{
  "Event": {
    "analysis": "1",
    "date": "2026-04-07",
    "extends_uuid": "",
    "info": "[Threat Intel] Unmasking The 64-bit Variant of the Infamous Lumma Stealer",
    "protected": false,
    "publish_timestamp": "1776722152",
    "published": true,
    "threat_level_id": "3",
    "timestamp": "1776722132",
    "uuid": "d9d79c4d-b537-4f4b-a744-d421d6e8cb7d",
    "Orgc": {
      "name": "Rectifyq",
      "uuid": "cd9bd516-61fa-476b-980f-2f8de03992d4"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#004646",
        "local": false,
        "name": "type:OSINT",
        "relationship_type": ""
      },
      {
        "colour": "#b94b1d",
        "local": false,
        "name": "rectifyq:mitre-att&ck=\"none-from-src\"",
        "relationship_type": ""
      },
      {
        "colour": "#b94b1d",
        "local": false,
        "name": "rectifyq:mitre-att&ck=\"from-OTX\"",
        "relationship_type": ""
      },
      {
        "colour": "#43c8db",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Process Injection - T1055\"",
        "relationship_type": ""
      },
      {
        "colour": "#e08bb2",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Obfuscated Files or Information - T1027\"",
        "relationship_type": ""
      },
      {
        "colour": "#7d7034",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"System Information Discovery - T1082\"",
        "relationship_type": ""
      },
      {
        "colour": "#73cdf4",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Portable Executable Injection - T1055.002\"",
        "relationship_type": ""
      },
      {
        "colour": "#68f2ff",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Data from Local System - T1005\"",
        "relationship_type": ""
      },
      {
        "colour": "#2c1d2e",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"System Checks - T1497.001\"",
        "relationship_type": ""
      },
      {
        "colour": "#356c41",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Encrypted Channel - T1573\"",
        "relationship_type": ""
      },
      {
        "colour": "#9e0269",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Web Service - T1102\"",
        "relationship_type": ""
      },
      {
        "colour": "#f5a258",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Native API - T1106\"",
        "relationship_type": ""
      },
      {
        "colour": "#44e07f",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Token Impersonation/Theft - T1134.001\"",
        "relationship_type": ""
      },
      {
        "colour": "#8ed4a7",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Credentials from Web Browsers - T1555.003\"",
        "relationship_type": ""
      },
      {
        "colour": "#a9bb6d",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Credentials from Password Stores - T1555\"",
        "relationship_type": ""
      },
      {
        "colour": "#ed66f6",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Steal Web Session Cookie - T1539\"",
        "relationship_type": ""
      },
      {
        "colour": "#3c0f50",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Software Packing - T1027.002\"",
        "relationship_type": ""
      },
      {
        "colour": "#92e858",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Web Protocols - T1071.001\"",
        "relationship_type": ""
      },
      {
        "colour": "#1cbe6b",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Virtualization/Sandbox Evasion - T1497\"",
        "relationship_type": ""
      },
      {
        "colour": "#62e1b7",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Browser Session Hijacking - T1185\"",
        "relationship_type": ""
      },
      {
        "colour": "#a92e1c",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Deobfuscate/Decode Files or Information - T1140\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Hidden Window - T1564.003\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:malpedia=\"Lumma Stealer\"",
        "relationship_type": ""
      },
      {
        "colour": "#49a260",
        "local": false,
        "name": "rectifyq:category=\"threat\"",
        "relationship_type": ""
      },
      {
        "colour": "#110041",
        "local": false,
        "name": "rectifyq:sub-category=\"malware-analysis\"",
        "relationship_type": ""
      },
      {
        "colour": "#ffd12e",
        "local": false,
        "name": "rectifyq:target=\"broad-based\"",
        "relationship_type": ""
      },
      {
        "colour": "#55acee",
        "local": false,
        "name": "rectifyq:MY-relevancy=\"potentially-relevant\"",
        "relationship_type": ""
      },
      {
        "colour": "#626567",
        "local": false,
        "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
        "relationship_type": ""
      },
      {
        "colour": "#230087",
        "local": false,
        "name": "rectifyq:samples-found-in=\"Tria.ge\"",
        "relationship_type": ""
      },
      {
        "colour": "#3800d9",
        "local": false,
        "name": "rectifyq:action-taken=\"VT-comment\"",
        "relationship_type": ""
      },
      {
        "colour": "#3d00e9",
        "local": false,
        "name": "rectifyq:action-taken=\"telegram\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1775646017",
        "to_ids": false,
        "type": "link",
        "uuid": "ba288490-aa87-4f30-b89c-35e0428ad75d",
        "value": "https://www.gendigital.com/blog/insights/research/remus-64bit-variant-of-lumma-stealer",
        "Tag": [
          {
            "colour": "#6b003a",
            "local": true,
            "name": "workflow:todo=\"create-missing-misp-galaxy-cluster\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Other",
        "comment": "Description",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1775646017",
        "to_ids": false,
        "type": "text",
        "uuid": "ae1d19fd-df2c-4ab6-b04b-ba432d8a05ff",
        "value": "Gen Threat Labs has identified Remus, a new 64-bit infostealer attributed to the Lumma Stealer family, emerging after Lumma's takedown and the doxxing of its alleged core members. First campaigns date back to February 2026, with the malware switching from Steam/Telegram dead drop resolvers to EtherHiding and employing new anti-analysis checks. Remus shares multiple characteristics with Lumma including identical string obfuscation techniques, AntiVM checks, direct syscall/sysenter handling, indirect control flow obfuscation, and a unique Application-Bound Encryption bypass. The analysis details test builds labeled Tenzor from September 2025, representing a transitional step between Lumma and Remus. While maintaining Lumma's stealing arsenal for browser passwords, cookies, and cryptocurrency, Remus introduces blockchain-based C2 resolution via EtherHiding, additional anti-sandbox checks targeting analysis tool DLLs, and enhanced device fingerprinting capabilities."
      },
      {
        "category": "Other",
        "comment": "Summary",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1775646017",
        "to_ids": false,
        "type": "text",
        "uuid": "78909d7c-c7e2-4423-a38d-69880a719eaf",
        "value": "Name: Unmasking The 64-bit Variant of the Infamous Lumma Stealer\nAuthor: AlienVault\nAdversary: Lumma Stealer\nTags: [\"lumma stealer\", \"application-bound encryption bypass\", \"blockchain c2\", \"tenzor\", \"etherhiding\", \"infostealer\", \"64-bit variant\", \"remus\", \"aurastealer\", \"voidstealer\", \"rhadamanthys\"]\nTgtd countries: []\nMlwr families: [\"Tenzor\", \"Lumma Stealer\", \"Remus\", \"Rhadamanthys\", \"AuraStealer\", \"VoidStealer\"]\nAttack_ids: [\"T1055\", \"T1027\", \"T1082\", \"T1055.002\", \"T1005\", \"T1497.001\", \"T1573\", \"T1102\", \"T1106\", \"T1134.001\", \"T1555.003\", \"T1555\", \"T1539\", \"T1027.002\", \"T1071.001\", \"T1497\", \"T1185\", \"T1140\", \"T1564.003\"]\nIndustries: []"
      },
      {
        "category": "Attribution",
        "comment": "Adversary",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1775646017",
        "to_ids": false,
        "type": "threat-actor",
        "uuid": "ea5b9509-4619-4aff-83b4-5e6c492667a4",
        "value": "Lumma Stealer"
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018540",
        "to_ids": true,
        "type": "sha1",
        "uuid": "a2361bc3-30cb-4f1b-8524-e6b66fb3511f",
        "value": "488d058bcc8d02488901488b024889415b488d41",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018540",
        "to_ids": true,
        "type": "sha256",
        "uuid": "bad67931-1a03-45ea-94a1-c7c7adf87ed6",
        "value": "0580ebf601989457f0708799b431fd4d9f5e59d98838282d72936099aa6636da",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018541",
        "to_ids": true,
        "type": "sha256",
        "uuid": "6acddd15-18a0-442d-a911-5a2f4091f5ae",
        "value": "0683f353cf3e101f721f1658e2a554ff7888ff9f2c32e23ceb3d23876864a264",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018542",
        "to_ids": true,
        "type": "sha256",
        "uuid": "5fb933aa-741c-4774-9ee7-ba8d765863b6",
        "value": "25e74a76f2f3601abcb20fd743a7e3cf3befd5a3838c7501af5d87d293233809",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018543",
        "to_ids": true,
        "type": "sha256",
        "uuid": "9a14e668-7b43-47bb-8d66-126a6e8e51bd",
        "value": "4428c3ffe2532f162f31d7573bbc1cca2299195421da3d8e8a3e535e9fc42b08",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018544",
        "to_ids": true,
        "type": "sha256",
        "uuid": "c259312c-6581-44a6-94e4-a2c1fc0b3af8",
        "value": "484e3ab5d425a97819f01dcc330e005dc444c51625bfdcd7ea9a3954018d1fc9",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018545",
        "to_ids": true,
        "type": "sha256",
        "uuid": "52cc0d44-d0c6-4f5d-85fb-65737dab5c9b",
        "value": "8653d7158486aa10fc0078c3ca9318cd7ace05d4b3e6f3b1fb84ffb7a6a339ec",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018546",
        "to_ids": true,
        "type": "sha256",
        "uuid": "40dbbbf0-adaa-4801-b43c-15d8abe38631",
        "value": "8b6b238ffa6e411229c6754ba99f7b990c49edfb2c34068ce0ac5564824d71ad",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018547",
        "to_ids": true,
        "type": "sha256",
        "uuid": "20e685ee-47c9-4981-b314-09158bdc22ee",
        "value": "bc11d036fe59abb3915f736307c56d2fd43e8127e46c31f926eeda864f4d66dc",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018548",
        "to_ids": true,
        "type": "sha256",
        "uuid": "7588f367-c9e7-437e-8d66-3d3a7a7709d4",
        "value": "c3f7cea80dbafaa90a88b28a6dfb1227caaf5c2a29f0ce06bf663d6ed2cfc079",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018549",
        "to_ids": true,
        "type": "sha256",
        "uuid": "6d68aca2-7d8f-4891-a6f7-430ae54e83bd",
        "value": "dbf6facd28406361a6a81417b3ff5eb272ccc8dcc58a36bd5335a253ae4bf036",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776023880",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "4e498c72-b3ca-4311-b156-03129031e6e0",
        "value": "217.156.122.12",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776023901",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "f3a2024d-af58-42c8-b2d4-34122e86de0f",
        "value": "217.156.122.57",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776023924",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "097177ff-55c6-4649-9fea-d2aeebe7cc43",
        "value": "217.156.122.75",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776023945",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "2a539871-036d-4d0f-96fa-14be0d64a13c",
        "value": "45.151.106.110",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776023966",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "02d2e636-0c26-48fa-82a4-fd9b2082fd1d",
        "value": "80.97.160.155",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776023987",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "e2c7ef8c-4dd8-47b2-8816-1c774eab761d",
        "value": "86.107.168.103",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776720662",
        "to_ids": true,
        "type": "url",
        "uuid": "dc9dc040-dd97-4e23-bbb7-ded19d34e45c",
        "value": "http://adveryx.biz:6573/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776720684",
        "to_ids": true,
        "type": "url",
        "uuid": "b9bdc364-3ae7-494a-9c64-706ac9cd4d0f",
        "value": "http://backbou.biz:5902/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776720705",
        "to_ids": true,
        "type": "url",
        "uuid": "52dc1fbd-0917-4cca-996a-ce2bce7ea844",
        "value": "http://baxe.pics:48261/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776720726",
        "to_ids": true,
        "type": "url",
        "uuid": "865c8acc-b88f-4c29-93d7-4e2cd54c6fc7",
        "value": "http://borscer.biz:9592/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776720747",
        "to_ids": true,
        "type": "url",
        "uuid": "0f8aa8dc-5723-4d73-a36e-44d90e4bf80e",
        "value": "http://buccstanor.pics:28313/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776720768",
        "to_ids": true,
        "type": "url",
        "uuid": "453b7098-a6ce-49a2-aa22-efc890b2ff61",
        "value": "http://buccstanor.pics:48261/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776720790",
        "to_ids": true,
        "type": "url",
        "uuid": "9bac3eb9-9da6-44a7-8388-94a308fb4e81",
        "value": "http://chalx.live:5902/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776720811",
        "to_ids": true,
        "type": "url",
        "uuid": "514acbea-7d30-4a41-a596-5d2b161c836e",
        "value": "http://chromap.biz:4219/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776720832",
        "to_ids": true,
        "type": "url",
        "uuid": "eb761f9f-0375-40a5-95d5-219d1c5f0957",
        "value": "http://coox.live:28313/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776720853",
        "to_ids": true,
        "type": "url",
        "uuid": "c68136a8-77ae-4e4b-93cb-25fa47862c75",
        "value": "http://drymoge.biz:4192/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776720874",
        "to_ids": true,
        "type": "url",
        "uuid": "7e4735e2-0d3d-4849-b17d-4368cc6e6280",
        "value": "http://forestoaker.com:6290/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776720895",
        "to_ids": true,
        "type": "url",
        "uuid": "35199e90-bf85-45b1-bd8e-e7bba5380458",
        "value": "http://gluckcreek.online:48261/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776720917",
        "to_ids": true,
        "type": "url",
        "uuid": "75336703-c924-4b0a-932c-f925d7a7ce85",
        "value": "http://intem.lat:9592/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776720938",
        "to_ids": true,
        "type": "url",
        "uuid": "3fc89bd9-e0f6-47f2-b0b2-4278808fa2fa",
        "value": "http://interxo.biz:7481/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776720959",
        "to_ids": true,
        "type": "url",
        "uuid": "6ff2c258-e689-4fc8-86f8-d92d38f0eab0",
        "value": "http://josegza.biz:8521/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776720981",
        "to_ids": true,
        "type": "url",
        "uuid": "9a9c9008-739b-4094-a1e8-c3e39051ff13",
        "value": "http://krondez.com:28982/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721002",
        "to_ids": true,
        "type": "url",
        "uuid": "8815ae0f-d817-4403-a29c-dd6666ac59bc",
        "value": "http://lazzo.bet:3989/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721023",
        "to_ids": true,
        "type": "url",
        "uuid": "14a9a455-5140-41a1-ad50-0666da0c25d5",
        "value": "http://managew.biz:5902/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721045",
        "to_ids": true,
        "type": "url",
        "uuid": "3a2303f8-7863-401e-aa09-2b864da511e5",
        "value": "http://navelum.biz:3201/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721066",
        "to_ids": true,
        "type": "url",
        "uuid": "951c0d22-81de-417f-afbc-3fcf0754f232",
        "value": "http://nitroca.biz:6782/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721088",
        "to_ids": true,
        "type": "url",
        "uuid": "50a4ec06-5a4f-4494-b316-ebdb8f22d30c",
        "value": "http://outcrol.biz:4895/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721109",
        "to_ids": true,
        "type": "url",
        "uuid": "cddab3b3-3390-414a-bb36-fa89ce1cbedc",
        "value": "http://padaz.pics:4219/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721130",
        "to_ids": true,
        "type": "url",
        "uuid": "484a1a9d-9139-4eaa-aaa4-ff04c14737f8",
        "value": "http://parky.pics:3989/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721152",
        "to_ids": true,
        "type": "url",
        "uuid": "8fbe4e42-1597-49b2-a051-d3ace0471d97",
        "value": "http://prickaz.biz:2039/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721173",
        "to_ids": true,
        "type": "url",
        "uuid": "337cda0c-04db-4bc7-bea7-c77c294e6f97",
        "value": "http://remnane.biz:5692/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721195",
        "to_ids": true,
        "type": "url",
        "uuid": "a76f0c04-2f60-4f5a-8453-3d7597bebde0",
        "value": "http://ropea.top:28313/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721217",
        "to_ids": true,
        "type": "url",
        "uuid": "41281186-3e57-421f-b403-260cfec145a5",
        "value": "http://siltsoh.biz:7481/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721238",
        "to_ids": true,
        "type": "url",
        "uuid": "c2651e3c-d9c5-4657-8c3a-3c82959bdffa",
        "value": "http://texakgi.cloud:3849/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721259",
        "to_ids": true,
        "type": "url",
        "uuid": "5067993f-3ec5-4cbf-9346-909f8e661b2d",
        "value": "http://vinte.online:28313/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721281",
        "to_ids": true,
        "type": "url",
        "uuid": "468c8e1f-39fc-4942-a904-69d2010d30cd",
        "value": "http://woodena.biz:7821/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721302",
        "to_ids": true,
        "type": "url",
        "uuid": "306ffe89-c6f9-4caf-97c0-7ebb8ab1100e",
        "value": "http://zadno.run:4219/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776024657",
        "to_ids": true,
        "type": "domain",
        "uuid": "956796a5-1d38-4e66-a3c1-f494c7a4ff3c",
        "value": "adveryx.biz",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776024678",
        "to_ids": true,
        "type": "domain",
        "uuid": "ac372171-24c8-41bb-bff2-136e4a8c4b31",
        "value": "backbou.biz",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776024699",
        "to_ids": true,
        "type": "domain",
        "uuid": "e6a244c8-8d52-4289-8df3-af416df041d5",
        "value": "baxe.pics",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776024720",
        "to_ids": true,
        "type": "domain",
        "uuid": "26195d53-32a9-4f0d-9b29-09d4346bc5b1",
        "value": "borscer.biz",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776024742",
        "to_ids": true,
        "type": "domain",
        "uuid": "9f1ce4d4-b8ec-445d-91f6-a2c231fc5023",
        "value": "buccstanor.pics",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776024763",
        "to_ids": true,
        "type": "domain",
        "uuid": "c018c8ff-195c-4aad-bb5f-89c9f0cf5da2",
        "value": "chalx.live",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776024784",
        "to_ids": true,
        "type": "domain",
        "uuid": "56829ef6-0608-4dff-9da5-fff924add4b6",
        "value": "cheekiez.biz",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776024806",
        "to_ids": true,
        "type": "domain",
        "uuid": "4e40d828-9cbc-49e7-bc75-2809bdc18dbb",
        "value": "chromap.biz",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776024827",
        "to_ids": true,
        "type": "domain",
        "uuid": "8dc10129-ad3b-4849-9b46-9c85679b862e",
        "value": "coox.live",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776024848",
        "to_ids": true,
        "type": "domain",
        "uuid": "3382959f-fd4a-41a0-9a1e-2dd08d9c2205",
        "value": "drymoge.biz",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776024869",
        "to_ids": true,
        "type": "domain",
        "uuid": "fab22029-096f-4622-9cef-1c09d26ad748",
        "value": "forestoaker.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776024890",
        "to_ids": true,
        "type": "domain",
        "uuid": "21bfc544-0047-4a0c-9b74-2fa8e80c4178",
        "value": "gluckcreek.online",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776024912",
        "to_ids": true,
        "type": "domain",
        "uuid": "57c83e01-3488-445e-af97-cd3685814f8d",
        "value": "intem.lat",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776024933",
        "to_ids": true,
        "type": "domain",
        "uuid": "b3da6e70-e7cc-4cb4-8b93-babd9b7b0dd0",
        "value": "interxo.biz",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776024954",
        "to_ids": true,
        "type": "domain",
        "uuid": "c7620c13-4795-48d6-b061-791c111671c8",
        "value": "josegza.biz",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776024975",
        "to_ids": true,
        "type": "domain",
        "uuid": "bedf47db-5bef-4a7a-b249-486153cafcb8",
        "value": "krondez.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776024996",
        "to_ids": true,
        "type": "domain",
        "uuid": "f20bc0db-ba2b-43f9-869a-f1ed4a546895",
        "value": "lazzo.bet",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776025018",
        "to_ids": true,
        "type": "domain",
        "uuid": "3e584049-7279-41cc-8d19-90b4091f6b1e",
        "value": "managew.biz",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776025040",
        "to_ids": true,
        "type": "domain",
        "uuid": "a9b3541f-cbfe-4430-a0a4-0908baee879a",
        "value": "navelum.biz",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776025061",
        "to_ids": true,
        "type": "domain",
        "uuid": "39db2e88-88f7-4293-ab1f-37a968ab217e",
        "value": "nitroca.biz",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776025082",
        "to_ids": true,
        "type": "domain",
        "uuid": "8cfbc04f-5272-477a-820c-b55deb32fa99",
        "value": "nobleckly.biz",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776025104",
        "to_ids": true,
        "type": "domain",
        "uuid": "a73f413d-4cbd-4b52-a87c-2679dd078c66",
        "value": "outcrol.biz",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776025126",
        "to_ids": true,
        "type": "domain",
        "uuid": "c18fa35b-6686-4a5c-9f56-cb01005f06b9",
        "value": "padaz.pics",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776025147",
        "to_ids": true,
        "type": "domain",
        "uuid": "65760663-14e8-474d-9354-8dbf361839a3",
        "value": "parky.pics",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776025168",
        "to_ids": true,
        "type": "domain",
        "uuid": "332ac24d-2ed4-4df8-9652-78b1794a086b",
        "value": "prickaz.biz",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776025189",
        "to_ids": true,
        "type": "domain",
        "uuid": "39155d09-29c8-499b-a352-595bdcc3d581",
        "value": "remnane.biz",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776025211",
        "to_ids": true,
        "type": "domain",
        "uuid": "757f2b0b-c430-4df4-ac93-72765e547e84",
        "value": "ropea.top",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776025232",
        "to_ids": true,
        "type": "domain",
        "uuid": "8f3455b2-86e1-4fbb-b667-83100e6a0d6e",
        "value": "siltsoh.biz",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776025253",
        "to_ids": true,
        "type": "domain",
        "uuid": "bfe60c11-e81e-4705-8f3c-9d21906970dc",
        "value": "texakgi.cloud",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776025274",
        "to_ids": true,
        "type": "domain",
        "uuid": "02e645fd-07e9-4837-bfe8-15c9d27f34a3",
        "value": "vinte.online",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776025295",
        "to_ids": true,
        "type": "domain",
        "uuid": "99e0012a-b8a0-4905-9e37-4d6c925fde93",
        "value": "woodena.biz",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776025316",
        "to_ids": true,
        "type": "domain",
        "uuid": "cdb4ec23-62dc-42bf-a689-dfab92e4d839",
        "value": "zadno.run",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018549",
        "to_ids": true,
        "type": "md5",
        "uuid": "3e46fe85-40d8-47ae-a4a6-be10907d5d9c",
        "value": "01b966d2df2fe069595ba3a9594b8e0b",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018550",
        "to_ids": true,
        "type": "md5",
        "uuid": "62a5109c-5694-4dab-883b-fb4d04fa623f",
        "value": "02cf2a265bf6c7d46d294bcc6522cf2f",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018551",
        "to_ids": true,
        "type": "md5",
        "uuid": "cd971018-044b-4ac5-83ac-734e3c439316",
        "value": "03550f7f752143e03aff558a53d4c987",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018552",
        "to_ids": true,
        "type": "md5",
        "uuid": "e9c6fd52-1639-4b3c-bd95-ac193b2af1d0",
        "value": "044195e402b37f0ea6a90940124824fc",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018553",
        "to_ids": true,
        "type": "md5",
        "uuid": "fb350c58-cc7c-4cfb-b869-9cd140413805",
        "value": "04f15692fc7c48695c1bc6149fcc32b9",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018554",
        "to_ids": true,
        "type": "md5",
        "uuid": "46576e7a-0781-41c5-9640-a11d704dcf03",
        "value": "07c3e924710e095f5c8f5e5fdc1b8b18",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018555",
        "to_ids": true,
        "type": "md5",
        "uuid": "2e825dd9-9ee9-4fe4-b429-a7ed5b98fc7c",
        "value": "082607fb523fdb2856d3501b3e9f2b2e",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018556",
        "to_ids": true,
        "type": "md5",
        "uuid": "fb78469b-f7ab-489d-9a21-35d00a36eaa1",
        "value": "08e50f80a611a2c3c1ede1e7d50474cd",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018556",
        "to_ids": true,
        "type": "md5",
        "uuid": "933c1dd5-65f6-46b7-9209-743b16ebc9c3",
        "value": "093c13abe950d2863c192e598b33aec3",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018557",
        "to_ids": true,
        "type": "md5",
        "uuid": "ff009c25-aac0-4bf2-b2ef-01acd6398778",
        "value": "0b2df21c06d4d2e94876829cf0bd36d9",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018557",
        "to_ids": true,
        "type": "md5",
        "uuid": "c2e9db52-fdf9-4ab6-abe2-b4d78769faf6",
        "value": "0c7cc0af4bdb782cd3b4b096934a677d",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018558",
        "to_ids": true,
        "type": "md5",
        "uuid": "4be4739b-5022-4c80-8cbc-669b00b369bc",
        "value": "0d529c2bf33c64579451e71389a8b391",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018559",
        "to_ids": true,
        "type": "md5",
        "uuid": "a2fb305f-e861-4042-98cb-dcd674f4186c",
        "value": "0d8eb6b200eea8c4ad8d9a9f86b78497",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018560",
        "to_ids": true,
        "type": "md5",
        "uuid": "2ba84453-803f-49e1-9033-ff6d338ec17a",
        "value": "0de87a12aed46efd173b9443392c4dd3",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018562",
        "to_ids": true,
        "type": "md5",
        "uuid": "df7cd42d-7781-45ea-9556-3fa8102de901",
        "value": "0def138c46cea2e7033d3f31c1ac85c0",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018563",
        "to_ids": true,
        "type": "md5",
        "uuid": "fe7d6f69-b7da-44e8-832a-a1213d9089bd",
        "value": "0e118655e35a760388aa2890c03e214d",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018563",
        "to_ids": true,
        "type": "md5",
        "uuid": "47028646-0271-436b-b621-fc34c292a989",
        "value": "0e45e57dc78327a21fc0d808b87ac440",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018564",
        "to_ids": true,
        "type": "md5",
        "uuid": "29550aee-1948-4a17-b0f0-266c8e0389a0",
        "value": "1318c5b9245ee0d54311005ed26198aa",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018565",
        "to_ids": true,
        "type": "md5",
        "uuid": "0b8e7533-4a77-4238-bf20-e3dfca105122",
        "value": "16784801216eece20be148b42b9b25b0",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018565",
        "to_ids": true,
        "type": "md5",
        "uuid": "077b533f-aac4-4c7f-b2a1-bd399923fbb7",
        "value": "16d2f58fd7c0cc6eb460c044d8152f86",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018566",
        "to_ids": true,
        "type": "md5",
        "uuid": "f903d53e-b92a-439a-b51a-112e34fce2c1",
        "value": "17fe49e014d45b14cb9177366a2c1406",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018567",
        "to_ids": true,
        "type": "md5",
        "uuid": "2c2b33c2-7e26-4f11-9850-5961cf869e8f",
        "value": "19d79c2b5eaeb805f88cf2552f49f328",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018568",
        "to_ids": true,
        "type": "md5",
        "uuid": "669a20ab-3cc0-4ffe-98c5-b40803811fc1",
        "value": "1a59f51f889666171e7b190531579229",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018569",
        "to_ids": true,
        "type": "md5",
        "uuid": "cd930130-1f96-430d-af56-3b26fa2613e5",
        "value": "1ba2e1626239257ebe8032f98a79e5b4",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018570",
        "to_ids": true,
        "type": "md5",
        "uuid": "14be382b-8ff4-4088-acb5-71ae04977217",
        "value": "1d2db411ae17d913e11cbb264e2d93a3",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018571",
        "to_ids": true,
        "type": "md5",
        "uuid": "f34989bb-8003-4f83-b0d9-495bc904ba98",
        "value": "1d8956347f414250f08275bdbdddacdc",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018572",
        "to_ids": true,
        "type": "md5",
        "uuid": "a691d190-bae7-4d05-bd5a-c132d663b7a0",
        "value": "1e4a29657b507ab5378deeb489a65fc2",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018573",
        "to_ids": true,
        "type": "md5",
        "uuid": "33456452-ee79-40e0-a156-b10e0cb08fd9",
        "value": "200fa9451d6682c03eea6f33ca09d303",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018574",
        "to_ids": true,
        "type": "md5",
        "uuid": "0ca305e1-a6e1-4b3a-8e8f-2b4568e32c67",
        "value": "2033e2ff42009e9aafad51cb02b1af26",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018575",
        "to_ids": true,
        "type": "md5",
        "uuid": "c94ba122-9bef-4838-9a33-e1ae98aefd05",
        "value": "206e8afd4c9b18fc18c2f8b36adf3b7f",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018575",
        "to_ids": true,
        "type": "md5",
        "uuid": "6fac8da6-3add-4345-b529-b5b6a5cef013",
        "value": "2233e55a6fce99b90f808da2375bbefa",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018576",
        "to_ids": true,
        "type": "md5",
        "uuid": "ee92a1ce-376d-456a-b19c-2281afe060ef",
        "value": "22402e34a186d79e30498c92101d8a5e",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018577",
        "to_ids": true,
        "type": "md5",
        "uuid": "cbea61ea-752f-4e3e-b3c2-3fac1e608309",
        "value": "2242ed1a2a9cfa2f36a74d320eb447c8",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018578",
        "to_ids": true,
        "type": "md5",
        "uuid": "77556772-26c4-4c8e-823a-d0bab06c2527",
        "value": "22cd2734b37c21f2c5badc296d0d4570",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018579",
        "to_ids": true,
        "type": "md5",
        "uuid": "e2c48bd6-44b6-4ae3-ac2a-8496bea0c7e9",
