b2c941be0dda0c3284106",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776393244",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "51768c09-f2d4-4f34-8e2e-1c1c740ac1fb",
            "value": "49152:prwzNJ8f7A/7RqcXvlqAM/8kH52maG4YgYa0Y3xvvL+:piNOfkoAMoDYgY83ty"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776393244",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "86f2caa2-70e3-46a9-b737-13a00334d02c",
            "value": "2062317"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776393244",
            "to_ids": true,
            "type": "vhash",
            "uuid": "55ff7cf4-0d62-45be-a891-d3eeffc8cfd4",
            "value": "8917e539e7b5bd82b44e178d04fa3dbf"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776393244",
            "to_ids": true,
            "type": "filename",
            "uuid": "bfa2b418-5523-4f87-992d-8ca8341a1650",
            "value": "graphalgo-3.5.2-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776393244",
            "to_ids": false,
            "type": "text",
            "uuid": "c385de1b-e3b3-4714-b36d-7f20fa59d722",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:9/67\nFirst Submission:2025-06-13T01:30:18.000000+00:00\nLast Submission:2025-06-13T01:30:18.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776399533",
        "uuid": "aed84665-0b85-49fb-af43-23e55a74db24",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776399533",
            "to_ids": true,
            "type": "md5",
            "uuid": "09fe9637-2702-417f-9a68-97b969c0beda",
            "value": "2caffeb59591261120ba43c8df937cd6",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399108",
            "to_ids": true,
            "type": "sha1",
            "uuid": "96048db0-1e3a-40cd-b6a5-2d92c7d09120",
            "value": "61fcf59a6650f7a2a273cc0457a8ce6786f83ea2",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399108",
            "to_ids": true,
            "type": "sha256",
            "uuid": "a6827f29-511e-4a6b-b157-4a48f87ab3ef",
            "value": "6246271d188d49a368b92152e47bcce6536c91b341c7b118930b4802045e80aa",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776393265",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "92bd7a3c-7d2d-4864-ad59-1c5d7a480275",
            "value": "3072:fxHY097WEESpGOaSohFyopNo+QKnAT3rJs6cEpc+KBXj2ARK9aCntK:rp5MOaP7QKd6bG+wXj2AkPnk"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776393265",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "7fdece43-811c-434e-bef3-db824f5ec878",
            "value": "143835"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776393265",
            "to_ids": true,
            "type": "vhash",
            "uuid": "2e55cdbc-e5f6-4f2c-937a-719833238302",
            "value": "471a917bf1a2d271cfcb222ed3581b15"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776393265",
            "to_ids": true,
            "type": "filename",
            "uuid": "f80fa2f2-5b8d-42e3-8f1c-e0b3333caf4c",
            "value": "bigmathex-0.0.3-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776393265",
            "to_ids": false,
            "type": "text",
            "uuid": "41bfca83-f599-499c-a045-7231f70a1c8e",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:2/67\nFirst Submission:2026-01-08T08:30:26.000000+00:00\nLast Submission:2026-01-08T08:30:26.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776399555",
        "uuid": "e388db38-1784-4358-8cf1-1e237d91ff64",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776399555",
            "to_ids": true,
            "type": "md5",
            "uuid": "03d46098-eee0-4f6f-b6d6-4889db0a12db",
            "value": "3492aead8bbc9184d69f25bb04eed5ca",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399109",
            "to_ids": true,
            "type": "sha1",
            "uuid": "9c61afa7-1116-43b3-b397-4ca0259497f9",
            "value": "928b2144dc1d485338fc748ab280a5deee9dcf21",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399109",
            "to_ids": true,
            "type": "sha256",
            "uuid": "0fabd8ea-1b81-45d6-a923-fe28638bdb9c",
            "value": "ab3b2547439a152a15bb8e804f30f8a9650b2105594cc0542d1dbe04e55fd1ba",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776393287",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "026cdbc7-9739-4a0a-8558-b57c1ffcacaa",
            "value": "192:m9Ph0KlJ0zvzRmdr9n19TKW2Zwvr8wNvNCW7dMNDkQdcXgcfanzVgSJV0bc:mD0KlJ0DzRe9nDMZwvrpvNCLkFgcfanB"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776393287",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "4fd26316-496f-4e18-9f6e-ee7f9e46195e",
            "value": "10131"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776393287",
            "to_ids": true,
            "type": "vhash",
            "uuid": "f7231262-b057-47af-82aa-143d45638180",
            "value": "088719a2f16f83ec1c8917a59eabcdc4"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776393287",
            "to_ids": true,
            "type": "filename",
            "uuid": "f02869d3-4328-47f0-bf9c-ff7b9d3722df",
            "value": "bignum-0.1.1-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776393287",
            "to_ids": false,
            "type": "text",
            "uuid": "1320d553-9e76-4325-a76e-1f4c2a536515",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:1/67\nFirst Submission:2025-12-09T16:00:37.000000+00:00\nLast Submission:2025-12-09T16:00:37.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776399584",
        "uuid": "4a325858-c520-402f-beca-721f673aed5d",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776399584",
            "to_ids": true,
            "type": "md5",
            "uuid": "74a88e32-3f1f-4a94-af51-1fac0e4daf74",
            "value": "40cd39ac67133aba9aa6c17b8a0982bd",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399110",
            "to_ids": true,
            "type": "sha1",
            "uuid": "edee9d66-3cff-4483-8d34-67500bc84c7f",
            "value": "1988d1afd33f98d9a0a87c082fde2c59083f3759",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399110",
            "to_ids": true,
            "type": "sha256",
            "uuid": "476f4fa0-de47-442b-a383-c67e265e1304",
            "value": "aed890b9d24ba01e1a79c9c08c1e32219c52a23f74116be5a6776d156b1684f1",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776393330",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "2e79395c-fa36-4df3-be03-5c5bed0d6872",
            "value": "49152:v3nWRQyT7DHTmTLLB3lZNyxjiJj2SqJ2DYHeHp/SUX5O:vmRQyzm39lDejiJKSqu5HX0"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776393330",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "10e51bec-8732-4283-9308-536600259deb",
            "value": "2064652"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776393330",
            "to_ids": true,
            "type": "vhash",
            "uuid": "26c8032b-8870-4bf4-aa57-270f8b225978",
            "value": "a9e612962f936d128e1898dda44b86c9"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776393330",
            "to_ids": true,
            "type": "filename",
            "uuid": "f67111fa-4902-45d4-a0d3-2c12da02357f",
            "value": "graphsync-1.1.1-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776393330",
            "to_ids": false,
            "type": "text",
            "uuid": "5209c063-d177-48ed-99b1-bd81cf1d3f5e",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:1/67\nFirst Submission:2025-12-09T07:45:46.000000+00:00\nLast Submission:2025-12-09T07:45:46.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776399606",
        "uuid": "3548a187-2174-444c-8d1f-59a244139f89",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776399606",
            "to_ids": true,
            "type": "md5",
            "uuid": "34d495a6-e43e-4142-8bb6-7c4c473a89d7",
            "value": "47d06b0a7287a50a364cd02cfc55b05a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399111",
            "to_ids": true,
            "type": "sha1",
            "uuid": "5b5b90ef-359f-4f60-8c0a-020bfafb07ac",
            "value": "3fbea692a0c549dc711e9ad2aa016fad6fea68e5",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399111",
            "to_ids": true,
            "type": "sha256",
            "uuid": "99189959-b823-4d99-9b74-31c2a6c42870",
            "value": "25beb2535ea96e1d7d0b25b4b4e17034459ce1bfb8b916597f723d9308f0d36b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776393352",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "93bce503-39bd-4f92-8e80-0a245acc95ae",
            "value": "49152:FrwzNJ8f7A/7RqcXvlqAM/8kH52maG4YgYa0K3xvJV:FiNOfkoAMoDYgYW3tv"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776393352",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "56e85b21-bc60-48ef-b6f9-a6a8992eecf1",
            "value": "2064252"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776393352",
            "to_ids": true,
            "type": "vhash",
            "uuid": "857a121d-460c-408b-a2b0-9d1f04d9eb44",
            "value": "8917e539e7b5bd82b44e178d04fa3dbf"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776393352",
            "to_ids": true,
            "type": "filename",
            "uuid": "5db95846-e8cf-4df2-95b4-e2f178a810b0",
            "value": "graphalgo-3.5.5-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  15/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776393352",
            "to_ids": false,
            "type": "text",
            "uuid": "29e8852f-a016-477a-bb62-289b57c8acbe",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:9/67\nFirst Submission:2025-06-13T07:16:22.000000+00:00\nLast Submission:2025-06-13T07:16:22.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776399627",
        "uuid": "40c29aa7-026e-4e1a-b222-8f166950c95e",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776399627",
            "to_ids": true,
            "type": "md5",
            "uuid": "10baa1ef-c92e-48b8-8801-bc40b6e71722",
            "value": "4c67895ef5215dde218f102aac423cd7",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399112",
            "to_ids": true,
            "type": "sha1",
            "uuid": "e43a9899-ca07-4637-8eb7-084e10ce5202",
            "value": "efefa0438f2a01121fb6fab0b04978f6631ed87f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399112",
            "to_ids": true,
            "type": "sha256",
            "uuid": "c8858d8e-9967-40b9-af9b-f55b6945c22e",
            "value": "1900e9c856146cfa37a06f495f5e56c89c6f87c0ed64661f2e0f66d05d068527",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776393374",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "2a263088-3ff1-49da-931c-e60b0548769a",
            "value": "49152:KoWAYcV2ZrEkJtPM/qgKE4LRGdKTFY/RLFJIK0ieg:KJAYG2z1gKrVGuYJEFVg"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776393374",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "2c340cc4-77de-4618-8e80-4bd0e241bb83",
            "value": "1825972"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776393374",