        "value": "22e1d485557eece7d5b6d3d8d6a5c2b1",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018580",
        "to_ids": true,
        "type": "md5",
        "uuid": "f6cd274f-79bd-4678-9967-d6314d453507",
        "value": "23fc79854edffc3b5b7120ecbe6aece7",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018581",
        "to_ids": true,
        "type": "md5",
        "uuid": "2c9c81a0-c130-4168-882d-1d34bf6b0988",
        "value": "2741947f4df74e597f5abcca77b2e043",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018581",
        "to_ids": true,
        "type": "md5",
        "uuid": "b8f5e7ec-e6d3-439f-bc3b-89f8ab1f351b",
        "value": "27ac4135d6b87ffb87eb148811b569b7",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018582",
        "to_ids": true,
        "type": "md5",
        "uuid": "7bffe4ab-bba6-4015-a923-71ba77e20e14",
        "value": "285e1c84d0f200d18ef844afea231cd0",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018583",
        "to_ids": true,
        "type": "md5",
        "uuid": "a27ff5bb-68e8-4703-a621-578eeb29fd04",
        "value": "290a4aa1fa3bee9b87fa12f2a6cb6d52",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018583",
        "to_ids": true,
        "type": "md5",
        "uuid": "910aa3a2-4bd4-4b97-a0fb-1f8582464160",
        "value": "299fc2ebbe80c020f1208729d75602ce",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018584",
        "to_ids": true,
        "type": "md5",
        "uuid": "9a5ca4f0-0e98-4f53-a28c-496783317491",
        "value": "29dba6eb0ec2077af3f38e295bb01b4c",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018585",
        "to_ids": true,
        "type": "md5",
        "uuid": "58f8e967-6557-4c5e-adff-cc6928097291",
        "value": "2b75b8485f7d1e1fcb66b6a3b86d8eed",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018586",
        "to_ids": true,
        "type": "md5",
        "uuid": "ae8a9257-d2de-4ab5-b6fd-45a6d891f37e",
        "value": "2cf5319b4aa98ee666acdae2cf251318",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018588",
        "to_ids": true,
        "type": "md5",
        "uuid": "537001fc-17d2-42ae-b067-59cee29ad170",
        "value": "2d6f3ef92e267ac698bb414cb431f32a",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018588",
        "to_ids": true,
        "type": "md5",
        "uuid": "637a6216-218a-4969-ad6b-15853ea39b7b",
        "value": "2d934c2b6bc483c2c8879e1a5a991f8b",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018589",
        "to_ids": true,
        "type": "md5",
        "uuid": "364ff023-9c11-4132-a86c-deb2c6d49e4e",
        "value": "31644be0c27cf25eb1adedc48f689fea",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018590",
        "to_ids": true,
        "type": "md5",
        "uuid": "a646f1e5-e32d-4da8-9e61-ee7658e0a924",
        "value": "32ee3ea755a29ac05a35c59e6a80f228",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018591",
        "to_ids": true,
        "type": "md5",
        "uuid": "c59098e6-25c3-4350-bd2b-cff415dd0391",
        "value": "32f41c0f8b37a4668d9d717788ae639d",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018591",
        "to_ids": true,
        "type": "md5",
        "uuid": "ea7793a7-fded-49ae-8562-1aa967af1bc7",
        "value": "33e2b63d3e1a63cc758498958bbaf91a",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018592",
        "to_ids": true,
        "type": "md5",
        "uuid": "1f7aa869-9a08-4587-84fc-2e5d6a84bfa2",
        "value": "347bb404aa77afac68b2de2fe7c0e7d1",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018593",
        "to_ids": true,
        "type": "md5",
        "uuid": "16df2457-c194-464f-8383-3ea83da0b49c",
        "value": "34e50a448c55df74c098a83716679024",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018594",
        "to_ids": true,
        "type": "md5",
        "uuid": "d5b6c3d0-8a89-4b11-aa5c-5cf892f41532",
        "value": "35bb37c0eacba30c7cda970743b5bb5e",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018595",
        "to_ids": true,
        "type": "md5",
        "uuid": "63563372-c8c5-461a-8669-6007085dc23e",
        "value": "37d4b9d8e71eca30b2908e8c6ea45f6f",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018596",
        "to_ids": true,
        "type": "md5",
        "uuid": "443e4ef6-7d14-47af-8e5a-38b7fcd707be",
        "value": "3803377affef899f66db4bfc3ee09b84",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018597",
        "to_ids": true,
        "type": "md5",
        "uuid": "84bcb1df-5ed1-4e01-8f45-9f22db8d6169",
        "value": "3bcde33988a33774a38f347a26a98f9c",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018597",
        "to_ids": true,
        "type": "md5",
        "uuid": "ca8faa4f-f947-478d-b81d-2f0e5f44cd7f",
        "value": "3cd26f2436803273ddaa57a1b6042f80",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018598",
        "to_ids": true,
        "type": "md5",
        "uuid": "d67a1f8a-49fc-44eb-aff1-9ba6cd804546",
        "value": "3ddd24906d3e5edd06e653e82adea9d3",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018599",
        "to_ids": true,
        "type": "md5",
        "uuid": "27b9a0e3-d1e3-4cb8-86ad-82488147d4e3",
        "value": "40805dcb716ade09387c8a1bb34803e2",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018600",
        "to_ids": true,
        "type": "md5",
        "uuid": "e6c7153f-cb67-4142-bebb-51ee2eb1bd96",
        "value": "41715146991795d92e631ee68394a2cd",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018601",
        "to_ids": true,
        "type": "md5",
        "uuid": "8c4141a6-b514-4b06-9810-2ae349318fa3",
        "value": "42cf53dc74d7c27d2407d7b4a85b069d",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018602",
        "to_ids": true,
        "type": "md5",
        "uuid": "b9310551-8d93-4e55-bad8-59fbc3f79c18",
        "value": "43cbd0e999e13ade60714a2ee89ea3e8",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018604",
        "to_ids": true,
        "type": "md5",
        "uuid": "fffe082a-f2a1-4e99-ab57-fb4da81d5c2c",
        "value": "43de96394f8857f036b8adc1ee9105df",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018604",
        "to_ids": true,
        "type": "md5",
        "uuid": "b0028d2c-a05d-4b7f-9662-911d19cce19c",
        "value": "44f083c537ca51575e8f566019fd22fb",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018605",
        "to_ids": true,
        "type": "md5",
        "uuid": "02d4eb39-e6a0-489e-9a6a-188c8fc1c7ce",
        "value": "461ad4e771fc3b7ce00b643eb405419f",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018606",
        "to_ids": true,
        "type": "md5",
        "uuid": "8a73a2f0-d988-4826-a33f-b4e72cf145d6",
        "value": "46824d07fc08b6da0149c1df2e5e912d",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018607",
        "to_ids": true,
        "type": "md5",
        "uuid": "c2791474-5888-40bc-ab7f-ed76f37b00b3",
        "value": "46add1380f038f6df85d6fbac9658d82",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018607",
        "to_ids": true,
        "type": "md5",
        "uuid": "d8429411-5ec2-4ac5-acbe-0b237da42259",
        "value": "4839061e98a3e9bfd9b7bdebdb1a6308",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018608",
        "to_ids": true,
        "type": "md5",
        "uuid": "b123605d-c7b7-4b3d-9e1a-03d45898c40a",
        "value": "48939c91f25c676c2836c4efdbf00c2f",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018609",
        "to_ids": true,
        "type": "md5",
        "uuid": "0ad1800a-f9e6-4add-b8a0-7e57fadcbc01",
        "value": "48faeb9ce8d700f1e3e7a8e2e01102a7",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018610",
        "to_ids": true,
        "type": "md5",
        "uuid": "2abccb23-8a81-4a4c-94dc-17f566b445b4",
        "value": "494ece88975128bdbf1c2cef154a5732",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018611",
        "to_ids": true,
        "type": "md5",
        "uuid": "f74722b4-0f1b-49b0-9e99-16cf88fe773d",
        "value": "4a78fcd469b6102472397fe75cde0971",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018612",
        "to_ids": true,
        "type": "md5",
        "uuid": "3caf4fec-6770-49c5-906b-ad706a8051d0",
        "value": "4ab807224353695b1cac2c89ec6a34aa",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018613",
        "to_ids": true,
        "type": "md5",
        "uuid": "19a57ae3-7dc6-4aa1-bce8-8db26067ad7d",
        "value": "4acfd23b59353a71a36f4928f8a78adb",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018614",
        "to_ids": true,
        "type": "md5",
        "uuid": "62808333-b31e-4b36-ae3e-e3da3c0ef850",
        "value": "4cb01d793451ae5a761c13130efa5436",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018615",
        "to_ids": true,
        "type": "md5",
        "uuid": "c92ea0eb-7cdc-4aa6-b604-de601b911d4c",
        "value": "4f406e1ca5ccf2f9c91f3a82e7990b6d",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018616",
        "to_ids": true,
        "type": "md5",
        "uuid": "a25b6a59-720b-4d9e-ad7a-096ea3851acc",
        "value": "4fa66a116c7a6d9bf17663751e814827",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018617",
        "to_ids": true,
        "type": "md5",
        "uuid": "8ecc44ab-8dc3-43ae-95cd-201fa625ef38",
        "value": "501735b9e57c58482baa2544edddd5b2",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018618",
        "to_ids": true,
        "type": "md5",
        "uuid": "1f3014a0-1a2f-4160-a0e1-42a87ee455f1",
        "value": "50f72ae69fbecf89d3fec16ec0c7c28e",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018619",
        "to_ids": true,
        "type": "md5",
        "uuid": "fd23f1ad-5cf2-4eb1-b0ff-8445ece05da8",
        "value": "516ba95cfb55ff05fe2fa50168b1f039",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018619",
        "to_ids": true,
        "type": "md5",
        "uuid": "dfe9a18f-bbd4-43e9-abf7-2f67057ffa41",
        "value": "57af6ba7a4686e8f2d7db6f1c63e971b",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018620",
        "to_ids": true,
        "type": "md5",
        "uuid": "1e4c36c3-8dae-4dee-a588-e7d4eca5cd2c",
        "value": "597a7bd2a91716806c042c45fedea6a4",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018621",
        "to_ids": true,
        "type": "md5",
        "uuid": "21ceb63e-1c21-42f8-bae2-2d6ff0c63692",
        "value": "5b523789de91d6669b5b577944ce6a74",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018622",
        "to_ids": true,
        "type": "md5",
        "uuid": "5fece8ed-8ba9-4ee5-8c64-7d99da095752",
        "value": "5b851a18d1e92616634a84ea2700a2f8",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018623",
        "to_ids": true,
        "type": "md5",
        "uuid": "9be72c78-7d02-499f-bfd6-7c177ef91986",
        "value": "5ba732587658880b9e4c2dfecc566f21",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018624",
        "to_ids": true,
        "type": "md5",
        "uuid": "4e670c5d-6dfa-4b79-9cc0-7a41afab6fa5",
        "value": "5db408bb85014c199d28dae58a4d1fc4",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018624",
        "to_ids": true,
        "type": "md5",
        "uuid": "e0c5c590-dc19-4ab1-8ef5-f3e110aefab5",
        "value": "5e25ce21068c7e25a17bf47d70026b95",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018626",
        "to_ids": true,
        "type": "md5",
        "uuid": "1cf175a5-5c3f-4d18-98c6-7cb9d5c11a11",
        "value": "5f636fbed7e39a1ffb45a50b10b50450",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018626",
        "to_ids": true,
        "type": "md5",
        "uuid": "6c478b0b-3a35-44f9-9155-e2ecfbfa8ce8",
        "value": "5ff4393f4bc0481248fd83ae4a63b893",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018627",
        "to_ids": true,
        "type": "md5",
        "uuid": "6260ad89-5079-4cd3-9491-a9d707040a39",
        "value": "617c30711700b68f30a90b1274723f4f",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018627",
        "to_ids": true,
        "type": "md5",
        "uuid": "7d8f1cc1-a6cd-4984-be18-a2fe9d2b94b4",
        "value": "61ac11ce13c8219d67bf5c033f59f79f",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018629",
        "to_ids": true,
        "type": "md5",
        "uuid": "0c21e8e1-d012-4cfc-8471-8da3ae1c7b0f",
        "value": "635abffc5b066ae521f8006098a4f6e9",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018629",
        "to_ids": true,
        "type": "md5",
        "uuid": "46525560-3634-489f-9f16-0ceb0fd5d44d",
        "value": "667b0e595922c2504dae7cfc46fee351",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018630",
        "to_ids": true,
        "type": "md5",
        "uuid": "7833a691-6af2-4b89-9655-8c0a20959f21",
        "value": "6688534871abe3b09ff81a5221170893",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018630",
        "to_ids": true,
        "type": "md5",
        "uuid": "ebef8124-d380-4873-8978-d2bfba68e459",
        "value": "671f1564f4dcaae32d2296f7b834fc53",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018631",
        "to_ids": true,
        "type": "md5",
        "uuid": "e0eb7a7c-6845-47bd-a45b-1c0c781e3cd4",
        "value": "683b7e01f4570d9e1fb2b2121530e606",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018632",
        "to_ids": true,
        "type": "md5",
        "uuid": "7a7e82c4-77ca-41e9-848d-3ebac81b43e9",
        "value": "697735641c58786d744d302f6b2e5f70",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018633",
        "to_ids": true,
        "type": "md5",
        "uuid": "aa32313d-b609-40bb-aa47-7f73b63263d0",
        "value": "6a510fb8b709c82e819d0a39bc9ee21a",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018634",
        "to_ids": true,
        "type": "md5",
        "uuid": "ac302a87-2f54-4920-9461-fa2d0197dd05",
        "value": "6a7263bd9abf9b4622bef7fc80718330",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018635",
        "to_ids": true,
        "type": "md5",
        "uuid": "1921c69e-df99-43f3-b67e-dba91e6f98f8",
        "value": "6aa494afa7bb1e50b6c649922165ae43",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018636",
        "to_ids": true,
        "type": "md5",
        "uuid": "b1928fce-9a30-4b8e-88a2-a4863dcef055",
        "value": "6ba94a59b4032d0f1eae504c14933d7c",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018637",
        "to_ids": true,
        "type": "md5",
        "uuid": "5c7d7e77-074e-4ceb-baff-f5c1e1a0ebcd",
        "value": "6ca15206e067b66b2399dd3edda2f2f6",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018638",
        "to_ids": true,
        "type": "md5",
        "uuid": "769e2435-0a61-457c-986d-34e7ab01a3bc",
        "value": "6dc4a5058772ee4bd38b3cf4b435affa",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018639",
        "to_ids": true,
        "type": "md5",
        "uuid": "1bba86b3-eb3d-4c9a-bc84-2733f8f17d13",
        "value": "6e1d1ad7f2eab9bf06a1febc9d2a4ce2",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018640",
        "to_ids": true,
        "type": "md5",
        "uuid": "452e66dc-161a-4b9f-8a4e-eeee77b7ab62",
        "value": "6f137ba3cd1bb1e9fb86b5c873c4228f",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018641",
        "to_ids": true,
        "type": "md5",
        "uuid": "8272483b-cd78-4270-9ee3-1f3cc617cc07",
        "value": "6f7e4650182536484adaf2de3adadfe0",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018642",
        "to_ids": true,
        "type": "md5",
        "uuid": "1c6e21f4-0f4f-4ae4-8298-e87407160f47",
        "value": "7105c4956a2511b935ce134c508567c2",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018643",
        "to_ids": true,
        "type": "md5",
        "uuid": "601a4281-1bd3-432c-9ee2-dba8a03f8949",
        "value": "7138128b02a36eb33f157f38adeddcb9",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018644",
        "to_ids": true,
        "type": "md5",
        "uuid": "44ec03ea-cd40-4e0b-93bf-d867c8e411b7",
        "value": "715300234ca505d1a7c97d8c24266c5f",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018644",
        "to_ids": true,
        "type": "md5",
        "uuid": "88c8ac1d-9541-49de-8e07-1774be2e75d8",
        "value": "7620c3f0297c63a9aa04e23372637774",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018645",
        "to_ids": true,
        "type": "md5",
        "uuid": "a9c3f7df-0a88-4f9d-a79f-b7cfa933ea10",
        "value": "775075ead3c689bb0720ff4a6ff0e262",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018646",
        "to_ids": true,
        "type": "md5",
        "uuid": "95a2ab65-9d05-47a1-ae95-af3f860d5530",
        "value": "782c72ae0657b7c8cd3eea3b2b0d56ab",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018647",
        "to_ids": true,
        "type": "md5",
        "uuid": "349d47d1-93b4-48ca-853c-9b1da74771bf",
        "value": "791b72c4e87a6840a156fbe7041b2de7",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018648",
        "to_ids": true,
        "type": "md5",
        "uuid": "aa7468ed-784c-42f6-97c8-c13478724033",
        "value": "7940fd9d57354780959db9b1aba0ef33",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018649",
        "to_ids": true,
        "type": "md5",
        "uuid": "0e6feeb2-3d05-48e9-9e64-9a5208e74d2c",
        "value": "7a6916889d39346be223220d5d5d214e",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018650",
        "to_ids": true,
        "type": "md5",
        "uuid": "ca8bfd83-1867-4925-92c1-9bec706ff946",
        "value": "7ccd0e7b01d89dfc5b4153dff596ed3a",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018651",
        "to_ids": true,
        "type": "md5",
        "uuid": "7a00b94d-38c7-4534-8edd-445c2af5b6e7",
        "value": "7d323164ce491d79ae75de1de2000746",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018652",
        "to_ids": true,
        "type": "md5",
        "uuid": "5f9887c6-c7b5-473d-90a9-8ed520c70e84",
        "value": "7e91f43d63046fdbd89f23cfeb64ab5e",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018652",
        "to_ids": true,
        "type": "md5",
        "uuid": "d7062890-17b1-4d05-b25d-66c91d425930",
        "value": "810254262701bf36c62aaa2eb6382e7d",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018653",
        "to_ids": true,
        "type": "md5",
        "uuid": "7e31c946-9b81-46e1-a0f0-651d798790f0",
        "value": "81ac85ab15ea90fcc1ea50a6983ae2df",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018654",
        "to_ids": true,
        "type": "md5",
        "uuid": "81e685f4-9963-4bc4-be74-3933411ea1fb",
        "value": "81f139596ac7e35aa79acf858ddd0f97",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018655",
        "to_ids": true,
        "type": "md5",
        "uuid": "aa105103-04ff-48f5-8203-87d703ff5df9",
        "value": "8372e35d4dbe20a87558103b33de6137",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018656",
        "to_ids": true,
        "type": "md5",
        "uuid": "86f3b4d3-ca57-4423-9ad8-600c717ca298",
        "value": "85b912e6ee7c3c1b28e5d0abf0477da4",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018657",
        "to_ids": true,
        "type": "md5",
        "uuid": "14f1e133-91d4-4b7e-bf4d-59a2c772cff5",
        "value": "86acc293ed747ba3017c8783fc0f1267",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018658",
        "to_ids": true,
        "type": "md5",
        "uuid": "c53254fa-3040-4cfc-83b9-41f9e75db81f",
        "value": "86b265245ab2f1ec719336f1fbe5f8a7",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018659",
        "to_ids": true,
        "type": "md5",
        "uuid": "2ba53db1-1f88-4761-bff5-ed98c22fe2cc",
        "value": "87b506cf3033b96d3c38285b1090b92e",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018660",
        "to_ids": true,
        "type": "md5",
        "uuid": "796080db-4914-4d62-8bfd-a4f2999cb50a",
        "value": "885d068a25d07a323f61c4f676456468",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018661",
        "to_ids": true,
        "type": "md5",
        "uuid": "78b8660f-2891-4889-995d-d2bc10e938e7",
        "value": "8a88cc49110feeec81cbfcf7b80e86ac",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018662",
        "to_ids": true,
        "type": "md5",
        "uuid": "0a205901-16f7-444a-be52-973cb46cbc8b",
        "value": "8be144f32c6b9a9c43818ff3495bf410",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018663",
        "to_ids": true,
        "type": "md5",
        "uuid": "a767bd46-4541-4ce9-8ce9-0cbe3811fb16",
        "value": "8db61dbec5b9d1eaa46448b7d0c2a2f6",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018664",
        "to_ids": true,
        "type": "md5",
        "uuid": "032c4495-120c-4b3a-b66d-1cd82634eba7",
        "value": "8e4cca660961d10464f8ac6a1aaa69df",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018665",
        "to_ids": true,
        "type": "md5",
        "uuid": "a9c58d5f-de08-4870-802d-c321d64a788d",
        "value": "8f473947308d577f9e823567f3cb1335",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018666",
        "to_ids": true,
        "type": "md5",
        "uuid": "d9310f7c-4dd2-40a4-bb35-b10bec36ae61",
        "value": "90a79c3bc7f76be08169d5198193164e",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018666",
        "to_ids": true,
        "type": "md5",
        "uuid": "91215f1b-5e33-467f-be61-aef330affb61",
        "value": "9410d9b6e0c1b7d7fef12b623db27fb5",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018667",
        "to_ids": true,
        "type": "md5",
        "uuid": "f4bd977d-538b-4b24-8233-26777fccee63",
        "value": "94cb9af456ca238963299e663df4aa4d",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018668",
        "to_ids": true,
        "type": "md5",
        "uuid": "5d258c2b-4a39-47b2-9846-f7fbca0fe614",
        "value": "95c59d1dff77d9ecea29db41b572b6e0",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018669",
        "to_ids": true,
        "type": "md5",
        "uuid": "7f78dbc2-b335-4ac9-9cf1-6c34b3ce184c",
        "value": "9abaedfe927a620a96bb300a23a3c5a2",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018670",
        "to_ids": true,
        "type": "md5",
        "uuid": "5039ea99-5660-41d8-807c-931d88874b45",
        "value": "9cfd96f51b9238b86d6ee58ad9bb952e",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018671",
        "to_ids": true,
        "type": "md5",
        "uuid": "601e8b62-0a14-4674-8d61-1f84c3c6c809",
        "value": "9d2f9ce3d8b02ba4f2fdb3c1230538c1",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018672",
        "to_ids": true,
        "type": "md5",
        "uuid": "91c91355-03eb-4a79-afd4-d9085b7de49b",
        "value": "9ec0ac7a70aa1a5768425adc636a51d6",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018673",
        "to_ids": true,
        "type": "md5",
        "uuid": "268028b6-60f9-4dfd-8f24-b1c0fd58f012",
        "value": "9fcda9e45986e17095de2f4f4924d844",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018674",
        "to_ids": true,
        "type": "md5",
        "uuid": "ac3e8048-fac2-4d3c-9162-840b111420d2",
        "value": "a04fd16378479fdc13f22ba5917a651c",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018675",
        "to_ids": true,
        "type": "md5",
        "uuid": "e07a870c-7835-47d5-b023-0498add21b4e",
        "value": "a0519aadc670adc5f330f0026d48e56b",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018676",
        "to_ids": true,
        "type": "md5",
        "uuid": "85be9171-3ae8-4bc0-80d8-5b67b5d9b47b",
        "value": "a053e647d9892b56fac44a6b0c103955",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018677",
        "to_ids": true,
        "type": "md5",
        "uuid": "8f6f464d-ae77-4afe-8777-b60f640e7faf",
        "value": "a14858a8919dd7b0f194f6556513450b",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:13/04/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018678",
        "to_ids": true,
        "type": "md5",
        "uuid": "1eb20abd-4ca0-4120-91ca-8d34830a424c",
        "value": "a2da20c32dbc5a7e1b34da23afd466ad",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018679",
        "to_ids": true,
        "type": "md5",
        "uuid": "bc431939-2768-4e5e-a3a5-eb92bf9ac8a2",
        "value": "a46c9ba2aa72f59deb1c4cfbfaf066c8",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018680",
        "to_ids": true,
        "type": "md5",
        "uuid": "7e58ef2f-ed67-4ed4-8fb6-182a51fe6411",
        "value": "a514ef2565b92f0affdbedbecdb90e71",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018680",
        "to_ids": true,
        "type": "md5",
        "uuid": "edfa541a-ad38-4a70-89c5-507d53bf8d82",
        "value": "a61f79717c241a11a5a219a0af50fb5e",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018681",
        "to_ids": true,
        "type": "md5",
        "uuid": "71ddd0bf-d143-4e06-a25c-06e8a84222bf",
        "value": "a6364b752fef48e130af3d0608c50068",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018682",
        "to_ids": true,
        "type": "md5",
        "uuid": "5db78598-07f3-4177-ae2b-3618278296a7",
        "value": "a7d8042b25d73d21cb6ce08a89ca7671",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018682",
        "to_ids": true,
        "type": "md5",
        "uuid": "7f937976-0499-4eb5-8ed9-af4f363182a0",
        "value": "a7da1ee5a664efb54d7922b2cb466d34",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018683",
        "to_ids": true,
        "type": "md5",
        "uuid": "2a318835-4d01-4951-8201-7a32904ac514",
        "value": "a845b7158d3cdca217ecd4e0be20d0c1",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018684",
        "to_ids": true,
        "type": "md5",
        "uuid": "ce42bee3-a0c8-4774-b38d-8ac81171231a",
        "value": "aa32c08d37b08cb9f250adeea6d85068",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018685",
        "to_ids": true,
        "type": "md5",
        "uuid": "e734451b-fd3f-44c7-b605-dc722f64174d",
        "value": "aa352d949806589e7c22079353c26570",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018686",
        "to_ids": true,
        "type": "md5",
        "uuid": "aa21c26c-be09-449a-9f94-0e63e7464cb0",
        "value": "abb5023feed9a12b3ed4fab976b3f02e",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018687",
        "to_ids": true,
        "type": "md5",
        "uuid": "c7dffd6a-d048-4f5e-8f70-396e04bb081e",
        "value": "ac3dc15851cbf2290f1d1a82dc7ebb48",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018689",
        "to_ids": true,
        "type": "md5",
        "uuid": "0034207b-71de-436e-8850-c5c8e584ef69",
        "value": "ac5e8c2223aa834595f16930838decd2",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018689",
        "to_ids": true,
        "type": "md5",
        "uuid": "39969b2d-01b3-45c0-89d7-093cddcc5096",
        "value": "ad4d3840db1c4ddae50ebcb0b4c93205",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018690",
        "to_ids": true,
        "type": "md5",
        "uuid": "97f57998-0968-41e4-b996-6bfca9ad2a8e",
        "value": "ad768d1e063fa52b76d2a09ab3fa3143",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018692",
        "to_ids": true,
        "type": "md5",
        "uuid": "e1aa590f-463a-4f0d-83df-638a0a172396",
        "value": "add50667c8e457e8fb824ce96e7e89af",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018692",
        "to_ids": true,
        "type": "md5",
        "uuid": "fcbfc619-1bbe-48ef-81bc-0a0696185262",
        "value": "af48ba629521a94ea2a32d147e9fc212",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018693",
        "to_ids": true,
        "type": "md5",
        "uuid": "3653ee85-efad-4dda-b5ae-e0404073fd3d",
        "value": "af59268ace4f65b75b04559bfe172e22",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018694",
        "to_ids": true,
        "type": "md5",
        "uuid": "3b9a9c89-7fcd-4098-b190-54a7267aa4ae",
        "value": "af6367b1a83f2cf338235b042c845166",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018695",
        "to_ids": true,
        "type": "md5",
        "uuid": "9810eba2-fdf7-4ea3-873a-f43a8c4a2c22",
        "value": "af72d60b4fbcbcf9109490bfeddf9263",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#230087",
            "local": false,
            "name": "rectifyq:samples-found-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018697",
        "to_ids": true,
        "type": "md5",
        "uuid": "a262adb7-2644-4f54-9780-8e3c13c4e982",
        "value": "afa8daee3420201c44c7851d0e9b4741",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018698",
        "to_ids": true,
        "type": "md5",
        "uuid": "31d6ecf2-08e8-4df0-9e47-535533ec1494",
        "value": "afe4a2ec13a3dd249ef03b44bd47fabb",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018698",
        "to_ids": true,
        "type": "md5",
        "uuid": "e0e0f4b6-496f-4d9b-b7a8-b6641e2e2583",
        "value": "b0e3f5e3a92165effd57ca495c91f2d7",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018699",
        "to_ids": true,
        "type": "md5",
        "uuid": "ed0153a7-869d-4ca3-ada2-f1535344801b",
        "value": "b14df45fe5d8abe90a240858fd85a33f",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018700",
        "to_ids": true,
        "type": "md5",
        "uuid": "e176159b-e16f-488c-8cf6-c7038af623f9",
        "value": "b162771d9af3664cfc0d8eb0dedb22e0",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018701",
        "to_ids": true,
        "type": "md5",
        "uuid": "2e2c63f3-9851-4e64-a921-dc9244c28451",
        "value": "b332b099efc969dd650cefed3e426954",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018702",
        "to_ids": true,
        "type": "md5",
        "uuid": "df4bc0ac-6c66-4066-b9ee-daa9d9a9d22c",
        "value": "b3c2cc83617360510f51a9c39e813bb5",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018703",
        "to_ids": true,
        "type": "md5",
        "uuid": "dbb680a9-7658-4ab0-ab35-56f89acb5ba5",
        "value": "b3cd768434f7f3c3a8288c3bb3dfb0ba",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018704",
        "to_ids": true,
        "type": "md5",
        "uuid": "f65ece26-f9cd-40aa-ace7-1ecf0a81735c",
        "value": "b3f7d1225fc921ed88214893a45a684c",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018705",
        "to_ids": true,
        "type": "md5",
        "uuid": "2bdf9113-bdc0-477e-94ff-a86197135c92",
        "value": "b47a5b21026655f8effe54c9bcbdaae3",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018705",
        "to_ids": true,
        "type": "md5",
        "uuid": "49d6ef78-ea53-4379-983a-1c79d820b339",
        "value": "b4f6ee5c451a4fd3df49320b75418ce0",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018707",
        "to_ids": true,
        "type": "md5",
        "uuid": "2a94e29e-b735-455e-8e0a-a62fb729dac4",
        "value": "b5a59471b5abeb12ddfb479769da5220",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018708",
        "to_ids": true,
        "type": "md5",
        "uuid": "fb3c10c8-3089-454e-b824-d7d9828af975",
        "value": "b60339bba3b7e4ebfcd3969c84c004bf",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018708",
        "to_ids": true,
        "type": "md5",
        "uuid": "dfc19f77-b031-45aa-bd53-4177c39cf0bd",
        "value": "b614b5f3b825b7adfebaa138dcc3491f",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018710",
        "to_ids": true,
        "type": "md5",
        "uuid": "754b5f03-8c45-4d5b-8459-92526b7927da",
        "value": "b7f70d34822cd32abf403e839a884c99",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018710",
        "to_ids": true,
        "type": "md5",
        "uuid": "ce4ce276-59d2-48dc-808c-bd52655f13f5",
        "value": "b8654c28f9d943858dcb82dda79212a4",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018711",
        "to_ids": true,
        "type": "md5",
        "uuid": "b875362d-470f-4044-9798-50425ce7e422",
        "value": "b8c531cfcf9cf9d4fa98c5d95a9c4070",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018711",
        "to_ids": true,
        "type": "md5",
        "uuid": "779d8585-3212-48a1-b73b-01cdeb276239",
        "value": "b9fb8aa9e90516bcd888047bfd553f47",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018712",
        "to_ids": true,
        "type": "md5",
        "uuid": "fb3bacdb-a144-4abf-8ca8-28b2424e77cb",
        "value": "bac2662b8f504b8892f2edf324b4d572",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018713",
        "to_ids": true,
        "type": "md5",
        "uuid": "a6a69ff6-f972-407c-ad26-f789883f0923",