            "to_ids": true,
            "type": "vhash",
            "uuid": "e9f04074-0b1d-477d-b1fc-34dd13f7913f",
            "value": "776a8b8284e4626e16a3beb31e583f1c"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776393374",
            "to_ids": true,
            "type": "filename",
            "uuid": "e8be7834-da2f-428c-8c74-2f5228943486",
            "value": "graphdict-3.4.10.tar.gz"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776393374",
            "to_ids": false,
            "type": "text",
            "uuid": "8b84e6fe-bdaf-4fa5-b0c7-121da8c8f69c",
            "value": "Type Description: GZIP\nMicrosoft: None\nVT Total Detection:0/63\nFirst Submission:2026-02-11T21:11:13.000000+00:00\nLast Submission:2026-02-11T21:11:13.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776399648",
        "uuid": "41846f22-5d7a-49a2-9e27-36099473e885",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776399648",
            "to_ids": true,
            "type": "md5",
            "uuid": "efb0d1f1-3307-440a-b208-bbc5cd8a40bb",
            "value": "4cc1e104a41aaafe84a867258ef43caf",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399114",
            "to_ids": true,
            "type": "sha1",
            "uuid": "031aa6d1-9f5c-4652-99c3-71534bad66f8",
            "value": "ef332b55ed0083373097bd0862b487f384d88d17",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399114",
            "to_ids": true,
            "type": "sha256",
            "uuid": "2fe8b635-b0cb-423c-a8e1-18192bdb8fee",
            "value": "f13235d8ee47b663920d0e662424e98df1afe95d24f499aee7ebd67de92b671a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776393396",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "ea8782fd-9720-49c1-9d28-8f10d9829a54",
            "value": "49152:u3nWRQyT7DHTmTLLB3lZNyxjiJj23qJ2DYPeH9fKUOi:umRQyzm39lDejiJK3quBHrh"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776393396",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "1e27d276-4f42-4113-8e1a-e1f0d6eccb07",
            "value": "2064637"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776393396",
            "to_ids": true,
            "type": "vhash",
            "uuid": "5ce1ffcd-dd04-49b9-ae66-8e5e68dc7a5e",
            "value": "a9e612962f936d128e1898dda44b86c9"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776393396",
            "to_ids": true,
            "type": "filename",
            "uuid": "ba7689e4-9431-473a-a8bb-7bd48a77778e",
            "value": "graphsync-1.1.0-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776393396",
            "to_ids": false,
            "type": "text",
            "uuid": "2129d33b-8f6b-4092-b407-b739001f7c81",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:0/69\nFirst Submission:2025-12-09T07:30:20.000000+00:00\nLast Submission:2025-12-09T07:30:20.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776399669",
        "uuid": "d0715065-fcd1-41e0-89f5-f41980907a75",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776399669",
            "to_ids": true,
            "type": "md5",
            "uuid": "61a9f677-fec7-4772-bf32-46d4f3d487fd",
            "value": "4f5901e1b281d5d7a11c6d3643e80a42",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399114",
            "to_ids": true,
            "type": "sha1",
            "uuid": "dda9f499-d6ee-4448-82cf-b19d896738a6",
            "value": "a64961f4d1394cad5f2a3c0ccdb7d46f9bc6142c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399115",
            "to_ids": true,
            "type": "sha256",
            "uuid": "21c3c8ad-1f78-4e8d-a889-730b3c5e70df",
            "value": "b9a3c5acff45448350ed12b658583ae89cdf2226b0735cd639c25c6da0422fe5",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776393418",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "63918679-5f16-4799-884d-04ffd1dbf009",
            "value": "49152:pIAbX42csxnvFpqVe7FaEn0voF2sc67TzneZbR4blhUWH5:aAbX4lssV1EnsoF2WjnehRPWZ"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776393418",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "3c99c595-a5b0-4e4f-ab24-ef433228c20d",
            "value": "2079782"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776393418",
            "to_ids": true,
            "type": "vhash",
            "uuid": "df503ba3-d69a-4727-a7d9-ff84bd9cfa9d",
            "value": "a9e612962f936d128e1898dda44b86c9"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776393418",
            "to_ids": true,
            "type": "filename",
            "uuid": "f66f9709-9e5d-4c26-b7ab-3e92452d1cc8",
            "value": "graphdict-3.4.13-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776393418",
            "to_ids": false,
            "type": "text",
            "uuid": "be57df04-6713-4f5c-8539-25cb370ee7c0",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:5/67\nFirst Submission:2025-07-08T13:00:15.000000+00:00\nLast Submission:2025-07-08T13:17:20.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776399690",
        "uuid": "24d2c21d-f9df-4a84-9795-15f64c643510",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776399690",
            "to_ids": true,
            "type": "md5",
            "uuid": "8e74d31f-ca50-4e6e-8d86-99988ed5bd0b",
            "value": "52181b75362bc2a2ff611ef9d02c397f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399116",
            "to_ids": true,
            "type": "sha1",
            "uuid": "005d0b92-32e3-4469-9cad-8a3aea600292",
            "value": "4342a8d6fcb01534d7b9fc653535772effab03b7",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399116",
            "to_ids": true,
            "type": "sha256",
            "uuid": "b837b5d7-4818-43b0-aa0b-fa4591fc6fa9",
            "value": "e99317cf71eeca72edc48aaf502690a56f7700f4ddfa960620a6e70aa0dc5414",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776393440",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "3e2018b7-3779-45fe-90e6-31b670206d9f",
            "value": "49152:6mmqmdQ+3p4Jqqr5DvGempm2OG4nZTznnI7R4bohUV8:6mmqoQcVqt7GemMYknnsRoS"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776393440",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "fdd18a7d-5e0f-4a01-aac2-f6965d9a51d7",
            "value": "1936768"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776393440",
            "to_ids": true,
            "type": "vhash",
            "uuid": "e8867975-adb8-4411-8173-e2d995fe45da",
            "value": "14d671228dcf37eef99559f6ac37cc56"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776393440",
            "to_ids": true,
            "type": "filename",
            "uuid": "4d8f2d5f-b19a-4466-b54c-5559bf2d9294",
            "value": "graphflux-3.4.1-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776393440",
            "to_ids": false,
            "type": "text",
            "uuid": "b1cc4f85-c797-42aa-85e8-9f8c9ba66832",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:0/67\nFirst Submission:2025-10-27T01:30:18.000000+00:00\nLast Submission:2025-10-27T01:30:18.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776399711",
        "uuid": "69fe647f-15cb-46c0-84c9-eb33ab23d823",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776399711",
            "to_ids": true,
            "type": "md5",
            "uuid": "b7786e63-0d3a-4542-b0dc-fa7b8db1502f",
            "value": "5d1fb7162cdb32eaca2f84f5aea8bcf8",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399117",
            "to_ids": true,
            "type": "sha1",
            "uuid": "0751db8b-79ad-49c2-bf95-4168ef7e827c",
            "value": "e5af589fcd2bfb7093dd10274161a3c0de42057f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399117",
            "to_ids": true,
            "type": "sha256",
            "uuid": "8f780b21-4750-4a6d-98e7-198ac6bd68eb",
            "value": "033bbdfb4d956483bb646cfe818d588eb6e0c5be038bb81bca0eb4b6a0d907cb",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776393483",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "7b4b5944-841c-4683-a85b-de5f1787fac6",
            "value": "384:g/5ycA7YqpPJPwNLQxCLZmFvJR81laXPipbWW0DLcPkXpxZpUtHzSXxbTljUhXPh:K5C7ZRJPUBLCvLDPipbWW03cP4xZpUtv"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776393483",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "a5a2fc5a-d5ab-4a75-8193-41d8349be10f",
            "value": "23561"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776393483",
            "to_ids": true,
            "type": "vhash",
            "uuid": "3f0282d8-0e1f-4bf7-aaf9-83ce6a13a28b",
            "value": "cb147bc8fd8fe06c1b0e650a56b47a2c"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776393483",
            "to_ids": false,
            "type": "text",
            "uuid": "1136618c-ebb6-4cc2-aec5-82f166d3c479",
            "value": "Type Description: JavaScript\nMicrosoft: None\nVT Total Detection:2/62\nFirst Submission:2026-01-18T14:08:36.000000+00:00\nLast Submission:2026-01-18T14:08:36.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776399733",
        "uuid": "4a906d2a-fd28-4287-824e-9b63d69a851b",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776399733",
            "to_ids": true,
            "type": "md5",
            "uuid": "84fc8112-bf05-4a67-a2f6-f871cfebba1a",
            "value": "6416c527afd6f4b51ef8c394bfd275de",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399118",
            "to_ids": true,
            "type": "sha1",
            "uuid": "bdca0e4e-6d38-42bf-9c17-d86dc2807e21",
            "value": "43fb82b3881dd0fef4b89e55cf6f0a43e1939ac5",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399118",
            "to_ids": true,
            "type": "sha256",
            "uuid": "8c2b4b6d-6831-44bc-9383-6057e33b4522",
            "value": "1dd42684a677a3d6b774b98574fb01cc5e2bc778ce2cebff1b8ee2aef0b7b08e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776393526",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "5bd62421-8302-4f8d-816c-09344cc6af20",
            "value": "3072:C35ZRQWDKsXpBE6Y5wZjISfQFIdwy0P/fGG0XvZDHzKCg:s5DD15TMyMOdqPeJNg"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776393526",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "015db40a-ccf2-4e56-9626-52e2445bb322",
            "value": "136935"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776393526",
            "to_ids": true,
            "type": "vhash",
            "uuid": "6e06587e-ac22-42a9-80b5-7551063021ae",
            "value": "754de2452b782a5cf4ffc59e118f212e"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776393526",
            "to_ids": true,
            "type": "filename",
            "uuid": "88ae3704-3763-412e-98dd-ae2edac802a5",
            "value": "bignum-0.1.3-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776393526",
            "to_ids": false,
            "type": "text",
            "uuid": "ad54dc02-2c86-4c9f-829b-bda6d155ddfc",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:1/67\nFirst Submission:2025-12-10T01:30:22.000000+00:00\nLast Submission:2025-12-10T01:47:47.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776399754",
        "uuid": "b16cf00f-3608-484c-8056-54f8818cbfec",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776399754",
            "to_ids": true,
            "type": "md5",
            "uuid": "f19a7267-6513-443a-9de1-2df6837e1b88",
            "value": "68033844eb2bdee6b3448c00b811f90d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399119",
            "to_ids": true,
            "type": "sha1",
            "uuid": "59831b1c-f4f5-4a9e-9d31-1af67d373302",
            "value": "8dd57b1364d3364cf17c5219a759a2f1787f666c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399119",
            "to_ids": true,
            "type": "sha256",
            "uuid": "87daccfb-24dc-49cc-8a89-cfd693ec0844",
            "value": "a5329a8f0d75e0b8874374f40fafe8a2e6a563e659af75157fa11aa0dde27fdd",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776393548",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "019e20f6-b429-46c3-96b2-09408831ecb1",
            "value": "49152:/TVnTgf1eUYYGZdq2NZK2TvurI1mXdYLm:/hnTgdem5EX0nX26"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776393548",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "ebb029cc-6ce9-4e56-984b-5a81f6e81234",
            "value": "2049610"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776393548",
            "to_ids": true,
            "type": "vhash",
            "uuid": "8cd44425-d28e-41d7-9b88-b0f839be6d7e",
            "value": "8917e539e7b5bd82b44e178d04fa3dbf"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776393548",
            "to_ids": true,
            "type": "filename",
            "uuid": "ca24cc52-6570-4990-a943-bf22c8249994",
            "value": "graphdict-3.4.6-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776393548",
            "to_ids": false,
            "type": "text",
            "uuid": "805361a3-1e75-4c2a-abfb-153bfca976e0",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:0/67\nFirst Submission:2025-07-02T01:15:59.000000+00:00\nLast Submission:2025-07-02T01:15:59.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776399775",
        "uuid": "a91f877b-69b9-4642-b677-85f44f762ef8",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776399775",
            "to_ids": true,
            "type": "md5",
            "uuid": "33273577-7e17-4d6e-a58a-1203708b9711",
            "value": "698d7d28e48d774130bf5546fac61f6e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#230087",
                "local": false,
                "name": "rectifyq:samples-found-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399121",
            "to_ids": true,
            "type": "sha1",
            "uuid": "47ef0193-2581-41f1-9728-f1dd700481e6",
            "value": "052c278f727292d779e9cf2465c9065a55b49546",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#230087",
                "local": false,
                "name": "rectifyq:samples-found-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399121",
            "to_ids": true,
            "type": "sha256",
            "uuid": "4dfbe220-7e11-42df-880b-5c2d2bec2f29",
            "value": "ed5a6734a9f33331c4fac8003e242b2e50c62136aa7fcd47e9925ee51415bbb3",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#230087",
                "local": false,
                "name": "rectifyq:samples-found-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776393570",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "de1c3cde-d1f9-4be5-a30f-dae98083974e",
            "value": "384:5JD3o4c17bfI1T/hEx4Zcif7ywJe8embWHOILYzlBlKbJo4iWj6nmR:P4ZJ7I1VKEJfPe8ecsLL4ljoAy"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776393570",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "496f7776-bc65-4ec5-9450-15a94d86f3d1",
            "value": "19381"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776393570",
            "to_ids": true,
            "type": "vhash",
            "uuid": "cd76c9b3-185b-4bdf-9b7c-8d2f21f81cb6",
            "value": "7596fdd04dba990373ab2f3da0c7dd3f"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776393570",
            "to_ids": true,
            "type": "filename",
            "uuid": "19f86b78-d626-4ec7-8181-143390baf394",
            "value": "index.py"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  17/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776393570",
            "to_ids": false,
            "type": "text",
            "uuid": "b57bc0be-09d7-4d33-91d0-9d9d6cea9ed9",
            "value": "Type Description: JavaScript\nMicrosoft: Trojan:Win32/Qwexlafiba!rfn\nVT Total Detection:22/63\nFirst Submission:2025-11-06T14:58:39.000000+00:00\nLast Submission:2025-11-06T15:00:07.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776399796",
        "uuid": "7b865651-7a04-4545-a57c-cbbf4324cb1a",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776399796",
            "to_ids": true,
            "type": "md5",
            "uuid": "8929458d-5324-4258-8fac-2fb453a98b62",
            "value": "6ad8f2f50f29efceb636352e8e7dbd1d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399122",
            "to_ids": true,
            "type": "sha1",
            "uuid": "215ba957-6bc4-4e4b-afa7-5006233e64f6",
            "value": "b899f364e788501bb4286ff379d5d155599fb35d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399122",
            "to_ids": true,
            "type": "sha256",
            "uuid": "98a9e54a-c910-4ca4-8b6d-4e172e9277c0",
            "value": "a6964101daf39eea2f422d54db46702b058367ce308637288d4eb69d270586a3",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776393592",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "b175527c-36ea-4334-9fcc-f57eda86e900",
            "value": "49152:9aJbBSgAfey23DvV25qJuOUBzYemqCaUHx:9a+gAWy23R8FZnJ0"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776393592",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "927ec238-7e4b-4152-939e-8eae6e18e666",
            "value": "2049963"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776393592",
            "to_ids": true,
            "type": "vhash",
            "uuid": "006c821a-f2d8-4acd-82c5-d2eabab4d5d7",
            "value": "8917e539e7b5bd82b44e178d04fa3dbf"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776393592",
            "to_ids": true,
            "type": "filename",
            "uuid": "9ebbd075-5911-4328-babe-bfd2eca13161",
            "value": "graphlibx-3.5.10-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776393592",
            "to_ids": false,
            "type": "text",
            "uuid": "f1ca18fc-f422-4427-95f4-b5ca9ade39b3",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:0/67\nFirst Submission:2025-06-18T07:30:31.000000+00:00\nLast Submission:2025-06-18T08:16:35.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776399817",
        "uuid": "826c6983-b71a-4194-88d7-2e45ff3de170",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776399817",
            "to_ids": true,
            "type": "md5",
            "uuid": "e927bbbf-d066-45f4-b12c-5acd4a81ceca",
            "value": "6f8ba278f9f3eb52e73fb34ce1f9e32f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399123",
            "to_ids": true,
            "type": "sha1",
            "uuid": "41de4381-8a75-4a1e-bd0a-1fbd03c3bade",
            "value": "06b9793ebe4805807f05b2f49a4b2f8161047f97",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399123",
            "to_ids": true,
            "type": "sha256",
            "uuid": "7baa13ba-396f-4978-a695-16f364fb2bcb",
            "value": "b3775f929995b3cf008a6ee4eaf85acb99205ff691bbfa0b8524b06c34ec4965",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776393614",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "715c9cf8-e6e4-4312-bb45-31303f4ee257",
            "value": "49152:B3P6S3RCJu5FOfdqEwSdPXef38rEt8jsXqSBo0:R6Ym8TXGPXe25j5uv"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776393614",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "3a8432b4-0bb0-4d3b-aa01-c91b7b86b893",
            "value": "2214015"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776393614",
            "to_ids": true,
            "type": "vhash",
            "uuid": "2dc42fef-d456-4093-b8d8-f183cab0b486",
            "value": "254fecb83f345515f17ccf64885865ae"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776393614",
            "to_ids": true,
            "type": "filename",
            "uuid": "23a2bfbb-89f1-469a-81ad-393143fa3061",
            "value": "graphex-3.5.10-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776393614",
            "to_ids": false,
            "type": "text",
            "uuid": "53efd3d4-b0e4-4b71-b2aa-55d2fc967c61",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:16/67\nFirst Submission:2025-06-17T03:30:37.000000+00:00\nLast Submission:2025-06-17T03:30:37.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776399838",
        "uuid": "ff24596c-37bb-4c58-8515-625ea45955e6",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776399838",
            "to_ids": true,
            "type": "md5",
            "uuid": "32d889c4-d024-4615-9e48-8734247725df",
            "value": "7d60cb0d8757402a539df5463cb0073c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399124",
            "to_ids": true,
            "type": "sha1",
            "uuid": "91ec3f37-3cf6-4541-99e7-3f559905eeb0",
            "value": "1beb37c7d100e5a8fede590a2aeb08cda237b3e2",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399124",
            "to_ids": true,
            "type": "sha256",
            "uuid": "d8795c93-6b2f-452b-bc94-a00ad78fb672",
            "value": "7c564113ad0057aef3a029ddc0dc6972630b3dc7df60266673c2a1eb863cbcb9",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776393636",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "8269c77f-b05c-409a-a2ac-acf50d6405fd",
            "value": "3072:b2xHY097WEESpGOaSohFyopNo+QKnAT3rJs6cEpc+KBXj2AVKPuWllOZ:bop5MOaP7QKd6bG+wXj2AoBPO"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776393636",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "302931a2-a599-4749-925f-d2832a970bf4",
            "value": "143843"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776393636",
            "to_ids": true,
            "type": "vhash",
            "uuid": "edef37e9-0fab-479e-bae7-eeb46957b4e5",
            "value": "471a917bf1a2d271cfcb222ed3581b15"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776393636",
            "to_ids": true,
            "type": "filename",
            "uuid": "3667e94a-ee62-4719-97bd-005f102f460f",
            "value": "bigmathix-1.0.1-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776393636",
            "to_ids": false,
            "type": "text",
            "uuid": "8e0fc5e5-ebf3-4891-8efb-ea373be4c154",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:2/67\nFirst Submission:2026-01-09T13:30:27.000000+00:00\nLast Submission:2026-01-09T13:30:27.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776399859",