        "value": "bb9d574874e57d5f059d33bd648061e6",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018713",
        "to_ids": true,
        "type": "md5",
        "uuid": "81602b99-3efb-4652-adb6-86b05872e551",
        "value": "bd005df6c6ebb7fab0c976351dfd4a2e",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018714",
        "to_ids": true,
        "type": "md5",
        "uuid": "3b0bb0d2-55f7-47bb-8a41-e50785452495",
        "value": "bd1a1c869d96a57443b76620da45df1a",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018715",
        "to_ids": true,
        "type": "md5",
        "uuid": "c14011bd-d3f3-41a4-ab2f-77833f243422",
        "value": "bd252a8b0ef5f87888cb83fac01d6e3e",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018716",
        "to_ids": true,
        "type": "md5",
        "uuid": "d381e0cb-9da2-45a7-9563-d1c83bed6dc3",
        "value": "bd271b443c8ac0b418117b309b790133",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018717",
        "to_ids": true,
        "type": "md5",
        "uuid": "94a9a664-bc01-4fc3-840f-f2fcaed98137",
        "value": "bd5b8a311bbe6c4afb0fba12774ad07e",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018718",
        "to_ids": true,
        "type": "md5",
        "uuid": "1f2f35ce-5ca8-4146-b9dc-5b2bcd9f105b",
        "value": "bd6877f9d462383b845cc912d0485f23",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018718",
        "to_ids": true,
        "type": "md5",
        "uuid": "d8d9ea45-ecef-46dc-982a-ca8a6bf0c840",
        "value": "be205b7e33bf604fb64ed55fd0fdfefe",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018719",
        "to_ids": true,
        "type": "md5",
        "uuid": "fe2f0f75-7478-42fb-b636-936b6a09ad2a",
        "value": "bf6fbdb9a841dc372e9d1b7b63286cd4",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018720",
        "to_ids": true,
        "type": "md5",
        "uuid": "93966c04-b227-48bf-9848-9c274394d888",
        "value": "bf74f9985d096c66f71c8c49d829810a",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018721",
        "to_ids": true,
        "type": "md5",
        "uuid": "2fef4783-5c1d-497e-b7d1-2021dfc6be43",
        "value": "bfbfafa615d6f2646cf6d8f1b6a637ae",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018722",
        "to_ids": true,
        "type": "md5",
        "uuid": "99dbd143-bd0d-4201-a170-11ef80c3d5a2",
        "value": "bfe6c7ff3d9129062be66e3e1fba0606",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018723",
        "to_ids": true,
        "type": "md5",
        "uuid": "d4eba06c-5d26-46af-ba56-9aee88901b56",
        "value": "c05ef88d86a9abd18d012d74639e4eed",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018724",
        "to_ids": true,
        "type": "md5",
        "uuid": "e0abe7d4-3cb1-430e-9f50-e4a07e782842",
        "value": "c131128e8aac5f730ca22592bce3c7d7",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018724",
        "to_ids": true,
        "type": "md5",
        "uuid": "575ce60e-1e08-4a1c-8903-7615c11adfba",
        "value": "c1315fcd3475fd51f8e4a0ef74464a6e",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018725",
        "to_ids": true,
        "type": "md5",
        "uuid": "11b96b0d-9592-4b53-9566-6963219a32ea",
        "value": "c17003e50792c4ca0246d34dfccd3226",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018726",
        "to_ids": true,
        "type": "md5",
        "uuid": "294055ba-01e7-41ee-aed7-3f7b0ec7451d",
        "value": "c1b7d3491c36a2940894d500dc6fb529",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018727",
        "to_ids": true,
        "type": "md5",
        "uuid": "95f5b39d-cd79-40b3-87f3-53563e4e41ca",
        "value": "c1d72cdf776c8fd337882f0aa9ba0742",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018728",
        "to_ids": true,
        "type": "md5",
        "uuid": "8742088a-b951-406e-a9f7-eb41d4fe2013",
        "value": "c2093c83a1983d50e0abc59b3e65af7d",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018729",
        "to_ids": true,
        "type": "md5",
        "uuid": "2c93d299-b50f-4648-b83a-aa8f5aa01284",
        "value": "c405cefd4edceb4a36054cb1c0f41bc6",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018729",
        "to_ids": true,
        "type": "md5",
        "uuid": "173fed9d-f4bd-481e-8dff-7eeacbe2f3ca",
        "value": "c46aec5c47fb0dde5554a2dd05e8559d",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018730",
        "to_ids": true,
        "type": "md5",
        "uuid": "7f289dde-b06a-437d-81e0-91ce7a82bda8",
        "value": "c49eb80e6409dd2c5dd8bf9c8a915ffb",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018731",
        "to_ids": true,
        "type": "md5",
        "uuid": "a3cf8683-9e35-48e8-b776-ce62688f181e",
        "value": "c533206b11b450c6455a2bfbd8485c77",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018732",
        "to_ids": true,
        "type": "md5",
        "uuid": "2558117b-02e1-440b-b740-0e161e3c38b1",
        "value": "c567111a2a68858f21a5f9f48e86528c",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018732",
        "to_ids": true,
        "type": "md5",
        "uuid": "9644cc31-defc-47c5-b139-8d73272a4c7f",
        "value": "c5e7616a16d0635c501cb60293a4d45f",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018734",
        "to_ids": true,
        "type": "md5",
        "uuid": "45da7aad-ba4a-450b-be19-2c8ef33ea659",
        "value": "c871b39d5d0fa53d76d0c810fe7f6474",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018734",
        "to_ids": true,
        "type": "md5",
        "uuid": "a53df181-1c5f-4ee1-975e-bd3ac8e6e4e2",
        "value": "c87a34470fcc87fb9c272152ba227f79",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018735",
        "to_ids": true,
        "type": "md5",
        "uuid": "badea86f-9283-4e8a-9568-4cd3ef98bc6a",
        "value": "c8f885d3632e7de96cb4c28460a27d97",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018736",
        "to_ids": true,
        "type": "md5",
        "uuid": "e1f6824c-163e-4bce-9f66-6452ef84793d",
        "value": "c9067bca2e306a73bdf7939f8ddaa007",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018737",
        "to_ids": true,
        "type": "md5",
        "uuid": "9b6cd34b-0378-488f-a832-6d0999a3d035",
        "value": "c91798dd9aa8459f56d982f8c5e4e8b8",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018738",
        "to_ids": true,
        "type": "md5",
        "uuid": "fd41a09d-c6b4-4436-aa56-d53b9b04cfe2",
        "value": "ca1b65ef500043a76c337aa7f33cd30e",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018739",
        "to_ids": true,
        "type": "md5",
        "uuid": "55b1e47d-08ce-4714-bae5-64c2bf4c8d98",
        "value": "ca5585d8d9f0d30b716b2553f170f94e",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018740",
        "to_ids": true,
        "type": "md5",
        "uuid": "cc460fc9-585f-473f-ad00-bee99809c418",
        "value": "ca8832916751190588f9c3dee1981528",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018741",
        "to_ids": true,
        "type": "md5",
        "uuid": "c2863560-3c13-401f-b91e-efc6cd264e5a",
        "value": "caae36772bad65ff4bdc191ff6dfc723",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018742",
        "to_ids": true,
        "type": "md5",
        "uuid": "1ba83aa7-94de-494a-bf47-3814a670e2ec",
        "value": "cadfa375a1dcd0c1f87a95d70421dcca",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018743",
        "to_ids": true,
        "type": "md5",
        "uuid": "2c572bef-f9a9-4d12-849a-93f8d87befa0",
        "value": "cb0564430deb24e362ea04574040c3b2",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018744",
        "to_ids": true,
        "type": "md5",
        "uuid": "f2191546-83ab-4106-ba80-0e4d719db8d0",
        "value": "cbe1617db9e943ef3b0ed36cf5a15725",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018744",
        "to_ids": true,
        "type": "md5",
        "uuid": "617825ae-c441-45fc-8ab0-e0f049869c4e",
        "value": "cd54868f055a22a131fe3e72a123af75",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018745",
        "to_ids": true,
        "type": "md5",
        "uuid": "6f1316ac-386c-45d5-8e80-d5b9c82b1a22",
        "value": "cdbfc48fb981a2c89763f8ba3f9688bc",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018746",
        "to_ids": true,
        "type": "md5",
        "uuid": "1e641502-ecef-45c6-92b1-af15142711c6",
        "value": "cdd905c81bc3b51bd66c18c875063957",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018747",
        "to_ids": true,
        "type": "md5",
        "uuid": "524938d0-624f-4fab-a11f-64c64ccd546f",
        "value": "ce58a0ef0c35f78d00faa19815cc1f2e",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018748",
        "to_ids": true,
        "type": "md5",
        "uuid": "a24c62f0-06aa-4644-8969-b9a4d1f2f3ee",
        "value": "cf5dd5a8c720710bc41e84cf36eaafcb",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018749",
        "to_ids": true,
        "type": "md5",
        "uuid": "ebd2946c-c8ba-4f34-ba93-5f673a0c80c6",
        "value": "cf80ae18b80400dcf86af6275dd6c75c",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018750",
        "to_ids": true,
        "type": "md5",
        "uuid": "518d0f00-e754-43a1-b935-b362d1660076",
        "value": "d0cfd5cf32cdeab97c415143c260be06",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018751",
        "to_ids": true,
        "type": "md5",
        "uuid": "2d23272e-e75b-4e9c-9225-fe5a2400901a",
        "value": "d18e2a296fd8c33ee761f9f2321b730e",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018753",
        "to_ids": true,
        "type": "md5",
        "uuid": "9662d832-8c62-4d40-8704-6cb9aa06c01c",
        "value": "d1c38c8a91a061b5e4b82c2e4a06c23d",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018753",
        "to_ids": true,
        "type": "md5",
        "uuid": "e30722d6-d753-4fd1-965d-2d2d67144370",
        "value": "d262d68fb4a81ff5ac56198192a75186",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018754",
        "to_ids": true,
        "type": "md5",
        "uuid": "bad9861c-9fc2-4636-91c3-9812061b60da",
        "value": "d27ce8bcb70ebcf4f7fa66837d104ddc",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018754",
        "to_ids": true,
        "type": "md5",
        "uuid": "25415596-b2f0-4455-81cd-c4cefe04d04d",
        "value": "d29f0f6d3cdd83cec8058c6684f9eac8",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018755",
        "to_ids": true,
        "type": "md5",
        "uuid": "5b2e6b6d-e727-4c94-a4bc-d86dcc48805e",
        "value": "d2d6fbd8d7f4d67f5cfcbdd44f9f6dee",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018756",
        "to_ids": true,
        "type": "md5",
        "uuid": "9f62547a-98c6-41b5-832c-353b1f938801",
        "value": "d31e110c9e7af9a7a2642a41e1d232bb",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018757",
        "to_ids": true,
        "type": "md5",
        "uuid": "2fe047e1-500e-4edb-8466-a052f0c8ba95",
        "value": "d4d23b842c6cf52b0bea1d6a57432cfa",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018758",
        "to_ids": true,
        "type": "md5",
        "uuid": "11550868-4352-4d5e-a41a-1443787bf8f0",
        "value": "d4dc054381d5dcfdf6a07519878aff1c",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018759",
        "to_ids": true,
        "type": "md5",
        "uuid": "f221954c-15c7-436b-b822-1ee4edce6870",
        "value": "d51c52bfc1847fb8dbaa865acd095ed3",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018760",
        "to_ids": true,
        "type": "md5",
        "uuid": "49097a4d-66af-4f8d-a568-d0e4330c15a4",
        "value": "d700ce5e78e6c1969e6adb3de8444fee",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018761",
        "to_ids": true,
        "type": "md5",
        "uuid": "c992f949-6eff-4fa8-9d8f-7864aa0786f0",
        "value": "d79557156be6741198ae873b5ecd30cc",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018762",
        "to_ids": true,
        "type": "md5",
        "uuid": "59d8e02a-afa7-4152-afc2-cb8e8972af32",
        "value": "d7ac5af95057311fcc244eb4398406ad",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#230087",
            "local": false,
            "name": "rectifyq:samples-found-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018763",
        "to_ids": true,
        "type": "md5",
        "uuid": "a9d69605-1b13-41a2-badc-3d17c8062676",
        "value": "d7e8b0e4f3db34e742f2136092f74537",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018764",
        "to_ids": true,
        "type": "md5",
        "uuid": "ff9eb3dd-cba5-41e1-83e6-959680c497b0",
        "value": "d8fc998019029bdc7f9eb97112a090b7",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018765",
        "to_ids": true,
        "type": "md5",
        "uuid": "784446ee-197d-4a7c-8af3-631c5157b128",
        "value": "dbc613b1ad098830949f16f1f02987ee",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018765",
        "to_ids": true,
        "type": "md5",
        "uuid": "315ea71e-586c-471c-a7a8-d38a1b71cf43",
        "value": "dc5f620720a42a8f463a63275194e920",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018766",
        "to_ids": true,
        "type": "md5",
        "uuid": "37c120c6-7457-4e17-8b30-98c3aeedfb38",
        "value": "dccf50b0e8b7f84e8602d228a4014785",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018767",
        "to_ids": true,
        "type": "md5",
        "uuid": "4acc63cc-8549-4ebe-bdbb-a50567199dfc",
        "value": "dcdae7083a51dc2ac01b10a21657519b",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018768",
        "to_ids": true,
        "type": "md5",
        "uuid": "13ded003-311e-4b2d-98db-3d492b593066",
        "value": "dd1b1b1173a95fc74cc395967a39fd0d",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018769",
        "to_ids": true,
        "type": "md5",
        "uuid": "d1c8ff80-1784-4bcd-9d27-82e10e9e7d76",
        "value": "dd6b047b2ad2cedabc0b948de82ca6a4",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018769",
        "to_ids": true,
        "type": "md5",
        "uuid": "68403490-3992-4aea-bb4d-ecb30e83638f",
        "value": "ddb39476a40bb64efba7e38cca2ecf12",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018770",
        "to_ids": true,
        "type": "md5",
        "uuid": "6802e35f-f201-4ef5-9316-bae871a80df3",
        "value": "deb10b5587bb2b7587403c9ec0565ffe",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018771",
        "to_ids": true,
        "type": "md5",
        "uuid": "47268de2-0539-404f-b733-823a354e4473",
        "value": "df6a030473ca06215a71252d5eb33233",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018772",
        "to_ids": true,
        "type": "md5",
        "uuid": "420b536a-9b05-4801-b06b-b679f1568bb9",
        "value": "e01626d730bab0f1faf84bdb0f1bfae9",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018773",
        "to_ids": true,
        "type": "md5",
        "uuid": "38c6c746-c0b5-43b0-910a-c3cd7bbf073c",
        "value": "e03f4aa83af24dc4305625b9628cb14c",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018774",
        "to_ids": true,
        "type": "md5",
        "uuid": "184bf00c-33e3-4d0a-930e-b3cf17f6a5b1",
        "value": "e08951f779327d549bdf154742efbf73",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018775",
        "to_ids": true,
        "type": "md5",
        "uuid": "9ea80d07-6bc4-4b3b-bcd0-c950dc2c332c",
        "value": "e0895d808d8af5690add2bbcb079f378",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018776",
        "to_ids": true,
        "type": "md5",
        "uuid": "32dcd19c-0a42-4062-bf07-e226a3cc0f39",
        "value": "e1d2ab9d9cb6ff4e8e6263bd14080545",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018777",
        "to_ids": true,
        "type": "md5",
        "uuid": "d085cca7-3360-4b88-98d5-1b38f9b07b27",
        "value": "e2c35b36374c8b4d616c030b9fe90807",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018777",
        "to_ids": true,
        "type": "md5",
        "uuid": "ca9fe71b-4ab8-4623-8207-db3592f5c52d",
        "value": "e3af46f984c7942528852e17f5f2d2a8",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018778",
        "to_ids": true,
        "type": "md5",
        "uuid": "5569738a-c964-4abc-8061-48b893be4131",
        "value": "e45b966ff73f7be9da3cc682ff9602f1",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018779",
        "to_ids": true,
        "type": "md5",
        "uuid": "a5fa23f5-3388-4955-92b1-ab56412f2620",
        "value": "e491ef9cbeac07a5155b37bd4a0764f3",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018779",
        "to_ids": true,
        "type": "md5",
        "uuid": "621a5daf-855d-422e-8fd7-5090a25f5e32",
        "value": "e5649d7d85585c0aa27bf07bdbac15df",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018780",
        "to_ids": true,
        "type": "md5",
        "uuid": "a12ae5a5-a6b7-49e9-a290-d6ba9ac4cda1",
        "value": "e5a8fb118148ba1e885434a96c8ceefc",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018781",
        "to_ids": true,
        "type": "md5",
        "uuid": "fb442d3b-ed3f-41c9-ac86-0878ccc28052",
        "value": "e6022507c6e05484753b6adde61ec4bb",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018782",
        "to_ids": true,
        "type": "md5",
        "uuid": "0fdc14c5-ce15-4466-bc31-82e133fe1b5b",
        "value": "e721956d2f0d0211e3d88d1537c6955c",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018783",
        "to_ids": true,
        "type": "md5",
        "uuid": "cb522cbd-d897-4b84-88c5-b4c323ce4dda",
        "value": "e7a4be287d7ea92cdae61c93dccfc24f",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#230087",
            "local": false,
            "name": "rectifyq:samples-found-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018784",
        "to_ids": true,
        "type": "md5",
        "uuid": "61db4597-9cc0-4605-8f69-0d6487413b57",
        "value": "e8a29ec548ff393bd0ee543299056080",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018785",
        "to_ids": true,
        "type": "md5",
        "uuid": "fc7812fe-8b61-4326-94e3-b9b60181123f",
        "value": "e9056c9998f9652c7dcfed00386075fe",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018786",
        "to_ids": true,
        "type": "md5",
        "uuid": "2e1c3ae5-5b82-46ea-b54a-ddf5a086271b",
        "value": "e95f5485ee5a321f2169bc909c418e2c",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018787",
        "to_ids": true,
        "type": "md5",
        "uuid": "0ecc5fe4-7d42-455b-9882-b8e217e22d81",
        "value": "ea73f3ea88cf4f07a9805525f0866b99",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018787",
        "to_ids": true,
        "type": "md5",
        "uuid": "cc22c5b3-fea5-430d-9bcd-a00da02578f3",
        "value": "ebc47848f5bb006e664621e12092b942",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018789",
        "to_ids": true,
        "type": "md5",
        "uuid": "d48caf10-0ce5-4968-8f57-95f56110ed31",
        "value": "ec192c8882ada85039fc415c1b7a964b",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018789",
        "to_ids": true,
        "type": "md5",
        "uuid": "9e14fa84-4cbd-42ad-978f-f08496e5338b",
        "value": "ec476b15640f29ea7bc33119fade3c2b",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018790",
        "to_ids": true,
        "type": "md5",
        "uuid": "6e5b882a-8a18-40a8-9ee4-4f12839e9cb0",
        "value": "ecf36c53a88f5f0ad22b704182aa69a6",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018792",
        "to_ids": true,
        "type": "md5",
        "uuid": "1e0fd519-46d0-4889-9b7a-579861e0844d",
        "value": "ed524fcda728fe61a9be769222906728",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018793",
        "to_ids": true,
        "type": "md5",
        "uuid": "2b270c2c-f6c5-49e2-8222-d35675f3b37a",
        "value": "ed841836a1bb746a2a2bb2c4ce4efb29",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#230087",
            "local": false,
            "name": "rectifyq:samples-found-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018793",
        "to_ids": true,
        "type": "md5",
        "uuid": "6941d90f-18f5-4600-ab46-c76901654391",
        "value": "ee1ca3d22e4df7bd1f64a39f2703fc14",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018794",
        "to_ids": true,
        "type": "md5",
        "uuid": "eca4f231-f45f-4837-b5df-1cc7963423b1",
        "value": "eed2208166746d8b2fa8315954c5314c",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018796",
        "to_ids": true,
        "type": "md5",
        "uuid": "536b4a59-6962-4c30-9cde-a5430c7f49d5",
        "value": "ef7125f3fab34d050e389cb536c85ba6",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018797",
        "to_ids": true,
        "type": "md5",
        "uuid": "bc99967e-92eb-4a2d-a503-f0de2e68a504",
        "value": "f005b65fc2cf0a138477888fe846a797",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018797",
        "to_ids": true,
        "type": "md5",
        "uuid": "3a53078a-b004-4ac5-9eff-cd7d00bee0c5",
        "value": "f04cc5d21e1f9aca5230934b41ab7dea",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018799",
        "to_ids": true,
        "type": "md5",
        "uuid": "2ba9736a-743b-4f54-b90f-a9919c477050",
        "value": "f1c27e42444a1591f804b68dc98c5462",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018800",
        "to_ids": true,
        "type": "md5",
        "uuid": "4357dd70-db69-4f1e-9729-824374482745",
        "value": "f2e01388937cc1943091a4d2d71012e1",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018801",
        "to_ids": true,
        "type": "md5",
        "uuid": "07ac0d9c-a38e-4288-8f66-b2108b6814f0",
        "value": "f3c30e5bc4ac6105156f33302da3f41f",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018802",
        "to_ids": true,
        "type": "md5",
        "uuid": "e9510a68-7293-4bb8-9a06-cbae91af9935",
        "value": "f3d803a0fbfa2cac416b15569e8afa65",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018803",
        "to_ids": true,
        "type": "md5",
        "uuid": "2a258aa1-2ee4-4f52-ab9a-adac63935299",
        "value": "f44a50cc405d49ca186a96035c99a00d",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018803",
        "to_ids": true,
        "type": "md5",
        "uuid": "48618b18-34d8-4b55-bd9c-d82b982a9318",
        "value": "f460fae2b080bf24238f6a34a7e1a4e4",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018804",
        "to_ids": true,
        "type": "md5",
        "uuid": "3d61d39c-21b7-4eaa-91d8-2392c4590559",
        "value": "f4ae244fd0fdae7129b8d56bcf59462b",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018805",
        "to_ids": true,
        "type": "md5",
        "uuid": "2af0de62-4106-4a8e-a204-52b20d017723",
        "value": "f51e4ef59ef6019c69b579dfab122d70",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018806",
        "to_ids": true,
        "type": "md5",
        "uuid": "fec60024-1d74-43a4-949a-1bec9478f9a9",
        "value": "f5341d89e4cc6674ba9ca108f7813c46",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018807",
        "to_ids": true,
        "type": "md5",
        "uuid": "7aac6cfb-5ba8-48ac-94a5-0505b87b339e",
        "value": "f5e2313921259be6e08c8650eaed7653",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018807",
        "to_ids": true,
        "type": "md5",
        "uuid": "cdd006f9-3b7b-49c9-834f-fa97010a386c",
        "value": "f6b200d664e11528a45053b2291bab0b",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018808",
        "to_ids": true,
        "type": "md5",
        "uuid": "937a9a6c-7ede-4b7b-af46-d5e588b5aca0",
        "value": "f6dca0dd83c50ca96fde1c4217b8bcb9",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018809",
        "to_ids": true,
        "type": "md5",
        "uuid": "7ce21948-f2f8-432c-88a6-6586e07e6fdf",
        "value": "f7319ddc9667ade201708eb05c5fbbff",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#230087",
            "local": false,
            "name": "rectifyq:samples-found-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018810",
        "to_ids": true,
        "type": "md5",
        "uuid": "c7346731-af76-43af-b372-e350e9405941",
        "value": "f7e14f897e6f2cf0248d68423e21cee8",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018811",
        "to_ids": true,
        "type": "md5",
        "uuid": "a76d163e-d9e7-4b81-b97c-7e00fc1e4c77",
        "value": "f7e6c1673d8c2cad36902fe5f04f3bf6",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018811",
        "to_ids": true,
        "type": "md5",
        "uuid": "342f772a-0e42-4517-8a75-182062639e2e",
        "value": "f87455bbf992c22733e8120e0b291fcd",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018812",
        "to_ids": true,
        "type": "md5",
        "uuid": "9a304060-db97-4b09-ae0c-c043283fc8ae",
        "value": "f88ab3110b90a2d3864a74acb0e30266",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018812",
        "to_ids": true,
        "type": "md5",
        "uuid": "2d36eeb2-b0cb-45d3-ae0b-a4580fda5717",
        "value": "f8c6b89106c724a03fc417b0bfd716d9",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018813",
        "to_ids": true,
        "type": "md5",
        "uuid": "c741a826-c490-479e-b831-b3e137ae2165",
        "value": "f8d03c8c2903647f110efb30773da023",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018814",
        "to_ids": true,
        "type": "md5",
        "uuid": "0aa4b925-3066-43f7-a215-0b2bf1d22697",
        "value": "f9354aaf304de3d9628db1a566153947",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018815",
        "to_ids": true,
        "type": "md5",
        "uuid": "d34fdc02-b63b-4bb3-bb97-6a3411e0ecdf",
        "value": "f94a48f46f04eb09945cfc1e65ca2e58",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018816",
        "to_ids": true,
        "type": "md5",
        "uuid": "140f077e-2982-4cfb-9583-1da998042336",
        "value": "fa92cd49768ac818ce11653eb45fcbfb",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018817",
        "to_ids": true,
        "type": "md5",
        "uuid": "ef871a8a-937d-446e-92e6-bef2a51749b7",
        "value": "fc2621b11d18482b458300a986a7233e",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018818",
        "to_ids": true,
        "type": "md5",
        "uuid": "a112d581-19e6-40d1-88a3-4cd26a5770a4",
        "value": "fcbeea34198517368993b2a5dce43285",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018819",
        "to_ids": true,
        "type": "md5",
        "uuid": "6e71b59b-0175-4b3d-b4c8-adda1259f7da",
        "value": "fd09c86e6144338f6c7ec7977450fc3e",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018820",
        "to_ids": true,
        "type": "md5",
        "uuid": "42cf7e50-5ca8-4144-a368-a2a8ea4ef96a",
        "value": "fe20b16b8bc7a925ed142e8d236629fc",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018820",
        "to_ids": true,
        "type": "md5",
        "uuid": "be98bbe6-873d-453c-a31b-02036ebf9477",
        "value": "fe5f7495b119363048b9700bdde2ff2d",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018821",
        "to_ids": true,
        "type": "md5",
        "uuid": "17ed89bb-048d-4640-9835-8b2e37c1af4b",
        "value": "fefe5c8999d31ee4861906ed260445ac",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018822",
        "to_ids": true,
        "type": "md5",
        "uuid": "54e00b60-1962-4319-9eaf-1ab620b0ffab",
        "value": "ff0c23c5d6913ae58b0580240e86a42c",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 80",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721323",
        "to_ids": true,
        "type": "url",
        "uuid": "7f465f61-4dc3-4645-923e-7004de626bbf",
        "value": "http://217.156.122.12/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 80",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721345",
        "to_ids": true,
        "type": "url",
        "uuid": "8f3534c8-368b-46e3-a6f0-bccc34f7b9f7",
        "value": "http://217.156.122.57/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 1378",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721366",
        "to_ids": true,
        "type": "url",
        "uuid": "35eef00b-5b14-48f3-a2cf-cd7d871601d8",
        "value": "http://217.156.122.75/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 80",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721387",
        "to_ids": true,
        "type": "url",
        "uuid": "63cd4cb1-e1c6-4b9e-98ee-a20ffd995026",
        "value": "http://45.151.106.110/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 80",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721408",
        "to_ids": true,
        "type": "url",
        "uuid": "b0b5dd04-f9fb-4f86-ae06-4ebad5be4446",
        "value": "http://80.97.160.155/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 80",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721429",
        "to_ids": true,
        "type": "url",
        "uuid": "26bf297d-296d-4852-910b-014369a14af0",
        "value": "http://86.107.168.103/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 28313",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721450",
        "to_ids": true,
        "type": "url",
        "uuid": "c959bf50-dbc2-4e71-a847-8638d0b217bd",
        "value": "http://94.231.205.229/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 6573",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721471",
        "to_ids": true,
        "type": "url",
        "uuid": "fc14f641-9e67-4668-8426-ea9c6e43c7df",
        "value": "http://adveryx.biz/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 5902",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721492",
        "to_ids": true,
        "type": "url",
        "uuid": "a9e27645-8c6e-47cb-ba1f-422f5184d925",
        "value": "http://backbou.biz/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721514",
        "to_ids": true,
        "type": "url",
        "uuid": "7504aa03-430e-4761-8d2b-c754ae6d5a13",
        "value": "http://baxe.pics/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 9592",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721535",
        "to_ids": true,
        "type": "url",
        "uuid": "1bdf2f21-3c38-4734-9177-115c2789f66d",
        "value": "http://borscer.biz/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721556",
        "to_ids": true,
        "type": "url",
        "uuid": "128a2f6f-4a24-427a-a9e0-326c8a110a3c",
        "value": "http://buccstanor.pics/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 5902",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721577",
        "to_ids": true,
        "type": "url",
        "uuid": "e617e969-2849-415b-89d3-532b2aacdad6",
        "value": "http://chalx.live/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 4219",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721599",
        "to_ids": true,
        "type": "url",
        "uuid": "c261bca3-8b37-4143-aaff-7106f471ebd1",
        "value": "http://chromap.biz/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 28313",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721620",
        "to_ids": true,
        "type": "url",
        "uuid": "83b25e18-b742-4bf1-8139-36783b9c58d4",
        "value": "http://coox.live/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 4192",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721642",
        "to_ids": true,
        "type": "url",
        "uuid": "7e19eeed-7e58-4748-8efd-49a40ef16802",
        "value": "http://drymoge.biz/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 6290",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721663",
        "to_ids": true,
        "type": "url",
        "uuid": "99d217b6-e591-4923-9a19-1b2798374635",
        "value": "http://forestoaker.com/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 48261",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721684",
        "to_ids": true,
        "type": "url",
        "uuid": "ca96b0e2-7608-4c52-8eae-1966b1cdf227",
        "value": "http://gluckcreek.online/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 9592",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721705",
        "to_ids": true,
        "type": "url",
        "uuid": "9875b4d9-f56c-42b4-ba4e-0f50f7ab5bbf",
        "value": "http://intem.lat/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 7481",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721726",