        "uuid": "4566c305-a6b6-416a-a0ae-4d8430f8ea46",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776399859",
            "to_ids": true,
            "type": "md5",
            "uuid": "bfb83a9b-eca3-49ec-9bce-c3fea714c67f",
            "value": "7f862419c493c2c56105f7ee529452f4",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399125",
            "to_ids": true,
            "type": "sha1",
            "uuid": "7fc62e5f-5d5b-4d19-bcb5-70a4aac74c9e",
            "value": "c450613503334e4f21bd5ca374c86031ab3ff79b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399125",
            "to_ids": true,
            "type": "sha256",
            "uuid": "fe4590da-eb2e-4ad8-afc4-76dfb507948a",
            "value": "5947b4780961d4cd136f723225adb303c240bfd2581f151970abf6b7a9209bcb",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776393658",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "edecef82-5506-4f4f-97e3-41ffed55d642",
            "value": "3072:gmZRQWDKsXpBE6Y5wZjISfQFIdwy0P/fGG0XvZD53XI:TDD15TMyMOdqPeLXI"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776393658",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "93cbc84f-7270-4df0-9462-fe4b0ad374cf",
            "value": "139128"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776393658",
            "to_ids": true,
            "type": "vhash",
            "uuid": "14e6b777-55d5-4293-810b-b688a972e278",
            "value": "754de2452b782a5cf4ffc59e118f212e"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776393658",
            "to_ids": true,
            "type": "filename",
            "uuid": "fd62b4b2-8ecc-48e3-972e-97d9553612c1",
            "value": "bigpyx-0.0.1-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776393658",
            "to_ids": false,
            "type": "text",
            "uuid": "17b17233-d52b-494f-b06c-0892d86acfdc",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:1/67\nFirst Submission:2025-12-10T08:15:22.000000+00:00\nLast Submission:2025-12-10T08:15:22.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776399880",
        "uuid": "f15c6bb5-5ec4-4b7b-ad64-ef8552e6432f",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776399880",
            "to_ids": true,
            "type": "md5",
            "uuid": "b4cfff85-f7a5-4b94-8315-5100bb418cc2",
            "value": "84d2ac914467d8251ff228d6757c57a2",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399126",
            "to_ids": true,
            "type": "sha1",
            "uuid": "1cd9b31f-da74-4bce-ae29-95860e0ea8f5",
            "value": "d4e162311ad2adbc67045598bf0731473d44105b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399126",
            "to_ids": true,
            "type": "sha256",
            "uuid": "9d20b329-0703-41fe-8749-a822dbf20c58",
            "value": "a8e24bbb2e5fb2fd16e800d7cbf12bb961b4f25f921758a737cc0b36a61ea39c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776393680",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "46f4d355-4c9e-4539-8089-d24a3c286a17",
            "value": "3072:gmZRQWDKsXpBE6Y5wZjISfQFIdwy0P/fGG0XvZD53X9lE:TDD15TMyMOdqPeLX9lE"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776393680",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "699e0871-6595-4e1e-9bcd-75bc97066f8d",
            "value": "139135"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776393680",
            "to_ids": true,
            "type": "vhash",
            "uuid": "3d3c8169-4ea5-43ea-9d87-98225026209d",
            "value": "754de2452b782a5cf4ffc59e118f212e"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776393680",
            "to_ids": true,
            "type": "filename",
            "uuid": "2e0c0fb9-4e2e-4772-8537-7522d748cfb6",
            "value": "bigpyx-0.0.2-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776393680",
            "to_ids": false,
            "type": "text",
            "uuid": "724cbf7c-7bb9-46dd-8ec1-f3746eab8449",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:1/67\nFirst Submission:2025-12-10T08:30:33.000000+00:00\nLast Submission:2025-12-10T08:30:33.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776399902",
        "uuid": "6bb24413-7fc1-47a4-8c8d-a9a3ce1e691a",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776399902",
            "to_ids": true,
            "type": "md5",
            "uuid": "44dcb22c-a354-4b4c-99b9-3216041a145a",
            "value": "8bdff5d3d8822c6f47a2e6f33f1fb5cd",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399127",
            "to_ids": true,
            "type": "sha1",
            "uuid": "c2086629-6e5d-4d74-999d-53083ad42d3b",
            "value": "6dd72228c3f29ec28c030f739c2ffd822ea99388",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399127",
            "to_ids": true,
            "type": "sha256",
            "uuid": "e571344e-ced1-4769-84d0-34cdcaadfeb7",
            "value": "f924c27c6b5cf6ed06622196fb67d9af862b89762fdef6f0c007be63a0cf9735",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776393702",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "9dd3b544-77d9-4055-bf2f-a284d2b08699",
            "value": "49152:YIAheL2KANJOvFpqVekHaEzb1etYtOTzn6lzR4bxNUiu:zAheLlANjVIEzctYtqn6VRbn"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776393702",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "0ce0b515-e57a-42e7-8857-015d50d01ea7",
            "value": "1936268"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776393702",
            "to_ids": true,
            "type": "vhash",
            "uuid": "9b1f5399-e93d-478e-bbb9-b87b0320d3db",
            "value": "14d671228dcf37eef99559f6ac37cc56"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776393702",
            "to_ids": true,
            "type": "filename",
            "uuid": "6939c60c-bb47-4b0a-abe5-d4efded1e1d1",
            "value": "graphdict-3.4.8-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776393702",
            "to_ids": false,
            "type": "text",
            "uuid": "b7a9d783-4e14-4f94-9a40-f9ec3a9f53a3",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:0/67\nFirst Submission:2025-07-02T06:30:30.000000+00:00\nLast Submission:2025-07-02T06:30:30.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776399923",
        "uuid": "4d084d0f-a6df-470d-bb16-c6c13cbc63cb",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776399923",
            "to_ids": true,
            "type": "md5",
            "uuid": "43e74edc-d910-4d91-aa0a-cf9daef826bd",
            "value": "8e1a088109bff60b51c89956e310aa10",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399128",
            "to_ids": true,
            "type": "sha1",
            "uuid": "22665c01-85f6-4626-8361-8e8aaa5cdd22",
            "value": "2478ecadb46d4d18706c68b1a4a6a493d8eff51c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399128",
            "to_ids": true,
            "type": "sha256",
            "uuid": "0c4d59c2-d5ef-4310-b6e2-5d7d5bc9ce87",
            "value": "7b26300f9d024b5f7db7e6f97d563840a62101f614368116bfce5570c52fabd4",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776393724",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "ac11cdc2-88a5-4d68-a899-6a7b9863b366",
            "value": "49152:YIAbX42csxnvFpqVe7FaEn0voF2sr/xTznwDzR4bvFUHn:zAbX4lssV1EnsoF2g/pnw/R9H"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776393724",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "ebc0916d-8626-4aac-a490-9817a9b0a24a",
            "value": "2079881"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776393724",
            "to_ids": true,
            "type": "vhash",
            "uuid": "5cb12350-14bc-41d1-ab2f-ee9093ad280e",
            "value": "a9e612962f936d128e1898dda44b86c9"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776393724",
            "to_ids": true,
            "type": "filename",
            "uuid": "30f40313-0b6d-486d-bd10-5dd203837244",
            "value": "graphdict-3.4.14-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776393724",
            "to_ids": false,
            "type": "text",
            "uuid": "1d499b96-548f-4c44-9ff9-6c4e310ee253",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:5/67\nFirst Submission:2025-07-08T15:15:32.000000+00:00\nLast Submission:2025-07-08T15:32:47.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776399944",
        "uuid": "e2ba35c1-be42-4cf8-b0c1-c1e2f81be6f3",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776399944",
            "to_ids": true,
            "type": "md5",
            "uuid": "01655d41-173d-4b05-8fdd-dafe06d27db2",
            "value": "93fc111d82caa4881a1fc11a683f3343",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399129",
            "to_ids": true,
            "type": "sha1",
            "uuid": "8d4512e3-f440-4a73-8154-dcdc74044766",
            "value": "3c3ab1b60e37ec60fc620b14e8a16bd2f8b457b0",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399129",
            "to_ids": true,
            "type": "sha256",
            "uuid": "9bf1d343-d502-4ef2-966d-9c5dd1d18b8c",
            "value": "66c276bb880a35dd0b62da60e951770cdce4ca66f4bd5f06a0200fdbefab578b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776393745",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "dd815c94-0d84-47fd-b4d8-1c1897dce9ca",
            "value": "3072:RxHY097WEESpGOaSohFyopNo+QKnAT3rJs6cEpc+KBXj2AYKPtt2i:9p5MOaP7QKd6bG+wXj2Ajj9"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776393745",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "26caa89a-e968-49d1-8d6b-0afff9711b60",
            "value": "143919"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776393745",
            "to_ids": true,
            "type": "vhash",
            "uuid": "28bf022e-17ab-4422-a697-db07fc5de180",
            "value": "471a917bf1a2d271cfcb222ed3581b15"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776393745",
            "to_ids": true,
            "type": "filename",
            "uuid": "cebce890-4ce5-49b6-98fd-b1a6468dc15b",
            "value": "bigmathutils-0.0.2-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776393745",
            "to_ids": false,
            "type": "text",
            "uuid": "df192c21-bdda-4b14-bbe6-9d8c23b0e606",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:2/67\nFirst Submission:2026-01-19T02:00:21.000000+00:00\nLast Submission:2026-01-19T02:00:21.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776399965",
        "uuid": "fa8f5fba-2bca-4d12-9307-b4290fef4aea",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776399965",
            "to_ids": true,
            "type": "md5",
            "uuid": "0f2e61c8-a04e-4bcf-a688-1799a76d7cf7",
            "value": "99b9e8894726d0ed9e9302e952283492",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399130",
            "to_ids": true,
            "type": "sha1",
            "uuid": "a7bbf44c-3125-401d-90ee-35d4fa9131b6",
            "value": "d3ff122a9cf8e34d29dc2859ead08d3db62b5687",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399130",
            "to_ids": true,
            "type": "sha256",
            "uuid": "785a6ff4-5db4-493a-910c-97fa229ca21c",
            "value": "47d531e1af4220263a555681e2165aabc86ceaf3f4f2aeabd0d98e59b93d9975",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776393790",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "a57944dc-cf6a-4e73-82c3-db188697fee8",
            "value": "49152:maJbBSgAfey23DvV25qJuOU19zYemqCaXnH8:ma+gAWy23R8FvnJy"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776393790",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "e56e56bb-27dc-4ed0-9529-efca08179ee9",
            "value": "2065762"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776393790",
            "to_ids": true,
            "type": "vhash",
            "uuid": "a18425bf-5017-4d97-89fb-6e3b7ed16117",
            "value": "8917e539e7b5bd82b44e178d04fa3dbf"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776393790",
            "to_ids": true,
            "type": "filename",
            "uuid": "b03727ed-9061-428f-9f6e-5d9dce293e86",
            "value": "graphlibx-3.5.12-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776393790",
            "to_ids": false,
            "type": "text",
            "uuid": "89870dbd-f5bf-4efb-b7a8-e2441e016a4a",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:13/68\nFirst Submission:2025-06-21T02:45:41.000000+00:00\nLast Submission:2025-06-21T03:01:08.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776399986",
        "uuid": "e801d213-fe29-4917-82a8-c1d0002a5795",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776399986",
            "to_ids": true,
            "type": "md5",
            "uuid": "3f2ff4fa-eeb0-46df-bb44-7c0a92db011d",
            "value": "a3daa30632e1a06fe578f73c3e44b36f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399131",
            "to_ids": true,
            "type": "sha1",
            "uuid": "15be539f-64a2-4ae1-b0df-da3175128fc1",
            "value": "d5656ca2ab4a7c0d5f367c2d35a3e680c48d7c95",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399131",
            "to_ids": true,
            "type": "sha256",
            "uuid": "a6d53f88-c21e-46bc-a64a-561c6ab9675a",
            "value": "a6c24c9da20a7fe1aa1998c4c6b389365913aada5ce47eb6c824b213d8df9938",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776393832",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "8bda43dd-4a23-4982-a67f-021b8d50613b",
            "value": "192:m9Ph0KlJ0zShF8opFXdQkUdMNdQdcXgTxnzVgSJnVJQ2hd8:mD0KlJ0uh6G1+kBFgTxnGSNzf8"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776393832",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "a7879318-a0f7-46fb-8553-80da55dec48d",
            "value": "10094"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776393832",
            "to_ids": true,
            "type": "vhash",
            "uuid": "f4079ef0-c968-4930-a1d0-9295d3d74eca",
            "value": "088719a2f16f83ec1c8917a59eabcdc4"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776393832",
            "to_ids": true,
            "type": "filename",
            "uuid": "9330e82a-3757-4168-ac6f-d585baa993a6",
            "value": "bignum-0.1.0-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776393832",
            "to_ids": false,
            "type": "text",
            "uuid": "24dc049c-3d12-4f78-8b2a-e8a5e40f61ef",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:1/67\nFirst Submission:2025-12-09T15:45:21.000000+00:00\nLast Submission:2025-12-09T15:45:21.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776400007",
        "uuid": "1af353af-6275-4e5b-8494-d1eac264d029",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776400007",
            "to_ids": true,
            "type": "md5",
            "uuid": "4fb05bb0-f48f-4778-81f9-4916c565291d",
            "value": "a495e9f32fc499ed26fbbc904842bdfb",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399132",
            "to_ids": true,
            "type": "sha1",
            "uuid": "9868ecb1-ed17-4877-b6c3-230ddb25525e",
            "value": "a4c824afbb4584e4640d0f03fa9d2370f84cfe66",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399132",
            "to_ids": true,
            "type": "sha256",
            "uuid": "09afae5f-e6cc-4703-8faf-7ba0c8eb6efb",
            "value": "74e36af09934f8c2bbdc79cff31cec3eee27181f4c813eafe77500820479ed20",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776393854",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "6dbfdf6b-93e8-4551-8519-3fdade0cb01c",
            "value": "49152:4zb/AFixi1EEj3pDnFqAWDZe2FqJ2DYfeHh3SUvD:43/ciI2gZ6/FquxHXL"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776393854",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "deea243e-01c8-4543-9560-286f23a1f7fe",
            "value": "2069038"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776393854",
            "to_ids": true,
            "type": "vhash",
            "uuid": "fca695a3-149d-456e-96b2-b8dba8ab0ef6",
            "value": "a9e612962f936d128e1898dda44b86c9"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776393854",
            "to_ids": true,
            "type": "filename",
            "uuid": "be9f40de-c48f-4f46-a8f5-38d2fa359a77",
            "value": "graphnode-1.1.0-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  15/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776393854",
            "to_ids": false,
            "type": "text",
            "uuid": "86951065-0cef-4a72-aa90-73505df23e47",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:6/68\nFirst Submission:2025-12-08T10:30:38.000000+00:00\nLast Submission:2025-12-08T10:30:38.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776400028",
        "uuid": "12fa0683-3a51-476c-af85-bb3e8bf3894b",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776400028",
            "to_ids": true,
            "type": "md5",
            "uuid": "38bb88c3-9ae4-4576-9428-a61a07017e43",
            "value": "b061b17dd978a84335c072428323d71b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399132",
            "to_ids": true,
            "type": "sha1",
            "uuid": "569ef574-9f5a-4301-9140-a2c90bd677c3",
            "value": "1c3fdc5fe2ca46db9d27b4aa25e3a7684af5bfc0",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399133",
            "to_ids": true,
            "type": "sha256",
            "uuid": "c559dbbb-7948-4fa2-8bbd-c0f68dca2d48",
            "value": "871d46588884d540651277683da0a53ef13e1eaa4dc24457efbd32d06a9cc21b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776393918",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "126258fa-2847-42c1-b5ec-8be43efe3115",
            "value": "384:LOUyl+PTEZcCGVv7slGXMr0vu+EH5umg6rcD0zyU:CUylAucC+v7iEBIH5uwcD67"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776393918",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "cd218530-6dc5-4bbc-895f-482f2c80cc3c",
            "value": "15080"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776393918",
            "to_ids": true,
            "type": "vhash",
            "uuid": "5aaa3401-1ea2-4243-8f4d-cc0cafc41785",
            "value": "9319734e3b98f3841947db5f73eb02b0"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776393918",
            "to_ids": true,
            "type": "filename",
            "uuid": "1d4d4b9f-edf6-4ad1-9bb7-51f4fc7d00de",
            "value": "bigmathutils-1.0.0.tgz"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776393918",
            "to_ids": false,
            "type": "text",
            "uuid": "265bed58-ff1a-45a8-9cc5-db02790f6b51",
            "value": "Type Description: GZIP\nMicrosoft: None\nVT Total Detection:0/62\nFirst Submission:2026-02-12T15:35:18.000000+00:00\nLast Submission:2026-02-12T15:35:18.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776400049",
        "uuid": "44def089-9795-4aa4-8668-f4bcc62bf531",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776400049",
            "to_ids": true,
            "type": "md5",
            "uuid": "5179cd6d-f17d-4459-8081-5fd3dfbfa251",
            "value": "b307f67aa06d6678f84db33413f4d991",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399134",
            "to_ids": true,
            "type": "sha1",
            "uuid": "932d174f-cd68-4add-b67e-abdc001421f8",
            "value": "3337794382593be3a8f324621406df073b85a170",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399134",
            "to_ids": true,
            "type": "sha256",
            "uuid": "fdc4dfcc-2930-4a1a-9383-67de92c8885c",
            "value": "cca2f241010aed887cbaaaf7b55fc91a8bf186bf6a274d5391ae2dd3a22227b7",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776393940",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "27481727-b26e-4f9a-9f21-5425fffc5d8d",
            "value": "49152:K3P6S3RCJu5FOfdqEwSdPXef38rEt8jsXqSZ1:m6Ym8TXGPXe25j5U"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776393940",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "e8be43ed-acba-42cb-96e7-6fc1a646bb17",
            "value": "2213998"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776393940",
            "to_ids": true,
            "type": "vhash",
            "uuid": "d27c3cee-000b-43ed-8462-f0ccca63dc1b",
            "value": "254fecb83f345515f17ccf64885865ae"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776393940",
            "to_ids": true,
            "type": "filename",
            "uuid": "1778567f-2b73-4b3f-8d46-6fd5b1b8b6c5",
            "value": "graphex-3.5.9-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776393940",
            "to_ids": false,
            "type": "text",
            "uuid": "132f2570-5a92-494d-bb1c-52f9db755d18",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:16/67\nFirst Submission:2025-06-17T03:15:21.000000+00:00\nLast Submission:2025-06-17T03:15:21.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776400070",
        "uuid": "46249d79-a655-4760-a80a-c7215ec2cf31",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776400070",
            "to_ids": true,
            "type": "md5",
            "uuid": "bb4c833b-b9ae-4c00-b4da-7d869c50e678",
            "value": "b4fcc4610344f21e618486ada59be10d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399135",
            "to_ids": true,
            "type": "sha1",
            "uuid": "5a4b9e0f-bdcc-4647-be15-cd0f62f9c303",
            "value": "763907bf89983b36d2161153d91c7f313822bec8",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399135",
            "to_ids": true,
            "type": "sha256",
            "uuid": "bce16ea4-2587-4e90-94b6-cf82e53cb55b",
            "value": "75c4525ee759351598220392b7fbcd12c05bec31da7522106a107295d7d8ed40",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776393962",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "b93abd6c-83ec-4443-8216-480734c2a632",
            "value": "49152:73P6S3RCJu5FOfdqEwSdPXef38rEt8YEBSOeGs:T6Ym8TXGPXe255BPed"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776393962",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "d3a47cb2-b782-4392-85bf-b073aafea133",