        "to_ids": true,
        "type": "url",
        "uuid": "b36a66c0-732c-4a89-992f-cad827508995",
        "value": "http://interxo.biz/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 8521",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721748",
        "to_ids": true,
        "type": "url",
        "uuid": "82444de0-a403-4d1e-935c-b18318110a36",
        "value": "http://josegza.biz/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 28982",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721769",
        "to_ids": true,
        "type": "url",
        "uuid": "f5782bc4-fcba-4a10-974c-fb072e758d04",
        "value": "http://krondez.com/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 3989",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721791",
        "to_ids": true,
        "type": "url",
        "uuid": "e5e1343e-a7b7-45bb-a3b7-8b49c68e2d7f",
        "value": "http://lazzo.bet/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 5902",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721812",
        "to_ids": true,
        "type": "url",
        "uuid": "1f2deabf-5f08-4daf-9492-33eda3c5357f",
        "value": "http://managew.biz/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 3201",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721833",
        "to_ids": true,
        "type": "url",
        "uuid": "a9c19da1-7ecc-4eba-986a-c5d15bb9f931",
        "value": "http://navelum.biz/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 6782",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721854",
        "to_ids": true,
        "type": "url",
        "uuid": "00094207-b86c-44f6-b532-a7afdb0375b2",
        "value": "http://nitroca.biz/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 4895",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721876",
        "to_ids": true,
        "type": "url",
        "uuid": "e4dd2b7f-6030-4b58-9c88-e9c49aa2b6d6",
        "value": "http://outcrol.biz/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 4219",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721898",
        "to_ids": true,
        "type": "url",
        "uuid": "155d0c1b-45f4-4239-a999-fc517cd5f08c",
        "value": "http://padaz.pics/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 3989",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721919",
        "to_ids": true,
        "type": "url",
        "uuid": "c1f6b370-b761-4a56-803e-7ac50569fc19",
        "value": "http://parky.pics/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 2039",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721941",
        "to_ids": true,
        "type": "url",
        "uuid": "669c69dc-1dc2-457b-b256-7590d98afd27",
        "value": "http://prickaz.biz/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 5692",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721962",
        "to_ids": true,
        "type": "url",
        "uuid": "8dde9fd3-e96c-4318-9764-90ba11bd7daa",
        "value": "http://remnane.biz/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 28313",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776721983",
        "to_ids": true,
        "type": "url",
        "uuid": "7275244b-2dc7-4825-852f-4a6e57898922",
        "value": "http://ropea.top/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 7481",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776722004",
        "to_ids": true,
        "type": "url",
        "uuid": "609d2d1f-d9c0-43b3-8dbc-fc901456a1ef",
        "value": "http://siltsoh.biz/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 3849",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776722025",
        "to_ids": true,
        "type": "url",
        "uuid": "7d6f96bd-d21e-4c80-8214-5c097bd0b6be",
        "value": "http://texakgi.cloud/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776722046",
        "to_ids": true,
        "type": "url",
        "uuid": "04d4a755-e431-46e5-85df-ad36c3ab7646",
        "value": "http://vinte.online/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 7821",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776722068",
        "to_ids": true,
        "type": "url",
        "uuid": "ad23da99-1dbc-4852-8e12-36521955d919",
        "value": "http://woodena.biz/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "On port 4219",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776722090",
        "to_ids": true,
        "type": "url",
        "uuid": "3332cd43-d02d-438c-a165-b975f4279a94",
        "value": "http://zadno.run/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776722111",
        "to_ids": true,
        "type": "url",
        "uuid": "91931dcb-ab25-44e7-bf62-1d35c8b5d277",
        "value": "https://cheekiez.biz/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776722132",
        "to_ids": true,
        "type": "url",
        "uuid": "c3aaf5a5-0536-49fe-abb1-64582f63c167",
        "value": "https://nobleckly.biz/",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776018823",
        "to_ids": true,
        "type": "sha256",
        "uuid": "53a09168-e482-41da-b6f2-b5894befadaa",
        "value": "dfbeab30d14df9104a95de83ab4690308c653eb0c3706554687c45a77adc1385",
        "Tag": [
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1776720641",
        "to_ids": true,
        "type": "url",
        "uuid": "0b3b14b2-7856-49e6-a899-1e6b31726287",
        "value": "https://steamcommunity.com/profiles/76561199861614181",
        "Tag": [
          {
            "colour": "#2c2142",
            "local": false,
            "name": "false-positive:risk=\"high\"",
            "relationship_type": ""
          },
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      }
    ],
    "Object": [
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776040901",
        "uuid": "4d421e97-b6bd-449d-ae58-6e50c10c5c85",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776040901",
            "to_ids": true,
            "type": "md5",
            "uuid": "76e3f1c6-081a-4565-ace4-b10e1f8acbb9",
            "value": "2d887094c698f2a92e836b144ec7e319",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018394",
            "to_ids": true,
            "type": "sha1",
            "uuid": "1c6a3c72-e063-43e3-8888-09ae2434c49e",
            "value": "99e3ac73b518c0c4cf0e30e89a715d19e8977687",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018394",
            "to_ids": true,
            "type": "sha256",
            "uuid": "460abab8-ea0f-4b32-a404-6c35680f177d",
            "value": "002f714f93bed53f165129a820c2d5b72227f1cafac43be19e5e223ce219a5e1",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776011030",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "3626273e-346e-4751-bff4-27ae817cc936",
            "value": "6144:PRtWx3+DR8h4FByCVmCAoD7j0TaOVALfBicDmEr+MGLz+Z:GV+DWqFBj8I0TtVAjBJDmEaMGHm"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776011030",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "7e3c39f6-1d09-4bb0-a9ba-e5eaf0389859",
            "value": "382345"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776011030",
            "to_ids": true,
            "type": "vhash",
            "uuid": "c1497ae2-b1e4-4ef4-bc4e-decacaa82adf",
            "value": "0350466d6d1d17z91z72z2a1z7045z23z7fz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776011030",
            "to_ids": true,
            "type": "filename",
            "uuid": "0c99d301-403b-417c-807d-f4cd189641ed",
            "value": "lht4nb0.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  16/11/2025",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776011030",
            "to_ids": false,
            "type": "text",
            "uuid": "e1a2bd30-05fa-4a04-bb65-9cf63d01b68a",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/LummaStealer.GAPI!MTB\nVT Total Detection:40/72\nFirst Submission:2025-11-16T01:20:48.000000+00:00\nLast Submission:2025-11-16T01:20:48.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776040922",
        "uuid": "e789e49f-c5e9-42ff-b967-08615e94c088",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776040922",
            "to_ids": true,
            "type": "md5",
            "uuid": "0d28eda2-701f-47b8-88e8-28572504d085",
            "value": "810a6ff1fa3ec467ad9e9bd565a2d533",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018395",
            "to_ids": true,
            "type": "sha1",
            "uuid": "230d458a-2934-4ef0-9e2a-c2c9ff0e5881",
            "value": "d1d019a9316c04eb89ac26d2f3ceae9ac3987c8f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018395",
            "to_ids": true,
            "type": "sha256",
            "uuid": "f770b20c-f3d6-41f9-a5a0-377fb0caef9b",
            "value": "066c4ab954fc1270ee62c0d7c582c4c691e58e0ffef0c654bc204a46e440d16d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776011072",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "6f7de8a0-e85c-4b88-bbdf-0b2b62b5d84f",
            "value": "6144:i2/lLQy+IMnmIh8ly48KUjOt3WAfBaST0NpGPA1:fJtyHhS85St3WApaST0OPA1"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776011072",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "b17adf17-a02a-42d8-9b65-70ca4ef8eb36",
            "value": "312832"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776011072",
            "to_ids": true,
            "type": "vhash",
            "uuid": "da8000da-ec13-42c6-a96c-00d6f8818785",
            "value": "0350466d6d058z91z77z7045z23z7fz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776011072",
            "to_ids": true,
            "type": "filename",
            "uuid": "cb00d7aa-b393-4721-a95f-aeda11c18489",
            "value": "yh8pdsx.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  16/02/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776011072",
            "to_ids": false,
            "type": "text",
            "uuid": "a43117b9-1faa-445c-be9b-a254c513caa1",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/LummaStealer.GPT!MTB\nVT Total Detection:48/72\nFirst Submission:2026-02-16T03:06:46.000000+00:00\nLast Submission:2026-02-16T03:06:46.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776040943",
        "uuid": "18d15340-b6c7-475f-addd-42d4156c5bd1",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776040943",
            "to_ids": true,
            "type": "md5",
            "uuid": "0ef69c75-c0a3-4fb9-b362-596b604ab65e",
            "value": "62daf4f1c172e2be8d9b2eebb236a81d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018395",
            "to_ids": true,
            "type": "sha1",
            "uuid": "177cfd1d-1f8b-43d9-a36b-720ddf601f76",
            "value": "2ed3ff269353eb86867c5f1e6a25e36806988598",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018395",
            "to_ids": true,
            "type": "sha256",
            "uuid": "98368173-d82e-484b-acdc-df3b53a03f8d",
            "value": "0a8f734f10400f7ae8fef591147e78dab6350089683be84c1cb6c82113cb1319",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776011115",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "4a9cf368-03b8-4280-b058-b308377e651e",
            "value": "3072:Mq0RV1RNu5qrc9hitBQU22Wc4F9XdmiBynoMRyDEP1:V0VBrcLitmDVX0iyo2t"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776011115",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "a8f41ab2-a2d0-4831-847d-1c74129ce37c",
            "value": "228352"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776011115",
            "to_ids": true,
            "type": "vhash",
            "uuid": "40341a80-4f7d-408b-87b6-94518963734e",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776011115",
            "to_ids": true,
            "type": "filename",
            "uuid": "15d8c722-60ca-4662-8a3a-7424b9023f01",
            "value": "oo7fxioqi.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  12/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776011115",
            "to_ids": false,
            "type": "text",
            "uuid": "93564c32-a0bb-41d3-b36a-fd06ce116f72",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Lazy.RR!MTB\nVT Total Detection:51/72\nFirst Submission:2026-04-06T13:32:08.000000+00:00\nLast Submission:2026-04-06T13:32:08.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776040965",
        "uuid": "cd6e3b5a-b6a7-4998-a6b4-25275ea50740",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776040965",
            "to_ids": true,
            "type": "md5",
            "uuid": "95b03ded-7fcb-4e09-963f-75fc811cbeec",
            "value": "3630a824324aa896c9cc0485c9c74f82",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018396",
            "to_ids": true,
            "type": "sha1",
            "uuid": "87bfab30-a41d-4201-8894-92949dd7d0f6",
            "value": "6029236672c2e749e634ad10d8ecf1fff290095b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018396",
            "to_ids": true,
            "type": "sha256",
            "uuid": "3bef4a6e-5d38-4577-adf2-254e2d5c24aa",
            "value": "64db10e76b46be8db36e02993d36559bc3f86606c9ea955731872b716c8f0c69",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776011200",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "5386763b-f8b5-4ece-826d-e01f2db88e19",
            "value": "3072:dtDPL086KvAq6wHgG08mEthZs6siURap6lYa/:Pz08pYq5tlthZseo"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776011200",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "34e6aac6-a562-4bb9-83a1-785df48b2e91",
            "value": "228864"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776011200",
            "to_ids": true,
            "type": "vhash",
            "uuid": "39cf7b96-b16a-4db4-b030-660373cc9755",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776011200",
            "to_ids": true,
            "type": "filename",
            "uuid": "63511753-4552-44d4-9ae4-d8e7f6d0b25a",
            "value": "j4cjbskx.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  12/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776011200",
            "to_ids": false,
            "type": "text",
            "uuid": "b681b5b9-189a-4770-b83d-1b4d5e069cb9",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Lazy.RR!MTB\nVT Total Detection:52/72\nFirst Submission:2026-03-26T17:22:02.000000+00:00\nLast Submission:2026-03-26T17:22:02.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776040986",
        "uuid": "32266e9f-1f80-48e4-9ed4-a148fb79bb66",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776040986",
            "to_ids": true,
            "type": "md5",
            "uuid": "6001c2ef-722f-4b36-90a5-16e889537ccd",
            "value": "488a59b9509acdfa5102d02442fa0c2a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018398",
            "to_ids": true,
            "type": "sha1",
            "uuid": "d3a532cb-5698-4c12-ab1e-12253e842496",
            "value": "c86369dee1ac46f25ce8571dee55abc43e27045a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018398",
            "to_ids": true,
            "type": "sha256",
            "uuid": "0ef59643-2dbc-4e91-b80a-34e091c1eb78",
            "value": "788b56e9be2f1dd6a977dce0265f293ab42d3e8ffb287ab584e169fbf115da1f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776011222",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "bc3a4fe6-d1a5-4653-85b9-a833ce9e4cd7",
            "value": "6144:epFJxVbqzn7nZsdAzjOj2lvF8EIur4oyqYY:etxVbqYQlvFE"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776011222",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "1580c5d6-a323-4f86-ab0e-9040538cc5fd",
            "value": "205312"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776011222",
            "to_ids": true,
            "type": "vhash",
            "uuid": "2b99d8d9-a7b7-4647-975e-a440c5b7b263",
            "value": "0250466d5d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776011222",
            "to_ids": true,
            "type": "filename",
            "uuid": "2747d1ac-82e5-490f-b40c-fd7b4dc1f8f1",
            "value": "0umf4ljla.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  12/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776011222",
            "to_ids": false,
            "type": "text",
            "uuid": "c00934f9-32b8-463f-854b-3d95285b9079",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Lazy.RR!MTB\nVT Total Detection:47/72\nFirst Submission:2026-02-24T18:08:27.000000+00:00\nLast Submission:2026-02-24T18:08:27.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041007",
        "uuid": "eb7b5b45-a947-4fcc-b5e6-812307bb1ba5",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041007",
            "to_ids": true,
            "type": "md5",
            "uuid": "49289a25-48cc-4939-810e-62affda0f261",
            "value": "57a0c10c90be51183c4fa53694d3a5b3",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018398",
            "to_ids": true,
            "type": "sha1",
            "uuid": "326cc21f-4256-47b9-8aef-480e7d523ce4",
            "value": "15458d95d93f9afb6168693a37e9bcfc6e219c37",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018399",
            "to_ids": true,
            "type": "sha256",
            "uuid": "d424be0c-d7b1-4060-a73c-a8a1ccc0775b",
            "value": "a4f111e5425690fcd384c62ecb5b57b0f645925572af3541748e01d810cd2b40",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776011287",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "72541af9-b805-4ec9-bfe3-729ae3f2ce85",
            "value": "3072:2y+NC+3FGCgIuXHbTZvQJoUaCSC0CwMQv7PfyeLZlwABcJwmzr:oDPgIuXHnZQyUSC/5ubfhce"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776011287",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "7314cd9b-30e5-4612-93f2-fab75c74daf2",
            "value": "223744"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776011287",
            "to_ids": true,
            "type": "vhash",
            "uuid": "b95d2107-b7d8-4404-98b3-8d88ef82f4bb",
            "value": "0250466d7d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776011287",
            "to_ids": true,
            "type": "filename",
            "uuid": "13e994ed-d1d7-4841-ac5c-b3e5507dbe54",
            "value": "46jyoa6rg.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  10/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776011287",
            "to_ids": false,
            "type": "text",
            "uuid": "bae630d8-203b-4b57-b282-183941a434c6",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Lazy.RR!MTB\nVT Total Detection:53/72\nFirst Submission:2026-03-09T01:39:23.000000+00:00\nLast Submission:2026-03-09T01:39:23.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041028",
        "uuid": "aa31c6dd-92ba-4ef6-84b5-f51fed147194",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041028",
            "to_ids": true,
            "type": "md5",
            "uuid": "dae54ff4-c365-4490-a016-4c3dedca8fcb",
            "value": "9591dbea7896dbf201ec5472295d17ac",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018400",
            "to_ids": true,
            "type": "sha1",
            "uuid": "659d7d25-ebe0-490c-b42f-704d13b5982c",
            "value": "fe0989b5e9eed201779a942f6d5eb91f362eba1d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018400",
            "to_ids": true,
            "type": "sha256",
            "uuid": "60a4734a-5638-4b15-bcf4-60898f922cb8",
            "value": "ab2e47720388fa201e242552f8d8b82363c6c52f6c63fa3fec9dce027cb12e77",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776011309",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "7e16844e-932b-4ce0-8a65-8d08f3a12f78",
            "value": "3072:2ZcVQT0bdnlqIG7tOvwOq808vefxxlMdipe3t1MfSxt0aR:LyQiAzq8Le5mi0hM"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776011309",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "614701f7-55c7-4e3b-b8eb-acce37b82f36",
            "value": "223232"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776011309",
            "to_ids": true,
            "type": "vhash",
            "uuid": "6f83b709-48cc-4a41-ad02-efac8af3bde2",
            "value": "0250466d7d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776011309",
            "to_ids": true,
            "type": "filename",
            "uuid": "b2784273-199b-43e4-ba08-08e44356db58",
            "value": "2k9tzmmd.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  11/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776011309",
            "to_ids": false,
            "type": "text",
            "uuid": "f9d28180-cafe-4492-9d74-f59278e88679",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Lazy.RR!MTB\nVT Total Detection:49/72\nFirst Submission:2026-03-16T11:50:37.000000+00:00\nLast Submission:2026-03-16T11:50:37.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041049",
        "uuid": "b706559e-8d49-4fde-8b8d-e5a238a69c6e",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041049",
            "to_ids": true,
            "type": "md5",
            "uuid": "2eb516d2-507b-4a62-9fe2-62b2d55b3abc",
            "value": "64e6bf67fae7ae0e2f52d6261043d404",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018401",
            "to_ids": true,
            "type": "sha1",
            "uuid": "cc09c71c-efe6-49df-9c52-3218505e0f95",
            "value": "8ebc22eedcf40638e541d6f0e44b592367e3d888",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018401",
            "to_ids": true,
            "type": "sha256",
            "uuid": "e87dba88-d0bb-48e1-9080-ced90bccac45",
            "value": "b037fa1dd769891b538d9ca26131890c93e3458eec96c5354bdebe50d04a5b3d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776011331",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "435e1573-dc8c-4ac0-8618-85ec96caefcd",
            "value": "6144:3ywAQrRZ5IejKR5IL61QgwYa6QaFWaaNek8wpDM1i5ZjkpXxz766agpjyEqM:i8LCT5wYaTaFWaaNe9AM1kZjkpGg8"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776011331",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "b6aabb22-f9d2-4356-80a0-42c27ce33977",
            "value": "330240"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776011331",
            "to_ids": true,
            "type": "vhash",
            "uuid": "2e583a8e-0506-4b05-bfb7-197fdd017be2",
            "value": "0350466d6d5567z91z97z7045z13z7fz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776011331",
            "to_ids": true,
            "type": "filename",
            "uuid": "cd534d41-28f7-4559-b548-7794cd3b4650",
            "value": "ytq27fmcp.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  09/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776011331",
            "to_ids": false,
            "type": "text",
            "uuid": "a539764c-aa93-441e-8af1-fdc0830c4ca0",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win64/LummaStealer.AO!AMTB\nVT Total Detection:58/72\nFirst Submission:2026-03-25T04:46:16.000000+00:00\nLast Submission:2026-03-25T04:46:16.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041071",
        "uuid": "0c1b66b2-c05b-456e-9fbf-c028e89ea079",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041071",
            "to_ids": true,
            "type": "md5",
            "uuid": "92db2316-439b-4988-9339-291d3a882111",
            "value": "876c34867aa77cfb676577e70e5108ad",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018402",
            "to_ids": true,
            "type": "sha1",
            "uuid": "ae2304e5-a195-4b33-8049-bf6fb0a2b563",
            "value": "e216cf612e1549ae77096d4f14470bd699817bec",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018402",
            "to_ids": true,
            "type": "sha256",
            "uuid": "327c4478-383c-40a5-a9bd-3bd37ae21f1f",
            "value": "cab7855ccfca19a06eea76e0e170f592dcc95906ecfa5436f5a11947e04e63d5",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776011395",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "97332a8b-ca6b-4460-9f83-ba6e8d0fe133",
            "value": "6144:W7f7IMxRxpxbaxxpKQxLWiOEabaL/1g2KEBbcIshM+ug/6mRfZ/Y1T0hCaV:W7fZ9R2KEBb5sm+"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776011395",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "959005e2-abd2-497d-8cab-cd2d93b32a4c",
            "value": "274432"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776011395",
            "to_ids": true,
            "type": "vhash",
            "uuid": "166b615c-5f02-4a7c-91dc-21ea812bb7dc",
            "value": "0250466d6d1557z81z37z504bz6fz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776011395",
            "to_ids": true,
            "type": "filename",
            "uuid": "317368f8-b0c3-4ac2-9c6d-d6549d394113",
            "value": "kf92r5fou.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  12/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776011395",
            "to_ids": false,
            "type": "text",
            "uuid": "99ceaa32-7aa0-4e0c-ae2a-aaa651e57fd2",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Qwexlafiba!rfn\nVT Total Detection:42/72\nFirst Submission:2025-11-14T06:06:49.000000+00:00\nLast Submission:2025-11-14T06:06:49.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041092",
        "uuid": "17502482-0ce9-4da8-87db-0e6835d87ef9",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041092",
            "to_ids": true,
            "type": "md5",
            "uuid": "2ac92c16-de62-43ea-8b68-9450faa7dda9",
            "value": "06a657cbcaf410b53b440c44025badf6",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018403",
            "to_ids": true,
            "type": "sha1",
            "uuid": "74687b17-da10-483f-8b36-72348a95fffa",
            "value": "b6c46f2853997fcaf7190bfc5d7e0604c6ad86ef",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018403",
            "to_ids": true,
            "type": "sha256",
            "uuid": "47d831a5-5087-4305-8df6-cb20722d6da1",
            "value": "43f4e7bee2bea185759a60783a18df662f375cb975a31b1fcdcfc0eeefa1133c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776011544",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "1cbda418-cd2a-4bd4-b27d-0310dcab45c1",
            "value": "6144:mpFJxVbqzn7nZsdAzjOj2lvF8EIuG6oyqYY:mtxVbqYQlvFE"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776011544",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "653b013a-cfeb-4105-9679-473ee297d18e",
            "value": "204800"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776011544",
            "to_ids": true,
            "type": "vhash",
            "uuid": "33d00c9f-f6fd-4eb9-8e32-f1898bf8eec6",
            "value": "0250466d5d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776011544",
            "to_ids": true,
            "type": "filename",
            "uuid": "f14f5f5b-0272-4117-827b-794a8b5192c1",
            "value": "utt5l.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  25/02/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776011544",
            "to_ids": false,
            "type": "text",
            "uuid": "98b9edb3-d414-4422-995e-8f5cc10ce817",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:33/72\nFirst Submission:2026-02-23T10:07:05.000000+00:00\nLast Submission:2026-02-23T10:07:05.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041113",
        "uuid": "137d609e-4e64-4fd2-9332-9346badc3431",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041113",
            "to_ids": true,
            "type": "md5",
            "uuid": "89734db9-9dc7-4d9c-aa70-606a1c3c0bbc",
            "value": "08e264ff555d4359b2adaa53540fe6f4",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018404",
            "to_ids": true,
            "type": "sha1",
            "uuid": "8b1e05d2-2ad0-4f31-b5c6-46e2aa9ad57c",
            "value": "05891affb40c3b3c570fba6e48c5e3251af8ffdd",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018404",
            "to_ids": true,
            "type": "sha256",
            "uuid": "88402372-b138-4e31-9df0-b8bff7fdeebf",
            "value": "b3d889ca5e9e719ec37ebaca655b4edc1a7a9d50e48cd6f5927a842a5d0d93b1",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776011607",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "9c675851-f6fa-41db-aa78-00782dc398f1",
            "value": "3072:2fbVJDkZeYmB3KhLp+TU9x8xxycC/rOD4r+1pi6XIqQtvhQYoV6:MJDsefB3Kxp+NyBtq6ha"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776011607",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "bdaace75-4ae9-4ac0-b9d6-05dbecd4a378",
            "value": "226816"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776011607",
            "to_ids": true,
            "type": "vhash",
            "uuid": "8780c0cf-6dbb-467e-8bd5-ec868ab66c16",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776011607",
            "to_ids": true,
            "type": "filename",
            "uuid": "e5e50861-e595-4ca2-8d6b-4949b123523c",
            "value": "de4uxi.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  10/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776011607",
            "to_ids": false,
            "type": "text",
            "uuid": "24c73d68-7160-4226-87e2-4c09a376acb2",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Lazy.RR!MTB\nVT Total Detection:53/72\nFirst Submission:2026-03-17T14:21:29.000000+00:00\nLast Submission:2026-03-17T14:21:29.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041135",
        "uuid": "de041ee1-406e-4b2e-a247-97f399681ca2",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041135",
            "to_ids": true,
            "type": "md5",
            "uuid": "0e839fbb-9528-4dd0-8a67-5a72838a1da4",
            "value": "0a31bbd7ff5034a18331826e4cd2693e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018406",
            "to_ids": true,
            "type": "sha1",
            "uuid": "48bb2590-b6b2-4520-a0a4-bf05fca6098a",
            "value": "c8a0e07f61cf8fce88cc5a7bcadbc514eb844695",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018406",
            "to_ids": true,
            "type": "sha256",
            "uuid": "ec5705d6-4b1c-41c1-aff9-480eef51c316",
            "value": "ffd991328eb765b83609562e888d9db9e6f09a28efc489201b673e486e478f36",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776011671",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "92923767-c987-46eb-85d3-3697a77ad417",
            "value": "3072:wFoWC5C9nJvzUL6p8Y74iRzfioaJ/GQPvlzP4BQOGAbHQQd0nFvv:XWEC5zQ8DVa9Jnl7PAjQQdAF"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776011671",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "91aee1dd-f75b-4986-abb0-dfedaa0ae247",
            "value": "222720"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776011671",
            "to_ids": true,
            "type": "vhash",
            "uuid": "6fa96783-fcdb-4cdd-a18d-8a6454811bd9",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776011671",
            "to_ids": true,
            "type": "filename",
            "uuid": "c4fc717b-411b-488d-adf9-7ee7bcb3c1bb",
            "value": "4pm18gpj.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  01/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776011671",
            "to_ids": false,
            "type": "text",
            "uuid": "64da11c0-f82e-4d40-a36a-7228c611661d",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Etset!rfn\nVT Total Detection:28/72\nFirst Submission:2026-02-27T16:18:34.000000+00:00\nLast Submission:2026-02-27T16:18:34.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041156",
        "uuid": "ba89eb6d-051f-435d-994b-10a128982ab9",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041156",
            "to_ids": true,
            "type": "md5",
            "uuid": "76d24352-8567-4046-a39a-4b18a3c9f3b2",
            "value": "0b871c1ec97433389f2a1b6668503ba0",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018406",
            "to_ids": true,
            "type": "sha1",
            "uuid": "1c78b126-cee3-45cc-9fe7-4b8bc0669435",
            "value": "08195aaa83389020d5289c0df3bb3a48453ae4ab",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018407",
            "to_ids": true,
            "type": "sha256",
            "uuid": "02bc2f5a-40ef-413b-ac62-2c6e7fbb5f4d",
            "value": "a3816aaedddeff22e65281d51fd60c3a540b3306dd50b1156676281ccdac659b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776011715",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "3a65053f-3044-4904-9bec-eead062db983",
            "value": "3072:zq0RV1RNu5qrc9hitBQU22Wc4F9XdmiBynoMRyDAY7YeYX0J78G2IG7sh:O0VBrcLitmDVX0iyoqyYeYX0581Nsh"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776011715",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "a213e27e-0d44-4a2a-bf67-bc892412fd0b",