            "value": "2086902"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776393962",
            "to_ids": true,
            "type": "vhash",
            "uuid": "051414ec-f5e2-45be-910e-f870bcfcfa16",
            "value": "8917e539e7b5bd82b44e178d04fa3dbf"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776393962",
            "to_ids": true,
            "type": "filename",
            "uuid": "9c666f29-3a12-48e5-9acf-5cb49e411b5e",
            "value": "graphex-3.5.7-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776393962",
            "to_ids": false,
            "type": "text",
            "uuid": "78e1f22c-c2f0-47e4-9720-1db60986f815",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:17/67\nFirst Submission:2025-06-16T10:15:31.000000+00:00\nLast Submission:2025-06-16T10:15:31.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776400092",
        "uuid": "5ef8e4a7-34cb-45ca-8351-9c985cf4dcaf",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776400092",
            "to_ids": true,
            "type": "md5",
            "uuid": "a3e8b80b-d9a1-43fb-96e5-bee62c1cdf4e",
            "value": "c171deea8132a77abf4c2f12dc2487c8",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399135",
            "to_ids": true,
            "type": "sha1",
            "uuid": "7a674cca-a01b-440e-8541-8a837857196d",
            "value": "29d7e8ec66426b7e63f83ce301092bd01944738b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399136",
            "to_ids": true,
            "type": "sha256",
            "uuid": "478631c0-c8db-4b8c-8704-60f2187e144b",
            "value": "d9be6b5d57e3be7783571390532e78034ab684737bfcd625bb8e25834e3618c0",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776394005",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "1742cab9-db3f-460d-a32f-7d50b8a95747",
            "value": "96:vWPclPsBIxWuP5QQTQJOIceFbl12tsJNkKabZqtb4BURhFjrjW0usyEXm4UHE33m:LlmIxlP5QQ8Jge5l1Q2kDqtbwwhFuOQb"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776394005",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "795fa06e-728f-4f01-a42a-d4da5a83cdd3",
            "value": "5604"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776394005",
            "to_ids": true,
            "type": "vhash",
            "uuid": "ff2b746c-4bc8-46cd-a17f-50e9e4407284",
            "value": "aa577f989eae9d822a70de9cb992dfb2"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776394005",
            "to_ids": true,
            "type": "filename",
            "uuid": "dbc9287e-fd8c-4f91-b0c6-b13401cb81a1",
            "value": "bigmathutils-0.0.1-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776394005",
            "to_ids": false,
            "type": "text",
            "uuid": "e1a1e3f2-11df-419d-9a17-f0cd2e0c5f1f",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:0/67\nFirst Submission:2026-01-08T12:15:28.000000+00:00\nLast Submission:2026-01-08T12:15:28.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776400113",
        "uuid": "8d8aa0cd-ce10-4c40-ab15-17b05c021586",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776400113",
            "to_ids": true,
            "type": "md5",
            "uuid": "0e37f4d9-3202-4525-b760-eac477a1e3ca",
            "value": "c5be9231768925ff6c0afddffbb1fbda",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399137",
            "to_ids": true,
            "type": "sha1",
            "uuid": "4f302e6f-b6b6-4eac-90f8-f3c256b54be7",
            "value": "cd332731273e93769cc28dde5a02814c027e1b77",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399137",
            "to_ids": true,
            "type": "sha256",
            "uuid": "fb4c9898-3529-4a56-8dca-2156968cb2c5",
            "value": "fae1e143af496092ed7bb3b45608b53cf249a87e479b414951835b41207192a9",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776394027",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "f7da1ed9-e34a-4ea5-a3ba-417c0aeae4b3",
            "value": "49152:BrwzNJ8f7A/7RqcXvlqAM/8kH52maG4YgYa0K3xvFFg:BiNOfkoAMoDYgYW3tI"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776394027",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "4525f257-917e-49ed-9ed8-05c91812ba89",
            "value": "2062242"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776394027",
            "to_ids": true,
            "type": "vhash",
            "uuid": "fdee1c15-9576-4a11-af48-821e56be3d18",
            "value": "8917e539e7b5bd82b44e178d04fa3dbf"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776394027",
            "to_ids": true,
            "type": "filename",
            "uuid": "8e163c27-937b-4654-bcbf-d2d7bc87208c",
            "value": "graphalgo-3.5.3-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  17/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776394027",
            "to_ids": false,
            "type": "text",
            "uuid": "f6b0809e-44f9-4700-be6b-ab10db054766",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:19/67\nFirst Submission:2025-06-13T02:30:32.000000+00:00\nLast Submission:2025-06-13T02:30:32.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776400134",
        "uuid": "ef17c2d4-cf57-46d1-94c4-ebcdce849999",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776400134",
            "to_ids": true,
            "type": "md5",
            "uuid": "ddf5db08-d06f-4fca-9934-a49b7a200481",
            "value": "c70aa2d6fa6779c95938d2ca49a13d5b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399138",
            "to_ids": true,
            "type": "sha1",
            "uuid": "30572d49-67ee-46a9-81ef-b67eaf86c47f",
            "value": "296461bd731f418b8df36f109c30de0bd4aed573",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399138",
            "to_ids": true,
            "type": "sha256",
            "uuid": "7256f26d-4480-44ef-84e6-c6d7c4206753",
            "value": "97e8dfe4001177e670c43a3ed428bacd61e0c4be483e6d1e7957fb34cbbf4de9",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776394049",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "163f6255-806f-4405-964c-4384e9d6d3eb",
            "value": "384:0zYUuT/4pnaedgt1KwM8FIljAzF/OwcaBUYXaTs3WQ5pgFAT:kY5u8Clj8iae8aTs1"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776394049",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "42e4f859-d612-4024-8fb7-06a3614c3f70",
            "value": "17888"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776394049",
            "to_ids": true,
            "type": "vhash",
            "uuid": "bbd6afa3-ac00-4ca3-9894-f1b5711fdded",
            "value": "18a308c2e4a8a50b48b3740cbbb795a0"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776394049",
            "to_ids": true,
            "type": "filename",
            "uuid": "b8d1b9ee-377d-45f9-bf69-41a51c4196bf",
            "value": "bigmathutils-1.1.0.tgz"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776394049",
            "to_ids": false,
            "type": "text",
            "uuid": "c0bebb5a-d340-4b5e-b104-4b9ee93daea0",
            "value": "Type Description: GZIP\nMicrosoft: None\nVT Total Detection:1/62\nFirst Submission:2026-02-12T15:29:37.000000+00:00\nLast Submission:2026-02-22T13:42:30.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776400155",
        "uuid": "ad7b6b95-72c7-4f1b-a19d-71ac0c170c83",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776400155",
            "to_ids": true,
            "type": "md5",
            "uuid": "b806ac2c-8c93-4f20-9a4c-230edb5df564",
            "value": "ca5d8e6a729219216bcc7e59e1e92e5d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399138",
            "to_ids": true,
            "type": "sha1",
            "uuid": "4ffd2cc9-e9fa-4fe4-80f6-1892aa09cbe6",
            "value": "99fa440b658412b5c2685c6df90cb0d3c4eb84a8",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399138",
            "to_ids": true,
            "type": "sha256",
            "uuid": "7e042bb1-c67e-4aea-9277-4ac4efff0914",
            "value": "92738bb89459515040ec02c5d568da3f72b4a3638bda5460cbe1979ae9dced99",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776394071",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "b18c6d5c-82c7-4840-bb2f-cdd073e8885f",
            "value": "49152:63P6S3RCJu5FOfdqEwSdPXef38rEt8jsXEBSmgv:26Ym8TXGPXe25jDBy"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776394071",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "16c39cad-3836-488b-bbb9-9ebd152720e6",
            "value": "2214283"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776394071",
            "to_ids": true,
            "type": "vhash",
            "uuid": "93bd3ba3-7d7e-4117-b093-23981809c9d3",
            "value": "254fecb83f345515f17ccf64885865ae"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776394071",
            "to_ids": true,
            "type": "filename",
            "uuid": "a2c36c6d-7794-4e6c-b1b7-2cdad59c73cb",
            "value": "graphex-3.5.8-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  15/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776394071",
            "to_ids": false,
            "type": "text",
            "uuid": "b3214e80-36be-4f93-91f0-cc2b2297b15f",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:18/67\nFirst Submission:2025-06-16T10:30:56.000000+00:00\nLast Submission:2025-06-16T10:30:56.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776400176",
        "uuid": "8b322a19-a275-4694-bea8-d733519460f1",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776400176",
            "to_ids": true,
            "type": "md5",
            "uuid": "c47f6088-79a0-45d8-bc96-84e7e21c51b5",
            "value": "cb22a6c8a756e066a8c08d77c6318f76",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399139",
            "to_ids": true,
            "type": "sha1",
            "uuid": "4ad84a29-bc8f-4f55-a790-a294b8e5c18f",
            "value": "6e31ceb63acb46902deb20009a8bb6142de882cf",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399139",
            "to_ids": true,
            "type": "sha256",
            "uuid": "484dd2a5-938c-4ada-b16e-a3a8173f9482",
            "value": "f9531c923870d9033961505a8f19b2de32034bf286df41212011e714adfde3c1",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776394093",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "d9d71201-ff0c-4a52-b310-99901a2be05a",
            "value": "49152:UzTVnTgf1eUYYGZdq2NZK2TvurI1mXdYqw:UhnTgdem5EX0nX2F"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776394093",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "42d08321-3b30-4175-aacc-77fc48ee474c",
            "value": "2049613"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776394093",
            "to_ids": true,
            "type": "vhash",
            "uuid": "921f499e-9c29-47b6-b2c2-3a8ba8a97995",
            "value": "8917e539e7b5bd82b44e178d04fa3dbf"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776394093",
            "to_ids": true,