            "value": "227328"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776011715",
            "to_ids": true,
            "type": "vhash",
            "uuid": "cdb81e00-731e-478a-980d-11f67979114e",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776011715",
            "to_ids": true,
            "type": "filename",
            "uuid": "ff231dd0-d3ef-46ed-8c8d-695c17ed795f",
            "value": "mgec8.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  09/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776011715",
            "to_ids": false,
            "type": "text",
            "uuid": "88d39ab1-d1f5-4fc0-83b1-b19d29dece38",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Lazy.RR!MTB\nVT Total Detection:47/72\nFirst Submission:2026-04-05T09:45:10.000000+00:00\nLast Submission:2026-04-05T09:45:10.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041177",
        "uuid": "fa64077d-3d3a-4eeb-8088-9d44f5e5f65a",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041177",
            "to_ids": true,
            "type": "md5",
            "uuid": "ba836555-c417-4407-8b28-07b73a716766",
            "value": "0e0a9912fa6308afe8dd4f9178bb9889",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018407",
            "to_ids": true,
            "type": "sha1",
            "uuid": "efe22a5b-6343-4ca9-ae9d-fc3920c613fd",
            "value": "0e8ee171952c8bd0ce9d3bedab7c07e28748f3be",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018407",
            "to_ids": true,
            "type": "sha256",
            "uuid": "6cf61ccb-b21e-4b5c-9bd4-ccf80fed0d1d",
            "value": "a85fe85fdf1955be88ed657117944c79dce61bababa060894d45f6fe9eb9efe2",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776011842",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "5c45097c-37a9-4a72-87f9-08f36b5103b5",
            "value": "3072:wFoWC5C9nJvzUL6p8Y74iRzfioaJ/GQPvlzP4BQOGAbMQQd/Fvv:XWEC5zQ8DVa9Jnl7PAwQQd/F"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776011842",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "a94a6880-f0bd-4b2e-b547-1ddc4947961f",
            "value": "222720"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776011842",
            "to_ids": true,
            "type": "vhash",
            "uuid": "ff99c0f0-6234-415d-9b59-61367719e863",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776011842",
            "to_ids": true,
            "type": "filename",
            "uuid": "26dd3acd-7740-4fcb-a455-2ccfaec097e4",
            "value": "fufp3.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  01/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776011842",
            "to_ids": false,
            "type": "text",
            "uuid": "20e6401a-4c62-4437-a08a-26fa32bdd2c7",
            "value": "Type Description: Win32 EXE\nMicrosoft: None\nVT Total Detection:20/72\nFirst Submission:2026-03-01T13:59:34.000000+00:00\nLast Submission:2026-03-01T13:59:34.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041198",
        "uuid": "052706d4-8dcc-4e59-ad20-a7c7264a5d49",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041198",
            "to_ids": true,
            "type": "md5",
            "uuid": "3f20ab74-1f62-4226-abc6-a7a5a327b90e",
            "value": "10742f67c77ec700dae7d0d40de68744",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018408",
            "to_ids": true,
            "type": "sha1",
            "uuid": "06e60eb8-0ede-4e7f-b130-9df7e1cac1ca",
            "value": "f69f11a0b79e7ff49e5d9974ec02aa9f8f3a6bb8",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018408",
            "to_ids": true,
            "type": "sha256",
            "uuid": "fea06f37-53ad-4f05-a05e-8af7d1111786",
            "value": "b6c4d6276cf6512a89e78657d739e23bda232d9f54d01dc9792f04c14f69a9f2",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776011906",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "3e38b63b-f4cd-496c-a2a7-0d4e1b71013d",
            "value": "3072:2fbVJDkZeYmB3KhLp+TU9x8xxycC/rOD4r+1pi6XIqQtvhQzot6:MJDsefB3Kxp+NyBtq6hn"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776011906",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "737fcb33-b352-44ae-8348-1e399bd8bbf4",
            "value": "226816"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776011906",
            "to_ids": true,
            "type": "vhash",
            "uuid": "be25a7f0-3e3d-4da4-a1f9-eea6ee9f7d26",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776011906",
            "to_ids": true,
            "type": "filename",
            "uuid": "1aa717a9-8d10-4891-b212-7e0d2419b6f9",
            "value": "hgc0vhw.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  17/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776011906",
            "to_ids": false,
            "type": "text",
            "uuid": "eb658940-7aeb-45ac-8657-1bdab2726afb",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:22/72\nFirst Submission:2026-03-17T08:50:13.000000+00:00\nLast Submission:2026-03-17T08:50:13.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041220",
        "uuid": "6cfa6453-7bea-4026-a016-abd8a31cfffa",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041220",
            "to_ids": true,
            "type": "md5",
            "uuid": "9340dc24-92cc-48b3-9c84-91a3e1a18cde",
            "value": "11d6c13aa018de6b65a5a438d4c59401",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018409",
            "to_ids": true,
            "type": "sha1",
            "uuid": "d8ad4cb5-714a-4ae0-a83b-d5a9c0e6ce77",
            "value": "65bd5f36148e4dce407b5f9f90f912f9289139fe",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018409",
            "to_ids": true,
            "type": "sha256",
            "uuid": "1e015c3e-e12c-4d27-a452-117dd1a48757",
            "value": "28410173994ad00b06258e0beb932d48c069ef1f5dcee946166a000d9c9f162b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776011928",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "3d8b2cac-13c7-4edc-a060-928ed5b64dd6",
            "value": "3072:PMkiQ0Ti78ZGAttez2m7sKNqQNmTVm9he0xoyW3k0MnLwBsYC:BsG78sATmZbNmhQa3onsC"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776011928",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "faaaa0e4-e1ca-45a5-b72f-7789f3711d39",
            "value": "230912"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776011928",
            "to_ids": true,
            "type": "vhash",
            "uuid": "0e6a0169-432b-4a4b-833d-e747fd324adf",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776011928",
            "to_ids": true,
            "type": "filename",
            "uuid": "73438c6b-3a7c-4a10-8f0d-105eec9f7b38",
            "value": "nqjltm7v.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  10/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776011928",
            "to_ids": false,
            "type": "text",
            "uuid": "3e9ad126-a403-4d17-99d5-e323a514bbba",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Lazy.RR!MTB\nVT Total Detection:47/72\nFirst Submission:2026-03-04T07:39:56.000000+00:00\nLast Submission:2026-03-04T07:39:56.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041241",
        "uuid": "5a071c69-3484-48d1-bc07-4a18b68a7ed1",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041241",
            "to_ids": true,
            "type": "md5",
            "uuid": "1f84e886-610c-4229-9483-99a7f9386904",
            "value": "15c58b181c8234781043ea46f29ea25a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#230087",
                "local": false,
                "name": "rectifyq:samples-found-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018410",
            "to_ids": true,
            "type": "sha1",
            "uuid": "da7b578d-6bf7-4251-ab09-527ebce32398",
            "value": "4f1c4e6c266f797b8918383feedb044efe150ab6",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#230087",
                "local": false,
                "name": "rectifyq:samples-found-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018410",
            "to_ids": true,
            "type": "sha256",
            "uuid": "9910636b-c7d7-49df-87c2-fc34545b9811",
            "value": "a0272e10119ae7f2637c1a957efae419f83a443a704b1f4b6822cebeabaeef1c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#230087",
                "local": false,
                "name": "rectifyq:samples-found-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776011971",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "5e953e95-0d57-4291-8df5-f942def41373",
            "value": "6144:7pFJxVbqzn7nZsdAzjOj2lvF8EIuHvoyqYY:7txVbqYQlvFE"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776011971",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "b3934ca1-0409-42a1-a440-6a6ebe1f646c",
            "value": "204288"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776011971",
            "to_ids": true,
            "type": "vhash",
            "uuid": "cf69d472-e9da-464a-a017-23f60b4d92b5",
            "value": "025046655d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776011971",
            "to_ids": true,
            "type": "filename",
            "uuid": "39a081e8-37ea-4227-a7fe-c63cae56d306",
            "value": "htmjjvt80was.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  27/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776011971",
            "to_ids": false,
            "type": "text",
            "uuid": "035ff1c8-5a28-4b2f-a6ad-caae05adaa8f",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win64/Mint.AH!MTB\nVT Total Detection:45/71\nFirst Submission:2026-02-22T13:23:58.000000+00:00\nLast Submission:2026-02-23T12:08:42.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041262",
        "uuid": "37f38012-640c-4639-acdd-9cbbdf4535a7",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041262",
            "to_ids": true,
            "type": "md5",
            "uuid": "219fdaad-f0d6-4885-b34d-c863a6985d4b",
            "value": "160e556509ecb9e6e56486c86321d03d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018411",
            "to_ids": true,
            "type": "sha1",
            "uuid": "034fc571-ac78-4243-90be-b74a6a560edc",
            "value": "5fabf1373c0ad9526e0438308a1914e53516d245",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018411",
            "to_ids": true,
            "type": "sha256",
            "uuid": "5cbad2bd-b34d-4c10-9f39-1c8a3f5fd0e9",
            "value": "2509340fc8855418d0388c75ab7c7a630a92742f91f65e04362dfdb19bedb9aa",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776011993",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "fd0a8c7f-a938-4e2d-be49-794631b1b782",
            "value": "3072:N7MfJ8tf/L7DuXhpZwYtbYyeRSIgOeQq6Iz+9x6S+C5ofCs7kCxtvRNRYP:CO/itwGeR+OJIa9iCCT9tvRLYP"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776011993",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "c738f418-dfe7-47e9-9f51-69c7ea7b682e",
            "value": "227840"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776011993",
            "to_ids": true,
            "type": "vhash",
            "uuid": "f6c5073a-632a-4bda-8043-1f87946a956e",
            "value": "0250466d7d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776011993",
            "to_ids": true,
            "type": "filename",
            "uuid": "bfd1b436-72c5-48ce-9c7c-eeab44698641",
            "value": "23i4zo0.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  03/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776011993",
            "to_ids": false,
            "type": "text",
            "uuid": "c6f224e7-b775-4e9c-b872-18d9f1836d95",
            "value": "Type Description: Win32 EXE\nMicrosoft: Program:Win32/Wacapew.C!ml\nVT Total Detection:32/71\nFirst Submission:2026-04-02T22:05:33.000000+00:00\nLast Submission:2026-04-02T22:05:33.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041284",
        "uuid": "058ffc73-bbb1-49e7-bd88-0b70a107ecf8",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041284",
            "to_ids": true,
            "type": "md5",
            "uuid": "1ca9d030-664d-4894-8f80-dad346fd33bc",
            "value": "183083439ef98d78888eed30aeed0e83",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018412",
            "to_ids": true,
            "type": "sha1",
            "uuid": "df13d791-91db-4179-9ea9-acf36910e9e3",
            "value": "a98277bdbd7b159548a8c1dc02728cf83da6be0f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018412",
            "to_ids": true,
            "type": "sha256",
            "uuid": "93f66c56-ce9c-4222-af94-8b8b408df640",
            "value": "15e5ce9a78faae0f81beffda66cf9dc879551afcf2bc073a44bb522ff789e357",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776012078",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "d911fa61-c55b-41e2-b513-f4389908c2a4",
            "value": "3072:2P2Up7/iiOrVA6GX4apRs/kBMjV9SDpKHr2zcsiQQ:RUp7qbrVLQ7pRP8VQDCQQ"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776012078",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "7080c76e-39e2-41f4-a268-c368c4986805",
            "value": "221184"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776012078",
            "to_ids": true,
            "type": "vhash",
            "uuid": "b9466473-9efc-417d-841a-ac3c78ef9451",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  27/02/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776012078",
            "to_ids": false,
            "type": "text",
            "uuid": "363494a1-b3a9-4ede-8ae6-2eac2c290003",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:23/72\nFirst Submission:2026-02-26T10:11:32.000000+00:00\nLast Submission:2026-02-26T10:11:32.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041305",
        "uuid": "466496a2-7ed2-47ae-8e4f-332c1bb5076a",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041305",
            "to_ids": true,
            "type": "md5",
            "uuid": "82c6acfd-7e11-4c5c-910f-ff2d26d66a9a",
            "value": "185a502b5eb85e8ee0db26600df013e9",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018413",
            "to_ids": true,
            "type": "sha1",
            "uuid": "52b6766e-6aad-43bb-8a9e-710da38ebcdc",
            "value": "f56deecebe56d3fea1a3e7e759e410d32a3914f9",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018413",
            "to_ids": true,
            "type": "sha256",
            "uuid": "c54e89ff-ae18-4d9d-baf7-1f8bffc00a12",
            "value": "4196d141dcce3e93ca371cbf65c490620d4f25eb0ffebe33d13d0f9e2664179e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776012100",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "53c2bdc2-861f-4007-a115-0a7ab9916140",
            "value": "3072:s7MfJ8tf/L7DuXhpZwYtbYyeRSIgOeQq6Iz+9x6S+C5ofCs7kCxtlRNR6+vhum:BO/itwGeR+OJIa9iCCT9tlRL6+vh"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776012100",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "25f58484-cbe5-4847-aa1f-5f67f8f24ac7",
            "value": "226816"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776012100",
            "to_ids": true,
            "type": "vhash",
            "uuid": "d369806a-fd82-40d2-a167-d813e16e10b0",
            "value": "0250466d7d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776012100",
            "to_ids": true,
            "type": "filename",
            "uuid": "de18ebef-f228-4041-8694-15109ed5b48d",
            "value": "uk081.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  04/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776012100",
            "to_ids": false,
            "type": "text",
            "uuid": "1fd32c2e-7319-4bf3-934b-b9b7486dd254",
            "value": "Type Description: Win32 EXE\nMicrosoft: Program:Win32/Wacapew.C!ml\nVT Total Detection:30/72\nFirst Submission:2026-04-04T12:14:27.000000+00:00\nLast Submission:2026-04-04T12:14:27.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041326",
        "uuid": "dc9ee778-b6c5-48d0-8ffc-d136b748ceed",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041326",
            "to_ids": true,
            "type": "md5",
            "uuid": "22441d59-bb0b-460b-8230-afbb93d8fb08",
            "value": "18b27e8a1e822d8750be3f170fad7c59",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018413",
            "to_ids": true,
            "type": "sha1",
            "uuid": "a9fd6bfb-9018-44d5-a1b6-c9655b7777d7",
            "value": "7ea017511c4277ebb70bdc960b4dc24249fd7145",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018414",
            "to_ids": true,
            "type": "sha256",
            "uuid": "30822a46-9c95-48c0-9ea1-8a0fcc8c813b",
            "value": "86d7fdb5c8a211adefdf877ecd253cae7eb1249da38c08511dd7e284fbe31761",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776012122",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "41ff7450-56c8-4048-8c45-273cec29036a",
            "value": "3072:PMkiQ0Ti78ZGAttez2m7sKNqQNmTVm9he0xoyW3kXxnLwBsYC:BsG78sATmZbNmhQa3SnsC"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776012122",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "e53a1dab-332d-4cde-8d6d-dced910e8998",
            "value": "230912"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776012122",
            "to_ids": true,
            "type": "vhash",
            "uuid": "a37a869a-1915-48e1-ae7d-3c233b5234b2",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776012122",
            "to_ids": true,
            "type": "filename",
            "uuid": "5335937d-a5d2-4c1f-88f6-7bb1d8cf8362",
            "value": "zd31bkm.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  02/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776012122",
            "to_ids": false,
            "type": "text",
            "uuid": "6ac163a3-5c76-46a7-961d-22e79b209ed7",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:45/71\nFirst Submission:2026-03-03T15:29:27.000000+00:00\nLast Submission:2026-03-03T15:29:27.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041347",
        "uuid": "4343994e-d51a-47b7-a79b-0d96e3e97dfb",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041347",
            "to_ids": true,
            "type": "md5",
            "uuid": "40b210ac-5343-40a6-b6b5-d75d4ba86e4e",
            "value": "18fc42823ae95422e5f7e5a9e401a2b9",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018415",
            "to_ids": true,
            "type": "sha1",
            "uuid": "b428b5a0-3f86-4b51-9258-fde72bec46d9",
            "value": "b9fd1fb565ae7091581f5c030881dbd9bec5c00e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018415",
            "to_ids": true,
            "type": "sha256",
            "uuid": "29de691e-69b6-4c12-8890-31892b67f9d1",
            "value": "0463fb7c0013e99da5b375983b3ffd626aadbb8dbfc4af58943e4365f67cd38e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776012144",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "698c1b52-4d90-4f92-914d-bcdc998a2460",
            "value": "3072:fren4pym5JDR97AkiZlj1PXweQqrK5NlVuB1lmu3SzT5i8b9OOQktxwzLNLl0uxE:CCXXATJgdvEB7ip9O9wuxPT"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776012144",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "56bcd346-4086-4665-92f5-99febb9b47a9",
            "value": "232960"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776012144",
            "to_ids": true,
            "type": "vhash",
            "uuid": "6dbb6768-5cd3-454a-b97b-99141597ebdb",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776012144",
            "to_ids": true,
            "type": "filename",
            "uuid": "d95e69d8-161a-4103-a1a4-fc0abb84d598",
            "value": "nqr0ny01.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  29/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776012144",
            "to_ids": false,
            "type": "text",
            "uuid": "ac625a89-bc3f-4960-935b-ad732123948f",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:26/71\nFirst Submission:2026-03-29T08:10:37.000000+00:00\nLast Submission:2026-03-29T08:10:37.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041368",
        "uuid": "5b69cf40-5627-471b-8ee3-e0dd8289ebe5",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041368",
            "to_ids": true,
            "type": "md5",
            "uuid": "84271ded-ac98-4d75-ac48-5a5af21366d6",
            "value": "199907cd470638bb14ad428d4b281fe5",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018416",
            "to_ids": true,
            "type": "sha1",
            "uuid": "624ef13a-29c0-4a7a-91c6-ff819fd1df1b",
            "value": "df88a329f5e5fcc93303bf19d26b55a6f3a7e14b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018416",
            "to_ids": true,
            "type": "sha256",
            "uuid": "f9826cb1-8ff9-47b6-a865-9b74608719d5",
            "value": "9f68b13ad29399e509936b96f9fce098ff34afb4b880ace99bd533c3817240d2",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776012166",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "71dd519f-a903-4225-8e94-34a01cfd1d39",
            "value": "3072:qJ7og3wQ217siFax6B+JhxupRkFWg3KvZ8qWkJdyRQKbCbpkLx87JtZp9qw:oog3wQ2Nex6BkxhUuqWcdyR/Ulp9qw"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776012166",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "05ddbad8-41ab-478e-93b6-b48c8c176657",
            "value": "232448"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776012166",
            "to_ids": true,
            "type": "vhash",
            "uuid": "baf74869-e519-4f93-8a1d-5109617dc2a8",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776012166",
            "to_ids": true,
            "type": "filename",
            "uuid": "4246b21c-952c-416f-aeb4-18a31cda9e21",
            "value": "0otei.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  03/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776012166",
            "to_ids": false,
            "type": "text",
            "uuid": "2788293a-cb6a-4da9-acf2-4460b278302e",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:44/72\nFirst Submission:2026-03-01T17:31:36.000000+00:00\nLast Submission:2026-03-01T17:31:36.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041390",
        "uuid": "8886ff89-99b9-48c7-9e69-15174813f2b2",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041390",
            "to_ids": true,
            "type": "md5",
            "uuid": "2a5b3f28-0092-4920-a3b5-c29808d53475",
            "value": "19be610816c040c43c1394f2c2b3901c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018417",
            "to_ids": true,
            "type": "sha1",
            "uuid": "710a1fb6-177e-4c1e-b6aa-171a87c41aab",
            "value": "29a267b2c774fe5f5171ff86514d1a27630f980d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018417",
            "to_ids": true,
            "type": "sha256",
            "uuid": "111ceddc-9b56-4b29-a600-bf8860d97c00",
            "value": "a211df16712ce0e5048ab37a368c16ce0c6484e2219333a653e25794e50f2c6c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776012188",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "94f6ada1-ad83-4bf3-bf66-233f066783e9",
            "value": "3072:2P2Up7/iiOrVA6GX4apRs/kBMjV9SDpKHr2zcViQQ:RUp7qbrVLQ7pRP8VQD1QQ"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776012188",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "4f41fc99-1bfb-438d-b4e7-0025d9ac7a7f",
            "value": "221184"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776012188",
            "to_ids": true,
            "type": "vhash",
            "uuid": "197c3552-72d2-41f6-85c6-633fd18547f9",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776012188",
            "to_ids": true,
            "type": "filename",
            "uuid": "0c68c514-063b-4356-9ee0-e108d101ed6c",
            "value": "phep0.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  28/02/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776012188",
            "to_ids": false,
            "type": "text",
            "uuid": "e34815de-6b3f-4218-b578-7253020506eb",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:25/72\nFirst Submission:2026-02-26T02:42:26.000000+00:00\nLast Submission:2026-02-26T02:42:26.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041411",
        "uuid": "5bdccdd1-b136-4347-949b-b1d005739929",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041411",
            "to_ids": true,
            "type": "md5",
            "uuid": "ccc7b2e7-b5d1-4c3f-ae61-d43a1fe78342",
            "value": "19c026bff0e70fd199c2ddbb5dff3671",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018418",
            "to_ids": true,
            "type": "sha1",
            "uuid": "e2195283-7f08-4c30-b52d-49bb1636a314",
            "value": "9835244b8e6e58052b1a6186ac44b1e5f5f87f38",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018418",
            "to_ids": true,
            "type": "sha256",
            "uuid": "c8802b4f-1b00-446b-969d-ce4af08abae2",
            "value": "13c4ae4f32e0e5f42e406ea52aebd5d6bcf8de40b0e7963728fd8ba8f7861b92",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776012209",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "50a617c5-1f3e-4ad8-99ec-5c87baf3b8cd",
            "value": "3072:2fbVJDkZeYmB3KhLp+TU9x8xxycC/rOD4r+1pi6XIqQtvhQYoA86:MJDsefB3Kxp+NyBtq6ha"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776012209",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "fb512092-408e-48f3-992b-92906f818c99",
            "value": "226816"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776012209",
            "to_ids": true,
            "type": "vhash",
            "uuid": "23d07749-5d84-42a7-9038-1e3497b2a64e",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  18/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776012209",
            "to_ids": false,
            "type": "text",
            "uuid": "eeab133b-9052-4489-be95-95436b0dd5ee",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:22/72\nFirst Submission:2026-03-17T17:05:41.000000+00:00\nLast Submission:2026-03-17T17:05:41.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041432",
        "uuid": "9061ab66-fac0-48e2-8993-3df1e854d08e",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041432",
            "to_ids": true,
            "type": "md5",
            "uuid": "12e27b74-85d6-49ce-b062-dfda6060b091",
            "value": "1aeaafadaa55a4ad42d810c27a0ee463",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018419",
            "to_ids": true,
            "type": "sha1",
            "uuid": "e7af808b-6441-4dee-8d02-a897436e2ba7",
            "value": "62979e1b8732a70cba4d643380caa8b356571c3c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018419",
            "to_ids": true,
            "type": "sha256",
            "uuid": "766a236d-b98f-43ac-aae9-c0b7ef342155",
            "value": "acda5a29a4e8eef19cfd93bb2df379ccab31063d784f3ff3c8d88557a91b853a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776012273",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "10d9fde8-3027-4a7b-8632-a2e8b20690cc",
            "value": "6144:epFJxVbqzn7nZsdAzjOj2lvF8EIuAsoyqYY:etxVbqYQlvFE"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776012273",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "65bd1875-101f-43bf-b1b5-ddd4fb4b22c8",
            "value": "205312"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776012273",
            "to_ids": true,
            "type": "vhash",
            "uuid": "5b6664bf-06ca-4e54-a4ce-ac64c4c2ef98",
            "value": "0250466d5d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776012273",
            "to_ids": true,
            "type": "filename",
            "uuid": "1ef7690d-9200-4fb8-900c-594ea75d1968",
            "value": "mgrfb.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  26/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776012273",
            "to_ids": false,
            "type": "text",
            "uuid": "6e59b47c-780f-45f7-a1b3-07fe9edf9f42",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win64/Mint.AH!MTB\nVT Total Detection:48/72\nFirst Submission:2026-02-24T13:51:08.000000+00:00\nLast Submission:2026-02-24T13:51:08.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041453",
        "uuid": "82f21c29-9fbd-4731-9d93-4202c91b3148",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041453",
            "to_ids": true,
            "type": "md5",
            "uuid": "40dca180-71cb-4b99-ae0f-bcd9ca20dce0",
            "value": "1b4f615dd6f0515ad5f8b99f8b0e8085",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018420",
            "to_ids": true,
            "type": "sha1",
            "uuid": "a6d4183a-184f-47ce-a8af-caf98a425b1d",
            "value": "46c91bbb808609d2caeda2ee3fcbe464e9c12c70",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018420",
            "to_ids": true,
            "type": "sha256",
            "uuid": "1f6b46f2-6066-46d2-81e3-49267dba56da",
            "value": "da2830ca7e2b9f5c77823d39b4a959b2e2fdce4ecd4a3e5c69a1d83f50da006b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776012295",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "8a600629-e518-422a-8a66-98cc569e7e22",
            "value": "3072:2y+NC+3FGCgIuXHbTZvQJoUaCSC0CwMQv7PfyeLZlwABcJwnr:oDPgIuXHnZQyUSC/5ubfhce"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776012295",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "668271aa-7abc-4cc4-b689-03220d8a533a",
            "value": "223744"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776012295",
            "to_ids": true,
            "type": "vhash",
            "uuid": "a4b0e57e-7fd2-4c95-a517-3db9c75a4557",
            "value": "0250466d7d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776012295",
            "to_ids": true,
            "type": "filename",
            "uuid": "3f37f9c0-db8a-429a-8729-72fb1fa13283",
            "value": "bruitkh.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  09/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776012295",
            "to_ids": false,
            "type": "text",
            "uuid": "b3a6d2d2-4308-4b83-a91a-ebe41f4eafd0",
            "value": "Type Description: Win32 EXE\nMicrosoft: None\nVT Total Detection:22/72\nFirst Submission:2026-03-09T11:13:51.000000+00:00\nLast Submission:2026-03-09T11:13:51.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041474",
        "uuid": "dc16e855-3bd9-4630-a927-8446d4486886",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041474",
            "to_ids": true,
            "type": "md5",
            "uuid": "8f33ea77-62ed-449a-91ff-ecb337de8772",
            "value": "1b7efd9aaf8cf61d0803f663ec4e9de0",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018421",
            "to_ids": true,
            "type": "sha1",
            "uuid": "9b6c2c4b-d525-4e96-b2ff-261cdfbda2ef",
            "value": "f58f5b3b7d85f5ee91dbdf8084c72324b250e8c5",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018422",
            "to_ids": true,
            "type": "sha256",
            "uuid": "8f8426a4-0282-40c6-b2ba-4e05f07c8dd1",
            "value": "f1f71c932beb24cc06a61d5b8ddd8afdb38e366df030b13028edc94403a8bccb",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776012317",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "463dfe57-1132-41fb-936c-3f15d4e8d8ff",
            "value": "3072:6fbVJDkZeYmB3KhLp+TU9x8xxycC/rOD4r+1pi6XIqQtvhQfol6:YJDsefB3Kxp+NyBtq6h/"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776012317",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "8f76803c-2664-46f7-aafa-3db35ceb8b91",
            "value": "226304"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776012317",
            "to_ids": true,
            "type": "vhash",
            "uuid": "b7d4033e-6653-4715-884a-15c8ab081451",
            "value": "025046656d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776012317",
            "to_ids": true,
            "type": "filename",
            "uuid": "56b10758-6eea-4f0d-b49d-40f3f1c465d1",
            "value": "setup_installer.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  27/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776012317",
            "to_ids": false,
            "type": "text",
            "uuid": "32e1d208-e21d-4ec8-96aa-763f3f11f983",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win64/Mint.MK!MTB\nVT Total Detection:46/71\nFirst Submission:2026-03-19T06:22:53.000000+00:00\nLast Submission:2026-03-19T18:35:15.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041495",
        "uuid": "5789091a-c4e4-48ad-abcc-e345809a4ddf",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041495",
            "to_ids": true,
            "type": "md5",
            "uuid": "85e8ce5e-9fef-4bfc-a393-fe3dd5c84da2",
            "value": "1c81d39894f42da6e2852cb33c92ae96",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018423",
            "to_ids": true,
            "type": "sha1",
            "uuid": "db1cbbd7-9912-41c0-88e9-8725403afa0c",
            "value": "027a3ab24639f8193423c3bf7da5f625425ed3cd",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018423",
            "to_ids": true,
            "type": "sha256",
            "uuid": "041af63e-ed0e-4bf2-b4bf-9550fa72861a",
            "value": "6f565b65b07cfcf058b59a9b1aecb7a4eb70a08c08001cd436ee30513d5dce8a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776012360",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "9ae2869a-60f6-40e4-8cb1-5638e230553d",
            "value": "3072:tnixR0siS3NSMEN6mKmGli2do7TH/nUKQb7GGGNQ1Hafy9:IxJ9EN6mXKBKuGGG6Qf"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776012360",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "451f97de-46c2-4472-a975-f0175dc9baee",
            "value": "212992"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776012360",
            "to_ids": true,
            "type": "vhash",
            "uuid": "8783bfa1-32ef-42ca-9ef5-e010144b91c3",
            "value": "025046655d155025z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  24/02/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776012360",
            "to_ids": false,
            "type": "text",
            "uuid": "909f8d32-37e6-4736-8192-6332ecace068",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:35/72\nFirst Submission:2026-02-21T05:15:42.000000+00:00\nLast Submission:2026-02-21T05:15:42.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041516",
        "uuid": "3174b182-1518-4dc5-8261-b4147b38259b",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041516",
            "to_ids": true,
            "type": "md5",
            "uuid": "27b2cafc-50e4-4f2b-888b-f1b1348433cc",
            "value": "1d35e0d21e7caf30d1ada50973a206a9",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018424",
            "to_ids": true,
            "type": "sha1",
            "uuid": "56a800ff-7db7-40bc-9ce5-95b07a1bc8f9",
            "value": "f498a4d62c4039b8fa506af0b263b92428d406b3",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018424",
            "to_ids": true,
            "type": "sha256",
            "uuid": "14d2abdb-bf6d-40ee-aa37-70a7b782ade8",
            "value": "4bc15f4b3da9058f2d19e36fc52cd5f27c70fde37dba0ffc65139f83e0bf98dc",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776012402",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "45879d07-9918-444e-b887-1a8790a7b47e",
            "value": "3072:2fbVJDkZeYmB3KhLp+TU9x8xxycC/rOD4r+1pi6XIqQtvhQgow6:MJDsefB3Kxp+NyBtq6h6"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776012402",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "fa35863f-900e-49ac-adc6-5dadf13ad268",
            "value": "226816"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776012402",
            "to_ids": true,
            "type": "vhash",
            "uuid": "c43dc5aa-1933-4891-9899-99d24800c051",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776012402",
            "to_ids": true,
            "type": "filename",
            "uuid": "013852e5-459a-42b0-91ed-ec81ae9ae333",
            "value": "be6ygx8.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  19/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776012402",
            "to_ids": false,
            "type": "text",
            "uuid": "b4a683af-37ea-40f1-9456-522848411212",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win64/Mint.MK!MTB\nVT Total Detection:35/71\nFirst Submission:2026-03-19T12:57:15.000000+00:00\nLast Submission:2026-03-19T12:57:15.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041538",
        "uuid": "1e29ae1b-b275-47b1-88df-87ed71f56ade",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041538",
            "to_ids": true,
            "type": "md5",
            "uuid": "984e71b0-55e1-44b6-bc84-9fd827fc704b",
            "value": "1e44cebd38454baaaaedbd04e0c69f74",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018425",
            "to_ids": true,
            "type": "sha1",
            "uuid": "30edb2f4-45fa-4a59-8b7f-062af8875b0e",
            "value": "6df48c490aba32887ffbf073bdc074ee5fa3a432",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018425",
            "to_ids": true,
            "type": "sha256",
            "uuid": "54bd4f87-f250-4fc0-9f17-2b3c5cb74dfb",
            "value": "b2bef5f8f3cccb9a889e14564fae449020f8100809c2b81fd2cd35c887a27552",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776012445",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "3c7e5f4b-b1e9-401c-a698-8e6128f2fcb5",
            "value": "3072:N7MfJ8tf/L7DuXhpZwYtbYyeRSIgOeQq6Iz+9x6S+C5ofCs7kCxtsIRNRmP:CO/itwGeR+OJIa9iCCT9tsIRLmP"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776012445",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "563c7108-1aea-4b82-a17d-c9afc53b21ff",
            "value": "227840"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776012445",
            "to_ids": true,
            "type": "vhash",
            "uuid": "1c847bfa-3332-4023-ac1b-05fa2fb17d67",
            "value": "0250466d7d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776012445",
            "to_ids": true,
            "type": "filename",
            "uuid": "c36fe2eb-6c86-4ca5-8aa7-6b9575d3fad9",
            "value": "1elf2.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  03/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776012445",
            "to_ids": false,
            "type": "text",
            "uuid": "69502434-45f6-46cb-b671-8d1abe5af4c2",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:45/71\nFirst Submission:2026-04-02T05:47:08.000000+00:00\nLast Submission:2026-04-02T05:47:08.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041559",
        "uuid": "0f04063b-1791-41bc-9c84-cfce10a3c288",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041559",
            "to_ids": true,
            "type": "md5",
            "uuid": "93982717-013f-4ab6-8ef3-eb5365bced86",
            "value": "1e8c32759ed4236fbab4e64c908476be",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018426",
            "to_ids": true,
            "type": "sha1",
            "uuid": "d0292971-655d-42dc-bc24-c7dcbabe5715",
            "value": "acdc215fd36a60bea52f327a7ba07d3977d49b7a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018426",
            "to_ids": true,
            "type": "sha256",
            "uuid": "3be00573-857e-4d0c-85fa-c2c65b3fe56b",
            "value": "14ff6574af1d17ede667d9e251c676fcce293554bcd0382292a71faf01dfed88",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776012488",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "74c55478-59c1-4810-9722-bd18533f00ed",
            "value": "3072:wFoWC5C9nJvzUL6p8Y74iRzfioaJ/GQPvlzP4BQOGAbHQQdKFvv:XWEC5zQ8DVa9Jnl7PAjQQdKF"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776012488",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "128ac9b7-d107-4dfc-aa05-43e90f9dca76",
            "value": "222720"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776012488",
            "to_ids": true,
            "type": "vhash",
            "uuid": "f6cc4548-fd22-4df3-835b-24a493372722",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776012488",
            "to_ids": true,
            "type": "filename",
            "uuid": "31182074-9739-4df0-b870-11a4ad545313",
            "value": "h9o3ic.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  29/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776012488",
            "to_ids": false,
            "type": "text",
            "uuid": "a84fa217-442c-4a4b-8ee6-fa5517466a04",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:46/71\nFirst Submission:2026-02-26T14:53:28.000000+00:00\nLast Submission:2026-02-26T14:53:28.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041580",
        "uuid": "72ff58ff-7d54-4112-8724-964073762201",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041580",
            "to_ids": true,
            "type": "md5",
            "uuid": "f096858d-af96-42d6-80d9-f6449b2326e9",
            "value": "211d9cf49c4ea0556a736f7681ce31a4",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018427",
            "to_ids": true,
            "type": "sha1",
            "uuid": "a76cf7a6-2049-4ae0-a41b-bbf14cc45a5b",
            "value": "6c58e9f2a9b0d3a480d9e063e1de9737e8d3729c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018427",
            "to_ids": true,
            "type": "sha256",
            "uuid": "58974f0e-de32-46e2-80ae-b3309a62f41c",
            "value": "76b9942583cdfba85e9bcf6cb5688039c5dc8953172d13db2b15751cd73fc1aa",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776012573",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "a4794c1b-7dd2-4a20-a03a-cbf657450c22",
            "value": "3072:N7MfJ8tf/L7DuXhpZwYtbYyeRSIgOeQq6Iz+9x6S+C5ofCs7kCxtiRNR8P:CO/itwGeR+OJIa9iCCT9tiRL8P"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776012573",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "8b46f2dd-b7d2-4bea-84db-4805d5710b17",
            "value": "227840"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776012573",
            "to_ids": true,
            "type": "vhash",
            "uuid": "40da64c8-8be5-4a7d-aa26-6aefaba5a4c9",
            "value": "0250466d7d155025z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  06/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776012573",
            "to_ids": false,
            "type": "text",
            "uuid": "b535e385-6733-4d47-9574-0b4a98454d0c",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Ravartar!rfn\nVT Total Detection:43/72\nFirst Submission:2026-04-04T23:42:02.000000+00:00\nLast Submission:2026-04-04T23:42:02.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041601",
        "uuid": "6027f80c-1d3d-4fca-9acd-87084d89be4e",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041601",
            "to_ids": true,
            "type": "md5",
            "uuid": "2e8839e5-f04c-406c-af67-5780dafeaf44",
            "value": "22ef8e19c6c46176d2714aee3ad86a75",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018428",
            "to_ids": true,
            "type": "sha1",
            "uuid": "e58ae337-6c1e-4691-a4b0-510c44d44182",
            "value": "34b6d745c4735c4953c2661e06c2c1ca1e2d44f5",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018428",
            "to_ids": true,
            "type": "sha256",
            "uuid": "227baa20-9773-4453-b274-a598e46c3d07",
            "value": "c9841b2875540390914aa2b68652c42c3cef3d70a82dc1005fc3c023ae96c1bf",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776012702",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "6f1db6df-9fc8-481d-b732-0154a999bd2f",
            "value": "3072:hren4pym5JDR97AkiZlj1PXweQqrK5NlVuB1lmu3SzT5i8b9OOQktxwXLNxsV4TS:gCXXATJgdvEB7ip9Otdo2Pc"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776012702",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "e47304b9-4e04-41fe-9160-2e0ec5fe1cb7",
            "value": "232960"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776012702",
            "to_ids": true,
            "type": "vhash",
            "uuid": "cb0f9620-c8c3-48bd-a494-56c180f2e8f4",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776012702",
            "to_ids": true,
            "type": "filename",
            "uuid": "f42386d3-343c-447d-ad69-aa66502cef89",
            "value": "qc0brep.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  28/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776012702",
            "to_ids": false,
            "type": "text",
            "uuid": "4f3bc228-4d68-48ef-8c7f-b727c9e9dc31",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:24/71\nFirst Submission:2026-03-28T14:08:06.000000+00:00\nLast Submission:2026-03-28T14:08:06.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041622",
        "uuid": "48f6fdcb-fcfd-4f4c-ad82-6192b72e000e",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041622",
            "to_ids": true,
            "type": "md5",
            "uuid": "83f934ce-0d71-4a79-a20a-a67b20d0d061",
            "value": "236372dba3c794e5f8df779732c3b8a8",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018429",
            "to_ids": true,
            "type": "sha1",
            "uuid": "a9fd83d6-d920-47e8-a144-9063df9b7cbe",
            "value": "7812a64a8e0a6387ea9a0d6740994dfb6fe41713",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018429",
            "to_ids": true,
            "type": "sha256",
            "uuid": "b715c654-8375-41ea-95e9-8bf341cd7c75",
            "value": "7553dded5adb5b43f05e798c02189eefbe7deb5b7946a706d6fff91c4d6eee02",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776012724",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "1e5c001b-c5ec-4e64-9b42-8fa78078166e",
            "value": "3072:PMkiQ0Ti78ZGAttez2m7sKNqQNmTVm9he0xoyW3kXOnLwBsYC:BsG78sATmZbNmhQa3lnsC"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776012724",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "d14d4ab7-dc01-43dd-b235-753a0ca85426",
            "value": "230912"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776012724",
            "to_ids": true,
            "type": "vhash",
            "uuid": "c95a62d1-d2b3-420b-80bc-8c02db92febe",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  05/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776012724",
            "to_ids": false,
            "type": "text",
            "uuid": "3d9606f7-c8e7-48ef-b07c-5e3f7e3f2161",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:25/72\nFirst Submission:2026-03-05T15:31:29.000000+00:00\nLast Submission:2026-03-05T15:31:29.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041643",
        "uuid": "31570e66-7d11-4a6c-a48b-6e9fea082cf9",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041643",
            "to_ids": true,
            "type": "md5",
            "uuid": "b63a2be3-c981-452b-bb96-abfbd3a4e9d5",
            "value": "262b13bcc12265b0fcb444c50bc496e9",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018430",
            "to_ids": true,
            "type": "sha1",
            "uuid": "6ff1eac5-3383-4462-be1e-9bf7c7c0b95e",
            "value": "aee593e33636969d809e889432d4bcb182fe27e4",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018430",
            "to_ids": true,
            "type": "sha256",
            "uuid": "4ca0b52b-6c15-459b-94fb-532626228577",
            "value": "35cd4dbe0db1c4272e1155e63af918ed612b8c905608a9637dffae241b29edb0",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776012766",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "177dcb03-41c1-4c80-bca9-253d97a82c57",
            "value": "3072:aZcVQT0bdnlqIG7tOvwOq808vefxxlMdipe3t1MfSx/0TR:XyQiAzq8Le5mi0hy"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776012766",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "4e349079-122d-4e82-8da3-60ce1e99aa83",
            "value": "223744"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776012766",
            "to_ids": true,
            "type": "vhash",
            "uuid": "141de480-0124-4402-b3ff-8ed7052316b9",
            "value": "0250466d7d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776012766",
            "to_ids": true,
            "type": "filename",
            "uuid": "a0669a66-f7a6-47d7-a498-fe71c7e94d15",
            "value": "rdv8y.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  16/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776012766",
            "to_ids": false,
            "type": "text",
            "uuid": "dea461cf-e0e9-44a5-9554-97da1aa457f7",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Etset!rfn\nVT Total Detection:39/72\nFirst Submission:2026-03-14T20:55:31.000000+00:00\nLast Submission:2026-03-14T20:55:31.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041664",
        "uuid": "747b8109-26fc-45fb-8fe5-97aa1125fcbc",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041664",
            "to_ids": true,
            "type": "md5",
            "uuid": "812e48b7-73a5-4992-900e-43faff03b5e5",
            "value": "26316a2069d73c5c5509090fe92f542a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018430",
            "to_ids": true,
            "type": "sha1",
            "uuid": "73e0897e-05ed-4450-993f-8f980913f241",
            "value": "4b4deb73c89022bf9438315e0d375a45c94b1a03",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018430",
            "to_ids": true,
            "type": "sha256",
            "uuid": "9a2bfd2e-c592-4fab-8507-cc4de35c2dcf",
            "value": "bfa2e9e137d7c42314db5d9ecd37dc56666f87b0da82cc622c987f26734597a2",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776012788",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "007e7622-e565-4478-953e-f17731698a92",
            "value": "3072:N7MfJ8tf/L7DuXhpZwYtbYyeRSIgOeQq6Iz+9x6S+C5ofCs7kCxtiRNR8P:CO/itwGeR+OJIa9iCCT9tiRL8P"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776012788",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "a5167308-a9c3-41f5-861a-7d5b984d40cf",
            "value": "227840"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776012788",
            "to_ids": true,
            "type": "vhash",
            "uuid": "f90e69aa-bf8e-4a21-87e9-ff2fc7efb9f5",
            "value": "0250466d7d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776012788",
            "to_ids": true,
            "type": "filename",
            "uuid": "23c6bd73-e086-4d65-85e6-ceeb9e7d8027",
            "value": "ji8pux.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  04/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776012788",
            "to_ids": false,
            "type": "text",
            "uuid": "d4bbbc63-e205-4e28-92e5-61ffc8a886e8",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:44/72\nFirst Submission:2026-04-03T09:20:55.000000+00:00\nLast Submission:2026-04-03T09:20:55.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041686",
        "uuid": "f8af381f-ad24-45f2-9fa9-1c05c50d5831",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041686",
            "to_ids": true,
            "type": "md5",
            "uuid": "6f06a6e9-b93e-4d95-9ec5-38b50f9c7233",
            "value": "265a44bd48398fb42023fc18c2221f1e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018432",
            "to_ids": true,
            "type": "sha1",
            "uuid": "312bc047-2b02-4930-b2b4-e87d9aebb257",
            "value": "6026ca0558af1d0bac0dd100ec0be0ef88e5fd70",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018432",
            "to_ids": true,
            "type": "sha256",
            "uuid": "271dfe88-8c31-4409-aeb7-6d50aafe8e53",
            "value": "a63aee007bc9677126a22bd1763ee8114429a4a2f9006df2a30ddbd8a3748ba0",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776012810",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "068ed37d-5942-48c6-bdbf-95d0ff1bf733",
            "value": "3072:Fren4pym5JDR97AkiZlj1PXweQqrK5NlVuB1lmu3SzT5i8b9OOQktxwRLNDw11Rr:sCXXATJgdvEB7ip9OL"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776012810",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "af42582a-cced-41d4-935e-c579fca63927",
            "value": "233472"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776012810",
            "to_ids": true,
            "type": "vhash",
            "uuid": "9c187fbf-e491-455e-9ea2-25963c9847ec",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  30/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776012810",
            "to_ids": false,
            "type": "text",
            "uuid": "51c622fc-1095-482e-a9fe-c1c9842b23e0",
            "value": "Type Description: Win32 EXE\nMicrosoft: Program:Win32/Wacapew.C!ml\nVT Total Detection:26/71\nFirst Submission:2026-03-30T14:21:43.000000+00:00\nLast Submission:2026-03-30T14:21:43.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041707",
        "uuid": "81c7a1c8-1a7f-4c96-964a-17760d4e35da",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041707",
            "to_ids": true,
            "type": "md5",
            "uuid": "9dd960a6-da6a-4e6c-bae1-4aa509789ad0",
            "value": "27072f26b94d1a418b6fb12d7cc968f0",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018433",
            "to_ids": true,
            "type": "sha1",
            "uuid": "1f043e88-a873-4d2c-8c08-ef3ab10ee328",
            "value": "7f257bdfec7193d00deb3255409edc24bac2c483",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018433",
            "to_ids": true,
            "type": "sha256",
            "uuid": "77b420f9-1624-4ad7-8b0c-1090aa06ddcd",
            "value": "f8fdcbbb82f1f8737430ba8c17ba61c6e775df9c54a5cd527680b78d2a2cc609",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776012832",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "64b6ac46-4618-468e-8dcc-41d229a012f0",
            "value": "6144:epFJxVbqzn7nZsdAzjOj2lvF8EIuasoyqYY:etxVbqYQlvFE"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776012832",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "6ac29837-b53e-49ce-a120-84990c9c2037",
            "value": "205312"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776012832",
            "to_ids": true,
            "type": "vhash",
            "uuid": "74781413-33b8-4147-9c4a-de568fe1dc19",
            "value": "0250466d5d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776012832",
            "to_ids": true,
            "type": "filename",
            "uuid": "74135585-481c-459d-8ca9-2fca1a505a14",
            "value": "r5a8a3gv.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  25/02/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776012832",
            "to_ids": false,
            "type": "text",
            "uuid": "b74959b0-e1e8-4fd7-a61a-ccee74b7bfd3",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:25/72\nFirst Submission:2026-02-24T09:41:33.000000+00:00\nLast Submission:2026-02-24T09:41:33.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041728",
        "uuid": "debb6d9e-da1b-4ce6-a2d8-97c1b27a4b1a",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041728",
            "to_ids": true,
            "type": "md5",
            "uuid": "aebae900-cfc1-4c8e-a52b-051ce23431c4",
            "value": "271ee00c7b60448b979b692d6050cc18",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018434",
            "to_ids": true,
            "type": "sha1",
            "uuid": "fcd541fb-0aad-4de4-ad52-378fededc744",
            "value": "24517ab588d5285b422e8594dcd8496f89b1874a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018434",
            "to_ids": true,
            "type": "sha256",
            "uuid": "eab339e2-40f2-4ec1-94aa-1f4a89ed9607",
            "value": "ce28ff161c5c30b29a235891b60f8dbd23ca1ea321f808ba9891ade9a78e734c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776012853",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "6f31392e-76b6-4f38-a998-19cd917a5ce7",
            "value": "3072:2y+NC+3FGCgIuXHbTZvQJoUaCSC0CwMQv7PfyeLZlwABcJwer:oDPgIuXHnZQyUSC/5ubfhce"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776012853",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "1b16ff59-72ab-41bc-af8a-e9b3069a1d89",
            "value": "223744"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776012853",
            "to_ids": true,
            "type": "vhash",
            "uuid": "2f9ee021-ac76-4d1a-9812-d659ace49636",
            "value": "0250466d7d155025z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  09/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776012853",
            "to_ids": false,
            "type": "text",
            "uuid": "17019b9a-556a-4266-88aa-6749dd60587e",
            "value": "Type Description: Win32 EXE\nMicrosoft: None\nVT Total Detection:22/72\nFirst Submission:2026-03-09T06:44:42.000000+00:00\nLast Submission:2026-03-09T06:44:42.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041750",
        "uuid": "c1434fac-d074-40fd-a93c-40f740238c85",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041750",
            "to_ids": true,
            "type": "md5",
            "uuid": "13313a15-12e1-4303-be29-23c06914562d",
            "value": "2a31e728d7266e2bdecc2c00dcc62957",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018435",
            "to_ids": true,
            "type": "sha1",
            "uuid": "e856a17f-0c43-4793-81d5-10fd41f38e72",
            "value": "61e3b90a861cc335e0b60ebb51c77d0950937b6a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018435",
            "to_ids": true,
            "type": "sha256",
            "uuid": "22918a61-763b-4947-9bea-d2892a2842a0",
            "value": "87187048c25203499d842a6d1281852efbd30a3f262e8ec83638ca8f5c10028d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776013002",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "460956bc-eb8d-41c4-9041-ae6f99328239",
            "value": "3072:N7MfJ8tf/L7DuXhpZwYtbYyeRSIgOeQq6Iz+9x6S+C5ofCs7kCxtPRNR1P:CO/itwGeR+OJIa9iCCT9tPRL1P"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776013002",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "3e30a20d-0905-4270-b98f-544ca0f9a014",
            "value": "227840"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776013002",
            "to_ids": true,
            "type": "vhash",
            "uuid": "1b94e1f0-2521-4e57-8cfb-9e5a5bf888fa",
            "value": "0250466d7d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776013002",
            "to_ids": true,
            "type": "filename",
            "uuid": "3b30b57a-b2bb-4a9e-9030-602a4432be72",
            "value": "vqxd3etts.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  02/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776013002",
            "to_ids": false,
            "type": "text",
            "uuid": "e4a7673f-0a30-42e4-9beb-34dafb128a8a",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:30/71\nFirst Submission:2026-04-02T03:30:37.000000+00:00\nLast Submission:2026-04-02T03:30:37.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041771",
        "uuid": "2c5d7ce9-f6da-4100-b66d-22d1530a92b5",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041771",
            "to_ids": true,
            "type": "md5",
            "uuid": "372ad008-6c87-4fc9-bf2e-dbf6106ff5f4",
            "value": "2b18f368fe7eccc677f0d03033ea03ce",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018437",
            "to_ids": true,
            "type": "sha1",
            "uuid": "a64ca9a0-c3f7-4cd5-90e0-f560bf1068c9",
            "value": "c59397ddc175a0aea8c92341752c8ff09102c13b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018437",
            "to_ids": true,
            "type": "sha256",
            "uuid": "bd3ad9c3-9564-4644-9dc6-5e22ece0e0c4",
            "value": "ad66e382afc5aab83d687a040dcf48b09d88360bb0df4f3b60d2a175fd4f0d0d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776013023",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "faf93006-6aa9-435a-8bd6-fce6b817e901",
            "value": "3072:PMkiQ0Ti78ZGAttez2m7sKNqQNmTVm9he0xoyW3kXrnLwBsYC:BsG78sATmZbNmhQa3UnsC"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776013023",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "f2f3ed0a-ec6d-4a2c-b398-c0897b4dacb6",
            "value": "230912"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776013023",
            "to_ids": true,
            "type": "vhash",
            "uuid": "7250f8ba-c441-4830-be48-be6a6d7ba93c",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776013023",
            "to_ids": true,
            "type": "filename",
            "uuid": "49867a83-9e78-4057-8fc6-3207446931cb",
            "value": "fge6bpjm.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  08/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776013023",
            "to_ids": false,
            "type": "text",
            "uuid": "7e77ec8d-fa43-4c8b-bea2-fa806bd43aa0",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Etset!rfn\nVT Total Detection:39/72\nFirst Submission:2026-03-04T08:12:41.000000+00:00\nLast Submission:2026-03-04T08:12:41.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041793",
        "uuid": "b4b87156-bf95-43bb-9c02-0180dd8782a9",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041793",
            "to_ids": true,
            "type": "md5",
            "uuid": "86c8a640-0bba-4798-8c0b-6ac1e6646030",
            "value": "2e229a8920f6a83433760f315eb373fa",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018438",
            "to_ids": true,
            "type": "sha1",
            "uuid": "52a34d08-f71a-4f52-a3f9-ffbecfa625ab",
            "value": "98af54e1beeb43da6640a165b2d2a9d26681ea6d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018438",
            "to_ids": true,
            "type": "sha256",
            "uuid": "9778194c-4a26-49b9-a79d-fbcbb34e6875",
            "value": "f0ec11682e4e2db15721b4e463d55fbf99ef399b9c635628133fa4f09bf5f3c0",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776013131",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "276fafd8-5670-49b0-8737-241d6a4155da",
            "value": "6144:mpFJxVbqzn7nZsdAzjOj2lvF8EIuGVoyqYY:mtxVbqYQlvFE"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776013131",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "8e7e3c3a-e58b-4fd0-ab11-10863c06e77d",
            "value": "204800"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776013131",
            "to_ids": true,
            "type": "vhash",
            "uuid": "2722ac87-1d79-49e9-97b2-5ddc3aeade3f",
            "value": "0250466d5d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776013131",
            "to_ids": true,
            "type": "filename",
            "uuid": "e2e4922a-7efb-4eec-90b1-72b7334a0e3f",
            "value": "eust7z1ug.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  17/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776013131",
            "to_ids": false,
            "type": "text",
            "uuid": "8b5fd6d1-fc4e-48ad-9d33-85433b6cb039",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Etset!rfn\nVT Total Detection:38/72\nFirst Submission:2026-02-23T02:02:36.000000+00:00\nLast Submission:2026-02-23T02:02:36.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041814",
        "uuid": "786464e2-c3d8-4c57-9d31-1c8e9888db5a",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041814",
            "to_ids": true,
            "type": "md5",
            "uuid": "f42c73d3-32dc-4820-af02-aab5c3d39aa0",
            "value": "2e6adebd362ce27497e40d02da4c302c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018438",
            "to_ids": true,
            "type": "sha1",
            "uuid": "bed56b02-3579-4060-a8c8-f150593a73bb",
            "value": "38ef7bc6ae1c7cc120233f5b5e021e6bc67a1eca",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018438",
            "to_ids": true,
            "type": "sha256",
            "uuid": "4e3e38d0-fa55-484a-993f-cfb2e56119f7",
            "value": "93e575d48899879c17da1cf6c299f88bd13d1c6055e6d6bc62c70383ec7c017a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776013153",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "e409936a-31ca-481f-a8f0-cce1cba506b2",
            "value": "3072:eren4pym5JDR97AkiZlj1PXweQqrK5NlVuB1lmu3SzT5i8b9OOQktxwkLNn11Rr:VCXXATJgdvEB7ip9OI"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776013153",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "baab19bb-646f-43a1-95b9-914cc94f04fa",
            "value": "232960"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776013153",
            "to_ids": true,
            "type": "vhash",
            "uuid": "503ad969-2732-4e65-b08c-9e870643bcc8",
            "value": "025046656d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776013153",
            "to_ids": true,
            "type": "filename",
            "uuid": "6164e790-0a48-443b-bfbd-2b8db71a9423",
            "value": "4anl6k.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  09/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776013153",
            "to_ids": false,
            "type": "text",