            "type": "filename",
            "uuid": "8def42f1-120b-44ae-b0fc-24d17a98502f",
            "value": "graphdict-3.4.2-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776394093",
            "to_ids": false,
            "type": "text",
            "uuid": "a1d263e3-168c-4fd5-b658-bab59a513a21",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:0/67\nFirst Submission:2025-07-01T13:15:27.000000+00:00\nLast Submission:2025-07-01T13:45:25.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776400197",
        "uuid": "d4e2540a-15a1-4354-891d-35677d346eed",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776400197",
            "to_ids": true,
            "type": "md5",
            "uuid": "8b0b571c-cfe2-4bb8-9c11-58e2480a2792",
            "value": "cb2aadb965a0bb4cee387636e8b109d7",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399140",
            "to_ids": true,
            "type": "sha1",
            "uuid": "b86cce30-51a9-4bf1-82ad-83cf5063f997",
            "value": "75b4f29b7b797841dd1132611f248d826ae7bf56",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399140",
            "to_ids": true,
            "type": "sha256",
            "uuid": "c89883a4-3b01-412e-8876-6060e8f616e3",
            "value": "90e69a3604953b93a5febc5c22b48591abb1da9c7c58810b8f1b5af34f639d45",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776394115",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "18cc0a7c-1f46-4ada-b72b-fa327242598d",
            "value": "49152:2IAbX42csxnvFpqVe7FaEn0voFZ6tTznornR4bn5U09:pAbX4lssV1EnsoF8tno7RVe"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776394115",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "fe33a425-5527-43ad-9a7d-251429ab0a5e",
            "value": "1952400"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776394115",
            "to_ids": true,
            "type": "vhash",
            "uuid": "b7677e98-39f6-4e5e-b3f1-2b35b3d4b7e0",
            "value": "14d671228dcf37eef99559f6ac37cc56"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776394115",
            "to_ids": true,
            "type": "filename",
            "uuid": "6b6e3a23-4a18-4fb6-98d8-c0952c9382fc",
            "value": "graphdict-3.4.12-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776394115",
            "to_ids": false,
            "type": "text",
            "uuid": "36276b4b-81a6-4205-a333-cc61137655b7",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:6/67\nFirst Submission:2025-07-08T13:02:29.000000+00:00\nLast Submission:2025-07-08T13:02:29.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776400218",
        "uuid": "27396104-7160-4192-a5eb-7e0672714dd5",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776400218",
            "to_ids": true,
            "type": "md5",
            "uuid": "9b108f7b-6674-477e-aa1a-8c8355c9d412",
            "value": "d3821f15663056144bcc4e722bcaa8ae",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399141",
            "to_ids": true,
            "type": "sha1",
            "uuid": "0bf6d525-adab-4192-9098-d6d5fd37002a",
            "value": "b3a5f72296ec2bf18b29699544f4234d6113941c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399141",
            "to_ids": true,
            "type": "sha256",
            "uuid": "86488ecb-cc66-4fe5-b12a-71b2a16da6a7",
            "value": "2a03c2390ef2215c8a02104cc734439a48dbe0b6f4cbbe39a17a14824b2f7dfc",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776394158",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "1a868c02-9814-4668-ad48-ab6887c6c618",
            "value": "192:CCAntFRdNrszRmdr9n19TKW2Zwvr8wNvNCW7dMNLQdcXg2SLZpa0qriuqX0:CCAJwzRe9nDMZwvrpvNCjFg2SLZp74Th"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776394158",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "876fbb3a-62ec-4989-8672-6f71c71dd2b4",
            "value": "10252"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776394158",
            "to_ids": true,
            "type": "vhash",
            "uuid": "c1d0b569-87e7-4ed8-93d4-95310e16e961",
            "value": "088719a2f16f83ec1c8917a59eabcdc4"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776394158",
            "to_ids": true,
            "type": "filename",
            "uuid": "eaa60804-d12c-4b25-b122-2df28a368f1f",
            "value": "bignum-0.1.2-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776394158",
            "to_ids": false,
            "type": "text",
            "uuid": "654b7d86-c731-4c7d-9e2e-8f5636a89b3a",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:1/67\nFirst Submission:2025-12-10T01:00:20.000000+00:00\nLast Submission:2025-12-10T01:16:40.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776400239",
        "uuid": "6cde98c9-003f-4018-a4b1-985660266c43",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776400239",
            "to_ids": true,
            "type": "md5",
            "uuid": "503177ad-30a5-4dd4-bf51-e6c8dc9f84d8",
            "value": "e16f3d2f577004410e1ff3e258e9bbac",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399142",
            "to_ids": true,
            "type": "sha1",
            "uuid": "b34a1902-041a-4627-aa52-7dfeecb79837",
            "value": "a98c0377f80f04a3a7cf044d5abe515654520183",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399142",
            "to_ids": true,
            "type": "sha256",
            "uuid": "731de333-849c-48cf-961d-615a1d79150a",
            "value": "7c94d5a8d981bab7904a4e7c8b943c8dad8cbeab1ae1eebe1131460d459dcc20",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776394222",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "e9527162-4c6c-4871-b943-d046558e22ff",
            "value": "49152:Hob+SRaq77JMKBqnkS57YhV+hjoDg7IowajC:HobGqXmLnx7eVX0Iowh"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776394222",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "9314c443-e88f-4509-a560-84a3c8d232ee",
            "value": "2060796"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776394222",
            "to_ids": true,
            "type": "vhash",
            "uuid": "3900912f-3f10-45f1-83c3-34a5a85ff6c3",
            "value": "8917e539e7b5bd82b44e178d04fa3dbf"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776394222",
            "to_ids": true,
            "type": "filename",
            "uuid": "63205ec3-73cf-43c9-8134-872b508e5826",
            "value": "graphalgo-3.5.1rc0.dev0-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776394222",
            "to_ids": false,
            "type": "text",
            "uuid": "12f45d61-1faf-464a-af8b-4e93def7ed79",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:9/67\nFirst Submission:2025-06-13T00:45:23.000000+00:00\nLast Submission:2025-06-13T00:45:23.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776400261",
        "uuid": "f70bdba0-b055-4a43-a13b-d2680f6ccf93",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776400261",
            "to_ids": true,
            "type": "md5",
            "uuid": "2e32a553-ae78-4bf6-8e65-97fb9f86b24a",
            "value": "edc08a5e4378fc9079b619a06248999f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399143",
            "to_ids": true,
            "type": "sha1",
            "uuid": "e53aecda-cf9b-4ea0-a4fd-8a5de40e5024",
            "value": "6230fc3006ecda4899bb9621ef2cf95b78f54a0a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399143",
            "to_ids": true,
            "type": "sha256",
            "uuid": "9051a1ae-a388-42e3-93ad-7475c3f89474",
            "value": "a151703f4e4779af912df94e87727cc73b48e8b0e492ec8f7dd26ac0c33505c0",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776394265",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "7ea5bbcb-0021-49df-b28d-e3cd07e87f1d",
            "value": "49152:vQWmq0o6uw4OmcZ7DwYa5TWF197LW4fHYrEqf0NgC1hVhbiS5O5:IWGMNuBDDa5YnQrlqVhbF0"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776394265",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "1bb28352-76c0-43dd-beb5-f94e18f8850e",
            "value": "2500511"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776394265",
            "to_ids": true,
            "type": "vhash",
            "uuid": "56966e8c-3686-4a2f-8486-c3df9a5b1f7b",
            "value": "115241ec5ab47decffc7452818431e05"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776394265",
            "to_ids": true,
            "type": "filename",
            "uuid": "2d825f5a-c62a-43a5-8732-7271edd08848",
            "value": "graphalgo-3.5.1rc0.dev0.tar.gz"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776394265",
            "to_ids": false,
            "type": "text",
            "uuid": "df95d8d1-f92d-4adb-a81a-aa16ed423eb7",
            "value": "Type Description: GZIP\nMicrosoft: None\nVT Total Detection:16/63\nFirst Submission:2025-06-14T04:02:21.000000+00:00\nLast Submission:2025-06-14T04:02:21.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776400282",
        "uuid": "0bfb9d86-ee37-4a40-9262-3b4f4edd680c",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776400282",
            "to_ids": true,
            "type": "md5",
            "uuid": "cf9886fa-9649-4944-8188-131044e3e579",
            "value": "f6204afbb373adc75119f7190f2253bb",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399144",
            "to_ids": true,
            "type": "sha1",
            "uuid": "e8af39ba-52a5-4571-9a4f-950fb597c037",
            "value": "cf8a3a18a719512d833c33973c1862eda56aa2b8",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399144",
            "to_ids": true,
            "type": "sha256",
            "uuid": "02a5cc1f-a165-424b-913e-11f76a9151d1",
            "value": "ff35613bac1969bbe522377029593f0abe10ff917e1dd0dde9eb527645fe3b77",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776394308",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "afe5f37b-17bb-4ed6-b290-1b6e60e7db77",
            "value": "3072:+xHY097WEESpGOaSohFyopNo+QKnAT3rJs6cEpc+KBXj2ARKBE:Ap5MOaP7QKd6bG+wXj2AkBE"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776394308",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "bce3dfa4-59a9-42ca-ad6b-3104eee8e080",
            "value": "143772"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776394308",
            "to_ids": true,
            "type": "vhash",
            "uuid": "247e9137-dd8f-4c0d-8d9d-242a94831e2d",
            "value": "471a917bf1a2d271cfcb222ed3581b15"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776394308",
            "to_ids": true,
            "type": "filename",
            "uuid": "ed4e3f85-074a-4553-96da-e83fa11601bf",
            "value": "bigmathex-0.0.1-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776394308",
            "to_ids": false,
            "type": "text",
            "uuid": "e43089db-6ae8-40f5-943b-d886963e379b",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:1/67\nFirst Submission:2026-01-08T08:00:25.000000+00:00\nLast Submission:2026-01-08T08:00:25.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776400303",