            "uuid": "af2a07cb-6d00-465a-b64e-17ec4164db11",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Lazy.RR!MTB\nVT Total Detection:47/72\nFirst Submission:2026-04-01T22:25:41.000000+00:00\nLast Submission:2026-04-01T22:25:41.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041835",
        "uuid": "250cbd83-c54a-41b2-a869-98058abcee9a",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041835",
            "to_ids": true,
            "type": "md5",
            "uuid": "4b6326f3-0842-42d7-8018-259d31657e35",
            "value": "33162d48d0c225fe8f990d3f57ad6e27",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018440",
            "to_ids": true,
            "type": "sha1",
            "uuid": "9c75918e-159a-499d-a737-c0ad3682e327",
            "value": "989a680bc99bf0946f0ada770cea66723d625660",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018440",
            "to_ids": true,
            "type": "sha256",
            "uuid": "c10c853f-abaf-454e-bd7f-43fbc13c9710",
            "value": "82bcc56e88b76614c4eecadd602ff99616e6fc9c80106f75b23ac4f1d1f0a3b4",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776013238",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "6200e8ac-f0dd-4c4c-a35a-5adfdd831393",
            "value": "3072:Fren4pym5JDR97AkiZlj1PXweQqrK5NlVuB1lmu3SzT5i8b9OOQktxwKLNL11Rr:sCXXATJgdvEB7ip9OO"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776013238",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "830fcc46-f076-46ba-b813-e00f512a1137",
            "value": "232960"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776013238",
            "to_ids": true,
            "type": "vhash",
            "uuid": "e969331e-ec62-41f7-88c8-ebc034f29414",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776013238",
            "to_ids": true,
            "type": "filename",
            "uuid": "a129d3b4-63d0-4193-9cb2-d032e9f76c40",
            "value": "2benat4t7.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  01/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776013238",
            "to_ids": false,
            "type": "text",
            "uuid": "8ad14fcc-a47b-4074-96a1-76df0231a342",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:26/71\nFirst Submission:2026-04-01T03:20:54.000000+00:00\nLast Submission:2026-04-01T03:20:54.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041856",
        "uuid": "ec0ed297-7130-4ef5-bd6d-6258887d6fdc",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041856",
            "to_ids": true,
            "type": "md5",
            "uuid": "4e5a447e-2743-4082-8545-881cdbd29e88",
            "value": "34a91dd147ce0cbc810f3fce02deb0cd",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018441",
            "to_ids": true,
            "type": "sha1",
            "uuid": "3bc312de-f018-4aed-8571-3bd19c1f21d4",
            "value": "bd8275cba3fd012e3f4b29626f0868c410c2f832",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018441",
            "to_ids": true,
            "type": "sha256",
            "uuid": "39caff91-a124-450d-9773-ddba999a41f6",
            "value": "7f972966a2b11fb1180d7c615e5273a9b780899ed7e70239ab8fd375c06619f2",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776013302",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "3bbbea53-3471-4384-8e50-632757b565bd",
            "value": "3072:wFoWC5C9nJvzUL6p8Y74iRzfioaJ/GQPvlzP4BQOGAbcQQd4Fvv:XWEC5zQ8DVa9Jnl7PAIQQd4F"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776013302",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "d3d5ed64-bd46-443e-bb9b-b4d6f273eb64",
            "value": "222720"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776013302",
            "to_ids": true,
            "type": "vhash",
            "uuid": "8940685b-8012-41c9-a3b6-6b1269183346",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776013302",
            "to_ids": true,
            "type": "filename",
            "uuid": "6f1b0b5d-8529-404c-9bf0-ab7fc2fbb890",
            "value": "ypks42mr.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  28/02/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776013302",
            "to_ids": false,
            "type": "text",
            "uuid": "624c4e83-6503-486a-b909-ae8657018ed2",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:25/72\nFirst Submission:2026-02-26T18:26:23.000000+00:00\nLast Submission:2026-02-26T18:26:23.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041878",
        "uuid": "22994d35-336e-4237-a48b-54015e391c80",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041878",
            "to_ids": true,
            "type": "md5",
            "uuid": "ed5862d0-2a2d-400a-a262-e3758e1f5e46",
            "value": "34f8e0e6e49f3e11f2c8947060d28bad",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018441",
            "to_ids": true,
            "type": "sha1",
            "uuid": "d93ae23d-bf62-44eb-9aa0-64fe52cc98eb",
            "value": "8026798764f783612b2f2b30e884f4a2a7228497",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018442",
            "to_ids": true,
            "type": "sha256",
            "uuid": "ea04fcf7-4e0a-4c87-a7a5-79d564ba3e44",
            "value": "7f8eabd2a2c81dca6084ce44f5c815a1ee1852b7bab3acd08e4b8b1c4ff8c989",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776013344",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "9b490021-9eb6-42ad-aa5a-9c1b21dd46b4",
            "value": "3072:Fren4pym5JDR97AkiZlj1PXweQqrK5NlVuB1lmu3SzT5i8b9OOQktxwRLN311Rr:sCXXATJgdvEB7ip9OL"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776013344",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "a58dd36b-0e30-4950-a2c7-72b485dd9163",
            "value": "232960"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776013344",
            "to_ids": true,
            "type": "vhash",
            "uuid": "4c2c0219-b1c4-4c98-bb97-d97f20c50d7f",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  30/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776013344",
            "to_ids": false,
            "type": "text",
            "uuid": "1eb7e6f9-5b8d-43d1-9bf5-8db39b064b7b",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.C!ml\nVT Total Detection:26/71\nFirst Submission:2026-03-30T14:27:12.000000+00:00\nLast Submission:2026-03-30T14:27:12.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041899",
        "uuid": "84ea7949-d916-4ddf-9410-1978651f67f8",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041899",
            "to_ids": true,
            "type": "md5",
            "uuid": "5d48583e-83e2-4923-a2a3-3e6e4817a110",
            "value": "359309ffa70949f6646ad28b070b4130",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018443",
            "to_ids": true,
            "type": "sha1",
            "uuid": "483b3ef0-5c79-4744-adf6-bcba1393e378",
            "value": "87e5a75bcd6b001fad19f5f5d7f40fba18fb4e6c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018443",
            "to_ids": true,
            "type": "sha256",
            "uuid": "34e7d75f-55f8-4c1b-b946-83ed6a900848",
            "value": "fbd292e09f86e2ea46cc84fc68ec331a67b8731556852cfd36d72edcb5a4ab52",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776013366",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "afe1477d-de5b-491c-ae53-c824baf955d3",
            "value": "3072:wq0RV1RNu5qrc9hitBQU22Wc4F9XdmiBynoMRyDEPL:x0VBrcLitmDVX0iyo2T"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776013366",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "aa9dbe7c-0f82-4a76-93c2-6987f5e99944",
            "value": "227840"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776013366",
            "to_ids": true,
            "type": "vhash",
            "uuid": "e82ce0be-0993-4e36-aead-f0110bae1a7c",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  10/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776013366",
            "to_ids": false,
            "type": "text",
            "uuid": "80ad95c3-8cea-445b-8155-001706c51cea",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Ravartar!rfn\nVT Total Detection:48/72\nFirst Submission:2026-04-06T13:41:58.000000+00:00\nLast Submission:2026-04-06T13:41:58.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041920",
        "uuid": "b14e23cb-9047-46c3-aed2-e3b244860beb",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041920",
            "to_ids": true,
            "type": "md5",
            "uuid": "efd57c3d-2916-4e85-899f-16fdc653a88a",
            "value": "36125b9e941d94adf4a103312ae8572c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018444",
            "to_ids": true,
            "type": "sha1",
            "uuid": "ecb1a344-f137-4962-be63-a342e488706b",
            "value": "cd7e5b849366b55605b2aed8c574e1089497b29d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018444",
            "to_ids": true,
            "type": "sha256",
            "uuid": "ce99f2dc-ee46-4e9c-976b-3e0b1a68a1e6",
            "value": "a7335d4a92bcd3a28973761b24e9a814ffb2624286bf56af7259f4545e817ea1",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776013409",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "170be9f6-6e87-4c07-867d-d523f507140f",
            "value": "3072:WKsdw6g4JCbeZDrInZgQlFecnH3bzIEXAQxf+coftuEV/3NyTFNq/:Ud9J3ebH33LQSit4T"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776013409",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "82518d30-928f-42d9-88ee-3ac3f5c2e6ff",
            "value": "227328"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776013409",
            "to_ids": true,
            "type": "vhash",
            "uuid": "6a63d1b2-e632-414a-8917-e96f1b98dcd5",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776013409",
            "to_ids": true,
            "type": "filename",
            "uuid": "1c8708cd-5482-4503-88f8-d9b4eca16b56",
            "value": "knmefuuu.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  06/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776013409",
            "to_ids": false,
            "type": "text",
            "uuid": "472928bc-84f2-4ed5-9441-58a8736eb528",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:47/72\nFirst Submission:2026-04-04T16:56:18.000000+00:00\nLast Submission:2026-04-04T16:56:18.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041941",
        "uuid": "b9c34743-ea0e-4321-8e43-894188b40616",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041941",
            "to_ids": true,
            "type": "md5",
            "uuid": "50fdbb17-f24e-46c8-8bd1-7515a8655971",
            "value": "361f77e7645d79a11127edb7b2a71569",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018444",
            "to_ids": true,
            "type": "sha1",
            "uuid": "f876ef25-225b-43ac-922d-6d923c21c25c",
            "value": "fe17308804f884b1deaa188ad6aa66fdd05c72c2",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018445",
            "to_ids": true,
            "type": "sha256",
            "uuid": "f03c5ab6-a1f8-4c43-9771-889f78c745f7",
            "value": "36bd478924ef4ab558f22b024c339dbd12d3d36aa4ce701072afa0da18324f91",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776013430",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "94435ea3-d5f0-4d46-ad90-c4782eab5873",
            "value": "3072:qJ7og3wQ217siFax6B+JhxupRkFWg3KvZ8qWkJdyRQKbCbpkLx87Jt8tp9qw:oog3wQ2Nex6BkxhUuqWcdyR/UQp9qw"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776013430",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "30e30ada-478a-40fe-a686-6ec7a295ef0c",
            "value": "232448"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776013430",
            "to_ids": true,
            "type": "vhash",
            "uuid": "e17a076d-da0e-4c36-b58e-3a67771e18ad",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776013430",
            "to_ids": true,
            "type": "filename",
            "uuid": "7be2d1c1-f0d7-4bd7-8584-ccad7fd37764",
            "value": "i5bec50c.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  30/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776013430",
            "to_ids": false,
            "type": "text",
            "uuid": "be9295ab-62b6-436f-b019-752b3a5ffecb",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win64/Tedy.KKC!MTB\nVT Total Detection:40/71\nFirst Submission:2026-02-28T18:36:23.000000+00:00\nLast Submission:2026-02-28T18:36:23.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041962",
        "uuid": "1f9324a2-f9d6-4d1f-8073-f8859f2b6d73",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041962",
            "to_ids": true,
            "type": "md5",
            "uuid": "8ff948de-a717-4ecc-ac76-0bd9a803af79",
            "value": "362c0ea50ae195f00469d5c9c7094203",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018446",
            "to_ids": true,
            "type": "sha1",
            "uuid": "96bfde61-deef-4b8e-ae60-7b96aacf717c",
            "value": "2311f65e26949ede3a3eeaf73a0fa8e1556d4e63",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018446",
            "to_ids": true,
            "type": "sha256",
            "uuid": "6d03928f-91f3-4d86-92ed-19457bde4068",
            "value": "adebc5e43a2ac603270749262dcdcd8e4af5f7f2acc075545cee2ee043501971",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776013452",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "fcc8fb3c-c737-473c-8d45-3d0e4c4607ad",
            "value": "3072:aZcVQT0bdnlqIG7tOvwOq808vefxxlMdipe3t1MfSxP0tsR:XyQiAzq8Le5mi0hW"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776013452",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "97587653-ee94-4cfa-af62-99ccf3b3fe18",
            "value": "223744"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776013452",
            "to_ids": true,
            "type": "vhash",
            "uuid": "10f083fd-ec23-46a9-9a12-62fbb2f9d2fd",
            "value": "0250466d7d155025z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  14/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776013452",
            "to_ids": false,
            "type": "text",
            "uuid": "fd9954c2-7eb3-412b-898c-bba647c062da",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:26/72\nFirst Submission:2026-03-14T14:18:06.000000+00:00\nLast Submission:2026-03-14T14:18:06.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776041984",
        "uuid": "c97a30de-fa1f-45e2-bb3d-3273891afcc9",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776041984",
            "to_ids": true,
            "type": "md5",
            "uuid": "4a0130ca-17a0-4d1f-bb9b-a2f085a8b914",
            "value": "37696ccdbdb79997848a3037f5fe1678",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018447",
            "to_ids": true,
            "type": "sha1",
            "uuid": "2d6dbacc-0ade-448b-8148-8a7e2b94e7c6",
            "value": "379bc8e107b4767c8761aa50fac9ed68b687625d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018447",
            "to_ids": true,
            "type": "sha256",
            "uuid": "5b5af3a6-54c8-441f-ac39-56908e72cd48",
            "value": "7be1103434d1f62c9ab13e5b17e03957acb911f57d4e39610a9034985ce8405e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776013474",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "7abd35fb-1e36-4a56-bef7-23eeffb123c2",
            "value": "3072:aZcVQT0bdnlqIG7tOvwOq808vefxxlMdipe3t1MfSxF30aR:XyQiAzq8Le5mi0hU"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776013474",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "a1773c3d-0e12-465f-85f3-df7ed504964d",
            "value": "223744"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776013474",
            "to_ids": true,
            "type": "vhash",
            "uuid": "4b694a81-efef-484c-9ffc-18c82d34b88c",
            "value": "0250466d7d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776013474",
            "to_ids": true,
            "type": "filename",
            "uuid": "500160cb-a8da-4e84-9e40-70693d1ec5eb",
            "value": "szt4zih.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  13/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776013474",
            "to_ids": false,
            "type": "text",
            "uuid": "2b866795-6b40-44ff-888e-0e9022b6e15c",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:22/72\nFirst Submission:2026-03-13T15:39:18.000000+00:00\nLast Submission:2026-03-13T15:39:18.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042006",
        "uuid": "fa1ad36b-9c5b-4dad-ac3a-26e51fa3da45",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042006",
            "to_ids": true,
            "type": "md5",
            "uuid": "91392b0b-cbcf-4fcb-b118-f7ebeb9d4678",
            "value": "389f6e13e039f51dc1aba8a66a7cc67b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018448",
            "to_ids": true,
            "type": "sha1",
            "uuid": "335c6c36-6e1f-4ab6-81bb-888a10be4a09",
            "value": "19fd562750842e8606718298f6781da5f8f123b9",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018448",
            "to_ids": true,
            "type": "sha256",
            "uuid": "8831fc65-1639-4280-ab85-fb69f33d8e7a",
            "value": "278b1cf92b7a82bfd70420071d2392eb787559009dc23221fbb8bf5a7bbe386b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776013538",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "d4938dd8-b44f-40e7-8364-f9c2a9e26de5",
            "value": "3072:qJ7og3wQ217siFax6B+JhxupRkFWg3KvZ8qWkJdyRQKbCbpkLx87Jt8Bp9qw:oog3wQ2Nex6BkxhUuqWcdyR/UOp9qw"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776013538",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "6d1b98ba-c3dd-4117-b147-9b6089e964a9",
            "value": "232448"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776013538",
            "to_ids": true,
            "type": "vhash",
            "uuid": "e7ee184d-13f6-4b5d-9acc-919f71d78c15",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776013538",
            "to_ids": true,
            "type": "filename",
            "uuid": "bfcb911c-a74b-4a34-8a6e-9cbc1e296665",
            "value": "2by4dbr.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  03/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776013538",
            "to_ids": false,
            "type": "text",
            "uuid": "e8a30e24-599b-4d49-90cd-8aa60f446bb1",
            "value": "Type Description: Win32 EXE\nMicrosoft: None\nVT Total Detection:36/72\nFirst Submission:2026-03-02T02:07:31.000000+00:00\nLast Submission:2026-03-02T02:07:31.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042027",
        "uuid": "4b55d52b-42c4-443e-8a7b-a41565da51b8",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042027",
            "to_ids": true,
            "type": "md5",
            "uuid": "cf3ab5a1-e4d2-4f3c-a98d-0e4a51c4932a",
            "value": "38c59ea58ee9b72dfce04c5282a4582d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018449",
            "to_ids": true,
            "type": "sha1",
            "uuid": "aa1b5f27-cd10-4a20-b7b4-d02f3911b2d9",
            "value": "3f4cc777d8837812d3758203c2acaa931f6e0de5",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018449",
            "to_ids": true,
            "type": "sha256",
            "uuid": "012cfd56-f6ce-471a-ae1b-f96b9a658e69",
            "value": "bf019fce0239fc6cf81d7c9d2145eff793157c8d72a76f8ff00b3abed20af5d0",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776013560",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "78ac3acc-a4ee-49b5-8509-8a9076ebf4ed",
            "value": "3072:iZcVQT0bdnlqIG7tOvwOq808vefxxlMdipe3t1MfSxY0xR:fyQiAzq8Le5mi0h/"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776013560",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "a1af17af-f9c2-4737-ac21-db506a741f6b",
            "value": "224632"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776013560",
            "to_ids": true,
            "type": "vhash",
            "uuid": "71f41301-f2cb-4c17-a6f0-70ec560f07d2",
            "value": "025046657d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776013560",
            "to_ids": true,
            "type": "filename",
            "uuid": "abeeb510-1b4f-4f76-ab37-e5d709f21e20",
            "value": "z36ejc.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  23/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776013560",
            "to_ids": false,
            "type": "text",
            "uuid": "1fe18bb9-8ecf-4a2e-83d5-70e2f2c05730",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Etset!rfn\nVT Total Detection:46/72\nFirst Submission:2026-03-15T00:02:31.000000+00:00\nLast Submission:2026-03-15T00:02:31.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042048",
        "uuid": "83169e38-7b26-4bc4-87cb-b2bd5803b2fd",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042048",
            "to_ids": true,
            "type": "md5",
            "uuid": "bbc230bc-ca8f-4f6f-8f85-3dacb4f54624",
            "value": "3a35686f11c321205bd049cbcda1b860",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018450",
            "to_ids": true,
            "type": "sha1",
            "uuid": "dd76d8ca-e67b-45ad-9032-d6165a787f4f",
            "value": "fa7986bae868b1c83bc1b215fac78b141bada33b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018450",
            "to_ids": true,
            "type": "sha256",
            "uuid": "e74722f3-d874-49c8-9181-0bdb06a6ff33",
            "value": "d9c4974826181fafe8d99a5d732a35608dffec48e98ea89ea6497fb88a0ad692",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776013582",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "6ce50144-fe13-4857-be3d-6a3fc30fbf1f",
            "value": "3072:puasQyBVshtd+fOUIA1qwMpfUkwMU86O6iy5JuRw1pdvbv:pSDs7BlDUkwmn6iy5JTdvbv"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776013582",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "89841541-0478-43bc-85e1-ccde5693c75b",
            "value": "233472"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776013582",
            "to_ids": true,
            "type": "vhash",
            "uuid": "57040122-fc7f-49f7-9110-a82ba321e579",
            "value": "025046655d155035z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  25/02/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776013582",
            "to_ids": false,
            "type": "text",
            "uuid": "6d04523e-9cc6-4728-88d2-a9a77c98b7aa",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:44/72\nFirst Submission:2026-02-21T05:45:30.000000+00:00\nLast Submission:2026-02-21T05:45:30.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042069",
        "uuid": "a9a58bb0-d270-4b22-8d5e-2df1cd40283d",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042069",
            "to_ids": true,
            "type": "md5",
            "uuid": "699e170b-f3c4-4d69-962f-fc39827e6992",
            "value": "3c4ad79bd771427b3b3c8cbe1aafd775",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018451",
            "to_ids": true,
            "type": "sha1",
            "uuid": "3f9392a9-2234-4c6c-9d49-6abcf0a3caf4",
            "value": "ecd4f752916f7c456aec1e062e2b2b6bd3dad989",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018451",
            "to_ids": true,
            "type": "sha256",
            "uuid": "138b5501-ed9c-4af5-8c31-bfadc1de6ec9",
            "value": "44caa9cc489bc0c7f237fab80cae617c573c8ebc91926685b2cc327a390f5ba0",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776013625",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "305e9297-bbe6-49ad-85f2-57e903c1257c",
            "value": "3072:vtDPL086KvAq6wHgG08mEthZs6siURap65uJ:pz08pYq5tlthZseogJ"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776013625",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "b62eb29d-2040-4acb-8d5b-bcbe8d26eee5",
            "value": "228864"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776013625",
            "to_ids": true,
            "type": "vhash",
            "uuid": "41f68bad-20b3-40ec-817d-cdb0f7f35cc9",
            "value": "025046656d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776013625",
            "to_ids": true,
            "type": "filename",
            "uuid": "4255b092-dbab-402f-800f-a48fb2a76243",
            "value": "bnxve.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  09/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776013625",
            "to_ids": false,
            "type": "text",
            "uuid": "c6c1f7f6-8b50-4161-a27d-9d5e1da2d7d2",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Lazy.RR!MTB\nVT Total Detection:52/72\nFirst Submission:2026-03-28T08:18:44.000000+00:00\nLast Submission:2026-03-28T08:18:44.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042090",
        "uuid": "4222ff3e-8ae5-4d46-8bc0-ed9a43ae5004",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042090",
            "to_ids": true,
            "type": "md5",
            "uuid": "b4889df1-4c85-4c1f-81ec-dc0b2bfefafe",
            "value": "3c818bca02c252b13b55ed9ff2d3eeb9",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018452",
            "to_ids": true,
            "type": "sha1",
            "uuid": "64268e8e-48a1-471f-b791-428c9069de2f",
            "value": "fe97894030ebcda06034b5e76c237716eda31f1d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018452",
            "to_ids": true,
            "type": "sha256",
            "uuid": "5df739ec-835f-4478-81ff-031b2660dfcc",
            "value": "6d4bbada507e3a3ce73e498ccc69fbc4feefa17c85be95e3683b60fd8caa528f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776013646",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "c2571ec5-2c3a-43ee-b274-ec8b55845a55",
            "value": "3072:9J7og3wQ217siFax6B+JhxupRkFWg3KvZ8qWkJdyRQKbCbpkLx87JtQBp9qw:7og3wQ2Nex6BkxhUuqWcdyR/USp9qw"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776013646",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "a85029e1-efa2-4385-9721-b0fcb342c50a",
            "value": "231936"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776013646",
            "to_ids": true,
            "type": "vhash",
            "uuid": "4b7f6170-8250-45c6-af2a-a1ea7149cbad",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776013646",
            "to_ids": true,
            "type": "filename",
            "uuid": "804d9ff8-738d-4372-98c2-38dc22e3a49e",
            "value": "6zufd8m.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  08/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776013646",
            "to_ids": false,
            "type": "text",
            "uuid": "aa361428-d68c-430a-b5e1-0f85108033eb",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Etset!rfn\nVT Total Detection:42/72\nFirst Submission:2026-03-04T16:09:23.000000+00:00\nLast Submission:2026-03-04T16:09:23.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042111",
        "uuid": "31066172-3367-43d5-8344-9fc267a0e776",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042111",
            "to_ids": true,
            "type": "md5",
            "uuid": "47729633-06d2-4bfa-a9ca-600c45c30cc2",
            "value": "3caffe9f45717c445386d82bd4d01919",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018453",
            "to_ids": true,
            "type": "sha1",
            "uuid": "f8d83d2d-8348-40ee-9677-d434a6df604b",
            "value": "00f96d7a9e23faa03e0e2b3daf1c4dd3f23d9b9a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018453",
            "to_ids": true,
            "type": "sha256",
            "uuid": "d9186576-28d1-4fc2-95e9-80206e008122",
            "value": "fff3da96d777d6e144db0609186641a7d0ef20315792aa7b1bf138a917bf5587",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776013668",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "5a78afa6-8929-4c9c-a48d-2b19cae7e6e7",
            "value": "3072:vtDiL086KvAq6wHgG08mEthZs6siURap6KvJ:pO08pYq5tlthZseooJ"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776013668",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "c9d92acf-b4af-4b8c-99ef-bbb44ae80cc2",
            "value": "228864"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776013668",
            "to_ids": true,
            "type": "vhash",
            "uuid": "60e9ad39-e2e4-4fe4-acf7-c46fe4757eea",
            "value": "025046656d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776013668",
            "to_ids": true,
            "type": "filename",
            "uuid": "517269cb-4fb5-4a39-a12a-5e1ea341f16e",
            "value": "s0b_36e9579ece3e.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  04/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776013668",
            "to_ids": false,
            "type": "text",
            "uuid": "f4b25331-e8dd-40ec-b533-f53949b6a8cf",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win64/Lazy.MKJ!MTB\nVT Total Detection:51/72\nFirst Submission:2026-04-02T20:02:45.000000+00:00\nLast Submission:2026-04-02T20:02:45.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042133",
        "uuid": "cc35e024-8527-4fae-8064-714a524ddb71",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042133",
            "to_ids": true,
            "type": "md5",
            "uuid": "653c4cca-04fb-40f7-8ed1-5cc0d0517398",
            "value": "3f3c40e6cd10bb385464d8601df30060",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018455",
            "to_ids": true,
            "type": "sha1",
            "uuid": "74b97d7d-b9b7-4f6c-a3e4-4ed15bd1cb22",
            "value": "58761f5bddb95bd8f91340e995cf42322d47cf30",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018455",
            "to_ids": true,
            "type": "sha256",
            "uuid": "00fb8f3e-db68-49dd-a872-47860586c75a",
            "value": "2e842eab0c16ddd1a2ec4a56610adb58d115b65a1e08e9b67e7e375f8eed0873",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776013732",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "a6f02b99-67ae-415c-866e-f41835c1cc83",
            "value": "3072:+uasQyBVshtd+fOUIA1qwMpfUkwMU86O6iy5JuRw1pdvbH:+SDs7BlDUkwmn6iy5JTdvbH"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776013732",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "314472d2-22ab-408e-8441-2954a22e6c42",
            "value": "221184"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776013732",
            "to_ids": true,
            "type": "vhash",
            "uuid": "48bfb5f8-80fe-4aff-8784-0c3737e4f08b",
            "value": "025046655d155035z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  15/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776013732",
            "to_ids": false,
            "type": "text",
            "uuid": "e0975f3f-3274-438d-af8a-670149cd6147",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:40/72\nFirst Submission:2026-02-18T19:17:30.000000+00:00\nLast Submission:2026-02-18T19:17:30.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042154",
        "uuid": "7e4e503b-2bbd-4906-8627-91b4d86a2e41",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042154",
            "to_ids": true,
            "type": "md5",
            "uuid": "c96605f6-e927-4184-b35e-d5e70e856fc0",
            "value": "40381098758a12e49ea117cddc129fcd",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018456",
            "to_ids": true,
            "type": "sha1",
            "uuid": "eef3358f-b0de-4790-b731-026eb8846be5",
            "value": "62a6fc92b475ebdb867b3387a25334c22a4f628b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018456",
            "to_ids": true,
            "type": "sha256",
            "uuid": "e057b5c7-4025-408a-b13d-2aedb8f01183",
            "value": "ed5f7878da3c9f27f190d0599ee162d1d8dc58fc50ef9074975c0de678481af3",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776013753",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "ce035304-fc73-48b7-9573-3d2d03d6e0c1",
            "value": "3072:jKsdw6g4JCbeZDrInZgQlFecnH3bzIEXAQxf+coftuEV/3NmP6rNgI:Zd9J3ebH33LQSit"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776013753",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "0d45c4b9-bc9b-477f-bf54-abf3dbf2f3a9",
            "value": "227328"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776013753",
            "to_ids": true,
            "type": "vhash",
            "uuid": "5ac14125-b959-418c-b690-5186352efefe",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  04/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776013753",
            "to_ids": false,
            "type": "text",