        "uuid": "d4d395d8-30a1-4cc3-9fbc-4dcc94737c3f",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776400303",
            "to_ids": true,
            "type": "md5",
            "uuid": "cc57947e-c641-4cf2-8db1-33eec9da0382",
            "value": "f68cfe775147399cb2c026b381c9d21f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399146",
            "to_ids": true,
            "type": "sha1",
            "uuid": "3005dbaa-c9e1-4f4d-9046-cfbd543c138a",
            "value": "4afc0cf7b41b40f4bf228b49d3ad5638146b3743",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399146",
            "to_ids": true,
            "type": "sha256",
            "uuid": "ae61f3bb-6037-4360-8bbe-62cc106eca31",
            "value": "11e25fd4c20eb5d721165ce5fad4c15b2ca19f410987b991900357cdf43d19d4",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776394330",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "0c849584-64bc-4258-9906-f06cd3fa56fb",
            "value": "49152:LaJbBSgAfey23DvV25qJuOU19zYemqCaXBZR:La+gAWy23R8FvnJbr"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776394330",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "eda69bbb-fece-45da-ab5c-2b4b531e1383",
            "value": "2065759"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776394330",
            "to_ids": true,
            "type": "vhash",
            "uuid": "0a9b0155-ace9-4afe-a8f7-50c7c1eb9317",
            "value": "8917e539e7b5bd82b44e178d04fa3dbf"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776394330",
            "to_ids": true,
            "type": "filename",
            "uuid": "a909a36c-385b-471a-9bc9-ab4621db204f",
            "value": "graphlibx-3.5.11-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776394330",
            "to_ids": false,
            "type": "text",
            "uuid": "74afc542-3f4a-4124-a652-ed7e1ef0c6ad",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:14/67\nFirst Submission:2025-06-19T07:16:01.000000+00:00\nLast Submission:2025-06-19T07:32:02.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776400324",
        "uuid": "7186fbb0-5d93-483b-8718-affd7223a5c9",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776400324",
            "to_ids": true,
            "type": "md5",
            "uuid": "b2da60f9-d766-401e-9d74-9a8b1922c83e",
            "value": "f6a57b870ba2432183ced28dfbccc7b9",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399147",
            "to_ids": true,
            "type": "sha1",
            "uuid": "e88fcac1-8457-4a25-80b0-03e98a2bbeb2",
            "value": "bb4e1cea60199c26620715103f4019030fea3792",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399147",
            "to_ids": true,
            "type": "sha256",
            "uuid": "93f4be6a-3dec-4dbb-a62d-ebcc35634241",
            "value": "adacc1c15cb2f88a3cc60b027581d1cee1041f7c66993686d0f3ec03cfeed5b7",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776394352",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "def281dd-1013-43a1-8483-3b04ecca5411",
            "value": "49152:NIAbe42K0NJnvFpqVe7FaEymoFyxTznADjR4bfNUUveq:GAbe4l0NUV1EymoFypnAvRNUvl"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776394352",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "b2b632cf-ebd6-49d4-9292-816e2bc1006e",
            "value": "1936492"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776394352",
            "to_ids": true,
            "type": "vhash",
            "uuid": "291ceacc-5d76-4c71-8193-2204c5a92ee0",
            "value": "14d671228dcf37eef99559f6ac37cc56"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776394352",
            "to_ids": true,
            "type": "filename",
            "uuid": "32174d9f-efa8-46c4-a726-7e2e9d8b47c9",
            "value": "graphdict-3.4.10-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776394352",
            "to_ids": false,
            "type": "text",
            "uuid": "ca5c4101-37d4-40bd-ab18-e3bab53f80b5",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:0/67\nFirst Submission:2025-07-02T07:00:25.000000+00:00\nLast Submission:2025-07-02T07:17:03.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776400345",
        "uuid": "66d9bfca-5f09-4a35-8f2d-f0006b337b52",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776400345",
            "to_ids": true,
            "type": "md5",
            "uuid": "37775cad-55e2-4fd0-add9-c51a41816a6f",
            "value": "f6bcfb203a54ec47e5dafd648f39ef98",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399148",
            "to_ids": true,
            "type": "sha1",
            "uuid": "85c2483c-cb54-44dc-8ba9-6217e635454a",
            "value": "c25bebd17ed164dd39e0d47dd5228dff6c9c3ff9",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399148",
            "to_ids": true,
            "type": "sha256",
            "uuid": "9c52d238-bea5-4277-aa95-f7942d22bf48",
            "value": "fdbc46c59d99fbc7a34b4c326fc78fd586b39ff0d1d780a60d92425dc7ca1c89",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#260093",
                "local": false,
                "name": "rectifyq:ioc=\"no-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776394374",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "54c87800-783e-4cca-aff7-2a2d336d1834",
            "value": "49152:rIAbX42csxnvFpqVe7FaEy0voFOTTznKVPR4bJ9UfTJ:EAbX4lssV1EysoFObnKpRDfV"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776394374",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "d9e3331b-ce08-4d9d-99ad-b486294b8470",
            "value": "1936670"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776394374",
            "to_ids": true,
            "type": "vhash",
            "uuid": "03e56596-648f-460a-86df-81e6d60e43c0",
            "value": "14d671228dcf37eef99559f6ac37cc56"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776394374",
            "to_ids": true,
            "type": "filename",
            "uuid": "bfdb9fe4-c7ce-4cad-81a4-5aa86dde685e",
            "value": "graphdict-3.4.11-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776394374",
            "to_ids": false,
            "type": "text",
            "uuid": "2ecd41d3-113b-4012-9a6b-527e08f6ff8f",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:0/69\nFirst Submission:2025-07-02T07:15:28.000000+00:00\nLast Submission:2025-07-02T07:15:28.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776400366",
        "uuid": "aed39681-9009-4685-aa8a-e16ef5fba78f",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776400366",
            "to_ids": true,
            "type": "md5",
            "uuid": "9694472f-c234-4bab-b2db-0eb89980799d",
            "value": "f9ee9082dadb91f70ee4a615cca38fcc",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399149",
            "to_ids": true,
            "type": "sha1",
            "uuid": "20d892a1-a672-4579-80f4-9cf6508de02f",
            "value": "8e2ca8ce68cdcc15463a6a96c83da6e394492141",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399149",
            "to_ids": true,
            "type": "sha256",
            "uuid": "b7f58a10-579e-4462-8830-4194928ff567",
            "value": "a17b5d8e5ce013a82debc6eb8b5610a6d6e5f4f5421cabd3e63d988003574058",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776394396",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "9f34d1ce-4082-49a5-a766-27eadbbfd733",
            "value": "3072:jJxHY097WEESpGOaSohFyopNo+QKnAT3rJs6cEpc+KBXj2ARKBh:xp5MOaP7QKd6bG+wXj2AkBh"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776394396",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "d60cfc86-14ba-4d70-af77-6f0390a0dda8",
            "value": "143773"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776394396",
            "to_ids": true,
            "type": "vhash",
            "uuid": "67234de0-778d-4f5b-8db1-ccccb7b28da3",
            "value": "471a917bf1a2d271cfcb222ed3581b15"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776394396",
            "to_ids": true,
            "type": "filename",
            "uuid": "ded9a5ae-a4bf-49fd-9f8d-9c693efe8fff",
            "value": "bigmathex-0.0.2-py3-none-any.whl"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776394396",
            "to_ids": false,
            "type": "text",
            "uuid": "e672450f-5de1-4f78-ad52-0eae6931381e",
            "value": "Type Description: Python Wheel package\nMicrosoft: None\nVT Total Detection:1/67\nFirst Submission:2026-01-08T08:15:28.000000+00:00\nLast Submission:2026-01-08T08:15:28.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776400387",
        "uuid": "9164ccc1-aa97-4ba9-abc6-2f4fd2c0c039",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776400387",
            "to_ids": true,
            "type": "md5",
            "uuid": "87bd939d-8ed8-430e-ba54-1d27a00b1717",
            "value": "c795f0bfa81bc9fb20fad8f659bd4b78",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776399150",
            "to_ids": true,
            "type": "sha1",
            "uuid": "5da7602e-b1e4-47da-9135-92c2ef98306e",
            "value": "8b425247a84d9e506952e2c913393c9ecdab399f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776399150",
            "to_ids": true,
            "type": "sha256",
            "uuid": "f22f3b53-a23f-488c-97d6-5821d0a5375c",
            "value": "75769534a728b82843296a47932dadad12667992514726e2ccbedb42c2a14570",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#270095",
                "local": false,
                "name": "rectifyq:ioc=\"low-detection-by-any-vendor\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776396446",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "ce444d08-8be2-43bc-950c-0c92c7c65cab",
            "value": "768:b1opvFHpHTWO/Ym5GA8vSauxLMvjNpVvJzQj0bK7zQjRgs3HV5N81VVHg4kCK:b1GHTWO/vGAwSauxLAPpW7szHV5N81/m"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776396446",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "7c9effe6-1100-425d-8a24-6dc62aaa88ea",
            "value": "48492"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776396446",
            "to_ids": true,
            "type": "vhash",
            "uuid": "d2dd2a32-218e-4460-b23f-443cbb10ec82",
            "value": "e8cdfe2766b96c548fddc15e241d6174"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776396446",
            "to_ids": true,
            "type": "filename",
            "uuid": "0c4bee3c-7c34-483f-bd66-b9017755a2d2",
            "value": "graphalgo-2.2.10.tgz._8b425247a84d9e506952e2c913393c9ecdab399f"
          },
          {
            "category": "Other",
            "comment": "Checked: 17/04/2026\nLast-scan\t:  14/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776396446",
            "to_ids": false,
            "type": "text",
            "uuid": "8a66e564-06a6-4b8a-a867-f9a721e8726d",
            "value": "Type Description: GZIP\nMicrosoft: None\nVT Total Detection:1/62\nFirst Submission:2026-02-18T19:34:37.000000+00:00\nLast Submission:2026-02-18T19:34:37.000000+00:00"
          }
        ]
      }
    ]
  }
}