            "uuid": "88fc23c0-ae2e-4100-bcc2-599327a36ca1",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:29/72\nFirst Submission:2026-04-04T10:59:34.000000+00:00\nLast Submission:2026-04-04T10:59:34.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042175",
        "uuid": "55b40f5a-1ace-42aa-9b62-db7eef33f31c",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042175",
            "to_ids": true,
            "type": "md5",
            "uuid": "fcb5b08a-1850-480e-b58d-678b61935b77",
            "value": "40596a8c0c13a14cd011f41443c3404f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018457",
            "to_ids": true,
            "type": "sha1",
            "uuid": "796d5c0f-13d3-422c-af76-6d050969c0e0",
            "value": "1b7b7e663be2823202d1ac976b5ed09e933def38",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018457",
            "to_ids": true,
            "type": "sha256",
            "uuid": "b1a1d8ae-7db7-4e56-97bb-c25837b9e121",
            "value": "7ce55db2df6c8314f087dd9f5a2e24890344f5e242b082dfff48544ce6702e2e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776013775",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "1f92e7e5-181e-4f92-b628-a9f332085f46",
            "value": "3072:wFoWC5C9nJvzUL6p8Y74iRzfioaJ/GQPvlzP4BQOGAbjQQduFvv:XWEC5zQ8DVa9Jnl7PA/QQduF"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776013775",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "15a12259-a4b9-4173-8826-58fc75e94c3b",
            "value": "222720"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776013775",
            "to_ids": true,
            "type": "vhash",
            "uuid": "6c46a6fd-8f98-45d9-9ef8-580d282a2337",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776013775",
            "to_ids": true,
            "type": "filename",
            "uuid": "93fdf1c4-846e-4914-bc9f-4eb62f1dc5c4",
            "value": "w6gfctsm.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  03/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776013775",
            "to_ids": false,
            "type": "text",
            "uuid": "7c8404b1-06f9-4d59-850c-de0e73ea22d7",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Etset!rfn\nVT Total Detection:42/72\nFirst Submission:2026-02-28T23:32:13.000000+00:00\nLast Submission:2026-02-28T23:32:13.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042196",
        "uuid": "3afdd313-04df-4de9-a89f-914feed50ee8",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042196",
            "to_ids": true,
            "type": "md5",
            "uuid": "ee039e3b-255b-4931-aa80-231038036502",
            "value": "418d52792aa547a4bf723b18cde39c74",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018458",
            "to_ids": true,
            "type": "sha1",
            "uuid": "57c5e545-6f87-4757-9a04-67a16cce15fc",
            "value": "a5d5aab2e9e3172054b0018d624e4ed3d91e2664",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018458",
            "to_ids": true,
            "type": "sha256",
            "uuid": "a5bb14cc-8f33-4342-9de8-ecc11d728f4e",
            "value": "9ab954c93db8b136ecae5125952f05a9664b4e19a3e64a57e99b2afd3a2466af",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776013839",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "a7f22d8a-623b-4e07-b772-a30f09ae899b",
            "value": "3072:ctDPL086KvAq6wHgG08mEthZs6siURap6eR0zq:mz08pYq5tlthZseo"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776013839",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "6a984e23-a053-4a45-8667-5998f10afccf",
            "value": "228864"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776013839",
            "to_ids": true,
            "type": "vhash",
            "uuid": "53d632c5-3059-424a-82ab-a93e5e190489",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  26/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776013839",
            "to_ids": false,
            "type": "text",
            "uuid": "99dcb8ae-498e-4526-81df-629fea674770",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:31/72\nFirst Submission:2026-03-25T18:21:21.000000+00:00\nLast Submission:2026-03-25T18:21:21.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042217",
        "uuid": "2139a275-45f5-4d66-98fe-bb09cdeb24de",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042217",
            "to_ids": true,
            "type": "md5",
            "uuid": "7ac3ab13-a08b-4f2f-86fd-5793403b6ead",
            "value": "425a275baa84e1b01f02391470a64505",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#230087",
                "local": false,
                "name": "rectifyq:samples-found-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018459",
            "to_ids": true,
            "type": "sha1",
            "uuid": "9939545b-85eb-4c89-97a2-bb843e48fbed",
            "value": "5c7a619ec9c958776c08c16a1fcad682afc477dd",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#230087",
                "local": false,
                "name": "rectifyq:samples-found-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018460",
            "to_ids": true,
            "type": "sha256",
            "uuid": "16461fee-9cd0-4e17-8c22-d70a3cea69ed",
            "value": "e62a0100c482453f0cc26d4e4db542ae25764386fd966b799ead1c4e5e417392",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#230087",
                "local": false,
                "name": "rectifyq:samples-found-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776013861",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "98731720-401b-40bb-a2d6-99297d5db900",
            "value": "3072:Ry+NC+3FGCgIuXHbTZvQJoUaCSC0CwMQv7PfyeLZlwABcJwBr:dDPgIuXHnZQyUSC/5ubfhce"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776013861",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "c1094d1c-d13b-422e-ba18-0ec95ba51c56",
            "value": "223744"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776013861",
            "to_ids": true,
            "type": "vhash",
            "uuid": "d57325eb-122d-4d05-a5a0-334294fdb191",
            "value": "025046656d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776013861",
            "to_ids": true,
            "type": "filename",
            "uuid": "1885c15d-8fbe-4807-a467-0ac571de4747",
            "value": "e62a0100c482453f0cc26d4e4db542ae25764386fd966b799ead1c4e5e417392.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  10/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776013861",
            "to_ids": false,
            "type": "text",
            "uuid": "200cf296-79c2-496a-ba1d-0f6b185e3dfa",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Egairtigado!rfn\nVT Total Detection:45/72\nFirst Submission:2026-03-07T20:35:06.000000+00:00\nLast Submission:2026-03-07T21:36:25.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042238",
        "uuid": "13f4602d-c127-4a5f-9cc8-7cf178224bb4",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042238",
            "to_ids": true,
            "type": "md5",
            "uuid": "12befae2-a416-4f88-b224-2fc33f4f7392",
            "value": "43748d8fbc5f3aae04b284ef49159bbd",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018461",
            "to_ids": true,
            "type": "sha1",
            "uuid": "63a3a120-3208-45de-bb89-47f91cf460ca",
            "value": "b007d1b1545865e74b23829dc118f0f1f636ea13",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018461",
            "to_ids": true,
            "type": "sha256",
            "uuid": "3068d3d6-5777-4f2a-9386-9505116cf229",
            "value": "ab4095e4d1b13106926d636f428be0288d162496b4e8fb5c74acdd5c24682cda",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776013904",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "15947f55-a04f-4bc3-9147-98add7c26f93",
            "value": "3072:2y+NC+3FGCgIuXHbTZvQJoUaCSC0CwMQv7PfyeLZlwABcJwOr:oDPgIuXHnZQyUSC/5ubfhce"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776013904",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "b644659f-555d-4b28-b1c2-2793253bfb97",
            "value": "223744"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776013904",
            "to_ids": true,
            "type": "vhash",
            "uuid": "b66b9854-51db-4516-be07-7fd7a9fcb900",
            "value": "0250466d7d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776013904",
            "to_ids": true,
            "type": "filename",
            "uuid": "6533f4a1-5a8c-4666-be98-e90018083901",
            "value": "iyagro5vg.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  09/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776013904",
            "to_ids": false,
            "type": "text",
            "uuid": "4a749067-93e9-4ea8-b85a-5b7cfb2c0f99",
            "value": "Type Description: Win32 EXE\nMicrosoft: Program:Win32/Wacapew.C!ml\nVT Total Detection:23/72\nFirst Submission:2026-03-08T18:03:27.000000+00:00\nLast Submission:2026-03-08T18:03:27.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042260",
        "uuid": "ad885513-ef34-41eb-8033-a94de534f517",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042260",
            "to_ids": true,
            "type": "md5",
            "uuid": "d948d944-065f-480b-9e53-1cbe888cb3b6",
            "value": "43a31843a5aac19dfcfcd291bbb73b9a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018462",
            "to_ids": true,
            "type": "sha1",
            "uuid": "d3ecb97c-60fb-4b9b-b58a-278b2e75411a",
            "value": "cec70fe06373313ad9c6842b845afbd0e7c22e54",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018462",
            "to_ids": true,
            "type": "sha256",
            "uuid": "a0d7a165-2912-4060-92ee-27efac1b1e0e",
            "value": "78d8c327c68756e467e47b95fd284fc87156983c7bfa401fc710695cfe3c9570",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776013926",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "19be7b9e-ddd7-425d-9b9f-d50e4bb866a3",
            "value": "3072:2y+NC+3FGCgIuXHbTZvQJoUaCSC0CwMQv7PfyeLZlwABcJw1r:oDPgIuXHnZQyUSC/5ubfhce"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776013926",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "529daa45-a6b2-4490-8e6d-09b9b97c8b44",
            "value": "223744"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776013926",
            "to_ids": true,
            "type": "vhash",
            "uuid": "85854359-f5d0-4990-9c15-674d32fe7b8d",
            "value": "0250466d7d155025z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  09/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776013926",
            "to_ids": false,
            "type": "text",
            "uuid": "e80fb62d-3f12-4718-a079-063f4dc95fb0",
            "value": "Type Description: Win32 EXE\nMicrosoft: None\nVT Total Detection:22/72\nFirst Submission:2026-03-08T18:02:36.000000+00:00\nLast Submission:2026-03-08T18:02:36.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042281",
        "uuid": "a0bc296b-9e86-4dd1-8fb6-4af987aeea6a",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042281",
            "to_ids": true,
            "type": "md5",
            "uuid": "4d5caf46-dec9-4285-8295-2826e367557b",
            "value": "451731d2d7830057aa35ee13c91ae880",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018463",
            "to_ids": true,
            "type": "sha1",
            "uuid": "8f7b5f33-13a1-42f2-b86f-79249e121742",
            "value": "f0e0ddeb87466f8c2ba92e7c886bbd5fc8cc6439",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018463",
            "to_ids": true,
            "type": "sha256",
            "uuid": "e2c24462-17c7-4106-a13d-1d84a0925384",
            "value": "4e0e88455afff3849c9cb8efe382797dd0c3aff325040dcca9bf88e61ae7b787",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776014011",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "dfa993f5-2e2e-4115-80c0-4f67d70c43d2",
            "value": "3072:Mq0RV1RNu5qrc9hitBQU22Wc4F9XdmiBynoMRyDEPW:V0VBrcLitmDVX0iyo2O"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776014011",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "6a2cc06f-20f5-4425-bc5d-db6483d4f3e7",
            "value": "228352"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776014011",
            "to_ids": true,
            "type": "vhash",
            "uuid": "a0be4ed2-b817-4909-9f2e-e5a31e914e6a",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776014011",
            "to_ids": true,
            "type": "filename",
            "uuid": "e87eb4ba-ad67-42a5-912b-1df2b7c9f171",
            "value": "qd9wazjwu.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  06/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776014011",
            "to_ids": false,
            "type": "text",
            "uuid": "4f1fedab-f603-4212-acec-3c43dcd5beb4",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:37/72\nFirst Submission:2026-04-05T08:04:10.000000+00:00\nLast Submission:2026-04-05T08:04:10.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042303",
        "uuid": "b7b3b4ee-db1f-4880-9659-1d606632e31d",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042303",
            "to_ids": true,
            "type": "md5",
            "uuid": "ed0f35c6-e2c9-4dc5-b3f1-98005d3e791b",
            "value": "489993be5200373ce70facb8bb09db35",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018463",
            "to_ids": true,
            "type": "sha1",
            "uuid": "0acde9cb-d460-430c-b3ca-ab0dd8542f8b",
            "value": "ed6591a5de59a5ad83b91a1e6c0332c868c80b5a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018463",
            "to_ids": true,
            "type": "sha256",
            "uuid": "7da03a9c-bbc2-4912-b10c-fcaa49237b38",
            "value": "dde50c53867dea17402c7bbc89bcbd1bbd10f6ff12b5d7f0c748a16f5304d67f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776014139",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "a23596e5-a045-405b-bd21-7e837b1d2673",
            "value": "3072:2fbVJDkZeYmB3KhLp+TU9x8xxycC/rOD4r+1pi6XIqQtvhQgoY86:MJDsefB3Kxp+NyBtq6h6"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776014139",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "0ecc2ece-dee2-4e50-95e1-e9f8b5b275b8",
            "value": "226816"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776014139",
            "to_ids": true,
            "type": "vhash",
            "uuid": "cb8e1b73-ce38-43ce-8dfa-418cf93d74e8",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776014139",
            "to_ids": true,
            "type": "filename",
            "uuid": "769c0401-60c1-489d-9e41-2098bbfe1080",
            "value": "gfon7vy5x.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  25/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776014139",
            "to_ids": false,
            "type": "text",
            "uuid": "2615b941-89c6-4ccc-bf71-d5f8d25a8e41",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win64/Mint.MK!MTB\nVT Total Detection:50/72\nFirst Submission:2026-03-19T06:36:52.000000+00:00\nLast Submission:2026-03-19T06:36:52.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042324",
        "uuid": "de670109-6a5d-4432-8243-5e6e19ef993b",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042324",
            "to_ids": true,
            "type": "md5",
            "uuid": "ec44c284-0c76-4276-8d48-b86de24043c7",
            "value": "494c0af0a27ffda51a47cf2128ad13e4",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018465",
            "to_ids": true,
            "type": "sha1",
            "uuid": "635d698e-7bf9-42ea-b7e4-b1fd19ad22a3",
            "value": "a24fc03aa4bfa96343af7f47f33c8edabe7ca570",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018465",
            "to_ids": true,
            "type": "sha256",
            "uuid": "4a71b1f5-0771-418e-8dec-335ef62f0e3f",
            "value": "ed32a0c35c1ee6925dca3317c7a9d2bdfd65d89cb66c775a3e981095dd664884",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776014181",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "8761ac1d-3858-4627-ab5e-cb5e98088442",
            "value": "3072:HMkiQ0Ti78ZGAttez2m7sKNqQNmTVm9he0xoyW3ktyknLwBsYC:ZsG78sATmZbNmhQa36nsC"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776014181",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "19ae22f7-68b5-4eb7-8a29-40394f22f45b",
            "value": "230400"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776014181",
            "to_ids": true,
            "type": "vhash",
            "uuid": "a30d1959-026a-481a-b548-68f4a3df981c",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776014181",
            "to_ids": true,
            "type": "filename",
            "uuid": "f792f08f-64f1-4055-b8be-40043fa114ec",
            "value": "xf9nj.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  09/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776014181",
            "to_ids": false,
            "type": "text",
            "uuid": "227d3342-bb9e-4d14-aee6-a017c6a731aa",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Etset!rfn\nVT Total Detection:41/72\nFirst Submission:2026-03-07T05:55:22.000000+00:00\nLast Submission:2026-03-07T05:55:22.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042345",
        "uuid": "993650f0-11a2-42ec-af1e-d4dc18c3cfd9",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042345",
            "to_ids": true,
            "type": "md5",
            "uuid": "d00b28e1-4ba0-4e7c-b8f5-3efb1d5e517c",
            "value": "4a2e5a268b422b207f87ffeeaf83fbf1",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#230087",
                "local": false,
                "name": "rectifyq:samples-found-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018466",
            "to_ids": true,
            "type": "sha1",
            "uuid": "a5960e52-1e78-403a-90f0-55e0adab941f",
            "value": "f2aefc8b54f7540ebf975e466d272ae836c42cbd",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#230087",
                "local": false,
                "name": "rectifyq:samples-found-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018466",
            "to_ids": true,
            "type": "sha256",
            "uuid": "b0f47d3a-c1b5-4e86-8631-922e67ba7622",
            "value": "77a2c2761bd439548177a36b6a10d8979c0e41d2cf3c1c98329307cbe5251ab6",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#230087",
                "local": false,
                "name": "rectifyq:samples-found-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776014224",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "870b510e-8fad-401e-98f7-6a1b0abd82c5",
            "value": "3072:qdypFAKxVbtEgCnCgnhZRsdAzjqVP72+cjvF9OKG+BIbYqwvCcH9ZWBGJ:FpFJxVbqzn7nZsdAzjOj2lvF8EIuC"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776014224",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "c25c8454-ecec-4b08-9050-056d7903c1d6",
            "value": "217088"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776014224",
            "to_ids": true,
            "type": "vhash",
            "uuid": "029bbee4-a9e4-4da0-a785-75217bec4d3c",
            "value": "025046655d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776014224",
            "to_ids": true,
            "type": "filename",
            "uuid": "76c21cbd-acc2-4a07-a591-4d1c8c44169e",
            "value": "77a2c2761bd439548177a36b6a10d8979c0e41d2cf3c1c98329307cbe5251ab6.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  02/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776014224",
            "to_ids": false,
            "type": "text",
            "uuid": "5f846538-bf66-4a9a-8389-5882a734d39c",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win64/Mint.AH!MTB\nVT Total Detection:34/71\nFirst Submission:2026-03-03T21:49:39.000000+00:00\nLast Submission:2026-03-03T21:49:39.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042366",
        "uuid": "6a253c44-e657-4afa-899d-448a7a0bcea7",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042366",
            "to_ids": true,
            "type": "md5",
            "uuid": "0b8492c7-4f4b-43dd-ab80-bfe17864b2f7",
            "value": "4c39793207f07fd88c3e7806478afd17",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018467",
            "to_ids": true,
            "type": "sha1",
            "uuid": "a14400cb-853f-4abb-8731-873219dc8272",
            "value": "e20192bf2527d1e71b5b8192f7e534fb3734a50e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018467",
            "to_ids": true,
            "type": "sha256",
            "uuid": "c2839a69-c435-48e2-808e-0211e3102846",
            "value": "4472948668c62171c3aed2261ee25a423b5c0aca198faf333601c56b9c370d21",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776014309",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "3d256516-bf1c-4627-976a-fc6fb3a23111",
            "value": "3072:2fbVJDkZeYmB3KhLp+TU9x8xxycC/rOD4r+1pi6XIqQtvhQpo86:MJDsefB3Kxp+NyBtq6hl"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776014309",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "bedd0489-2c27-4ffe-b088-144cb3998f07",
            "value": "226816"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776014309",
            "to_ids": true,
            "type": "vhash",
            "uuid": "cd211412-d30c-453a-9fc9-2389f9c58c15",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776014309",
            "to_ids": true,
            "type": "filename",
            "uuid": "e7ae5859-77bf-48b8-8149-89f4dac56988",
            "value": "08kwwzwk.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  20/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776014309",
            "to_ids": false,
            "type": "text",
            "uuid": "4af440bc-46ef-422c-9ba7-6a8942236f23",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win64/Mint.MK!MTB\nVT Total Detection:35/71\nFirst Submission:2026-03-20T02:42:11.000000+00:00\nLast Submission:2026-03-20T02:42:11.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042388",
        "uuid": "702fa3cc-1ca8-48dd-bc46-b67f1e30058b",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042388",
            "to_ids": true,
            "type": "md5",
            "uuid": "b6fc8646-22bf-46a4-84ed-757695adda7c",
            "value": "4ce7b023ebfba58a8869ada21272ff86",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018468",
            "to_ids": true,
            "type": "sha1",
            "uuid": "acfd2118-c562-497c-9744-7ca22d72beb6",
            "value": "92070f366a41d7f82a963fd6f186ff163f5af87c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018468",
            "to_ids": true,
            "type": "sha256",
            "uuid": "77664b37-4e96-4f0a-b000-ea0295a6ad83",
            "value": "95700d4d7e8f1970fbb331d7930c68c55e3c3c57cd809751d9a281fd48a8a4df",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776014352",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "2e78e432-b20f-49f9-84cb-4ecb00157257",
            "value": "3072:6uasQyBVshtd+fOUIA1qwMpfUkwMU86O6iy5JuRw1pdvbX:6SDs7BlDUkwmn6iy5JTdvbX"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776014352",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "bbd17358-a361-47b4-9c45-64370a5f613d",
            "value": "219136"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776014352",
            "to_ids": true,
            "type": "vhash",
            "uuid": "037ff23c-5737-4e4a-a860-ae0963455912",
            "value": "0250466d5d155035z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776014352",
            "to_ids": true,
            "type": "filename",
            "uuid": "60983797-2ae3-42a8-8c62-5273f0e2dfac",
            "value": "10tfht.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  20/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776014352",
            "to_ids": false,
            "type": "text",
            "uuid": "4c5c8e8d-3199-44a4-ae4a-af7e9e9d14ec",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:24/70\nFirst Submission:2026-03-20T00:59:48.000000+00:00\nLast Submission:2026-03-20T00:59:48.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042409",
        "uuid": "8b7472d8-3d51-4629-8b66-c7211e701257",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042409",
            "to_ids": true,
            "type": "md5",
            "uuid": "4d95c6e5-f9d3-44c3-af28-6d5053f4ea29",
            "value": "4dcddfb9be5dc258836cc32472e14d50",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018469",
            "to_ids": true,
            "type": "sha1",
            "uuid": "0fcad028-f739-440d-9d51-2783abe6017d",
            "value": "1b76c86756b103c816f7f839acfd6a6f501cfda2",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018469",
            "to_ids": true,
            "type": "sha256",
            "uuid": "e6d81bbc-3d1c-4ac1-b0fb-f38c9ee272bb",
            "value": "236d986e256a471073065700cdf27f6f283b6d70b83252791e9d4e40df749cbb",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776014374",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "fcc81f0c-ac22-4c20-8879-769a3be83b0b",
            "value": "3072:wq0RV1RNu5qrc9hitBQU22Wc4F9XdmiBynoMRyDEMr:x0VBrcLitmDVX0iyo24"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776014374",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "75ddf1fa-86e0-455b-91c2-93a3cdad19f1",
            "value": "227840"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776014374",
            "to_ids": true,
            "type": "vhash",
            "uuid": "56fd0889-8036-4bc0-ab1d-bfa74e3c15ba",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776014374",
            "to_ids": true,
            "type": "filename",
            "uuid": "9503417d-f103-4215-a6e4-f77ff8acce00",
            "value": "5h8xn8e2.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  06/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776014374",
            "to_ids": false,
            "type": "text",
            "uuid": "d6a44277-ce32-45d1-9e56-da5e6fee5cf2",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:42/72\nFirst Submission:2026-04-05T12:45:30.000000+00:00\nLast Submission:2026-04-05T12:45:30.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042430",
        "uuid": "ae709bb9-d635-4bd6-be13-9c80da1bba3e",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042430",
            "to_ids": true,
            "type": "md5",
            "uuid": "ed01a3b7-0238-45cd-a12d-9b942bed3053",
            "value": "4f0b41c32dde0a4de31295fbb11f6c1d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018470",
            "to_ids": true,
            "type": "sha1",
            "uuid": "eeda70c2-0b80-445a-b6e4-2fc5fde07f31",
            "value": "b192e795ba66abf19d64a7dbca1c05ddb425a59a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018470",
            "to_ids": true,
            "type": "sha256",
            "uuid": "e339c900-7023-44c6-89d2-eccb68bf61ac",
            "value": "f40451b7f561e217f51c29d2501170266c813f85b14ec2444ab46b93473c38cc",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776014396",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "49e89e4c-b531-4e89-b759-46789a286f02",
            "value": "3072:N7MfJ8tf/L7DuXhpZwYtbYyeRSIgOeQq6Iz+9x6S+C5ofCs7kCxtbRNRNP:CO/itwGeR+OJIa9iCCT9tbRLNP"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776014396",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "7f7a7ec1-b382-48d6-9f12-b1599ad5a8d5",
            "value": "227840"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776014396",
            "to_ids": true,
            "type": "vhash",
            "uuid": "611d0493-fb2f-4cde-8b73-f806bbbe7ab3",
            "value": "0250466d7d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776014396",
            "to_ids": true,
            "type": "filename",
            "uuid": "a7f32d51-ac75-46e9-a019-5c4726df1153",
            "value": "9yotgxv.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  04/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776014396",
            "to_ids": false,
            "type": "text",
            "uuid": "03f08371-5d87-470e-8e2f-447a03d31de6",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:34/72\nFirst Submission:2026-04-03T21:10:15.000000+00:00\nLast Submission:2026-04-03T21:10:15.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042451",
        "uuid": "e88a5606-ba19-493b-be37-b821852d3cff",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042451",
            "to_ids": true,
            "type": "md5",
            "uuid": "a46e89df-aad1-4698-bff0-ae713f8f376f",
            "value": "51da73b0b6bad4fbb4f376faeb2476dc",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018471",
            "to_ids": true,
            "type": "sha1",
            "uuid": "dd61c171-e216-437e-ac18-79c603ed63a7",
            "value": "6781f6de575f635458b299edc2cd32b09da96acd",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018471",
            "to_ids": true,
            "type": "sha256",
            "uuid": "256fc552-9726-4e3a-89ec-79ea8252990e",
            "value": "1e1d1e9ebdb170c0cc014aac5c966d3677f4e1592e2ad12f580d057d4ce14be0",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776014524",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "36479cca-95dc-471b-83e9-de2c2843a5c7",
            "value": "6144:epFJxVbqzn7nZsdAzjOj2lvF8EIuA4oyqYY:etxVbqYQlvFE"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776014524",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "5125d62f-5125-4501-90ef-cc50c6775db5",
            "value": "205312"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776014524",
            "to_ids": true,
            "type": "vhash",
            "uuid": "87bb4a5e-bc10-44ae-b86d-a3ab3bd0572f",
            "value": "0250466d5d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776014524",
            "to_ids": true,
            "type": "filename",
            "uuid": "4ea543c3-ebd0-47a1-93d6-a31129a55334",
            "value": "uorm9iqi.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  27/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776014524",
            "to_ids": false,
            "type": "text",
            "uuid": "a0c0d512-6a9d-434d-a4fe-f1e91525a2cd",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win64/Mint.AH!MTB\nVT Total Detection:41/71\nFirst Submission:2026-02-25T17:59:14.000000+00:00\nLast Submission:2026-02-25T17:59:14.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042472",
        "uuid": "fe59887b-1350-4fb1-828e-ec7f2264c212",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042472",
            "to_ids": true,
            "type": "md5",
            "uuid": "707f7000-af44-48a0-b115-cb8652f15f1e",
            "value": "51f1fd108fee50c9aa02d820d510d15b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018472",
            "to_ids": true,
            "type": "sha1",
            "uuid": "5941afdc-9b4e-408e-ad90-5f37122c5337",
            "value": "c20d575392bf0d4f148581af8db153c85b1403bf",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018472",
            "to_ids": true,
            "type": "sha256",
            "uuid": "1de79940-fa11-4cbf-985c-134778553b1e",
            "value": "84d782b2c3dfc8818f289fcf8ed9fc1f8dbc2b3e82ed7016d5c1d5c7d15d30d5",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776014545",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "fd4a917e-2483-48c4-9004-9c5992521776",
            "value": "3072:2y+NC+3FGCgIuXHbTZvQJoUaCSC0CwMQv7PfyeLZlwABcJwzr:oDPgIuXHnZQyUSC/5ubfhce"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776014545",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "e164398d-2f15-4180-aec4-59cb583eb17a",
            "value": "223744"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776014545",
            "to_ids": true,
            "type": "vhash",
            "uuid": "f4b627cf-c398-4db0-9d7e-97da0e9cfb91",
            "value": "0250466d7d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776014545",
            "to_ids": true,
            "type": "filename",
            "uuid": "1b485419-d829-419f-8ec9-c6d0fdf1ca1e",
            "value": "su8ozie9i.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  10/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776014545",
            "to_ids": false,
            "type": "text",
            "uuid": "8f31aa3d-811a-42b4-a4dc-2f382d066627",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:44/72\nFirst Submission:2026-03-08T15:30:01.000000+00:00\nLast Submission:2026-03-08T15:30:01.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042493",
        "uuid": "52be1d88-bd4c-4d5b-ad35-8d2b0abaedc2",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042493",
            "to_ids": true,
            "type": "md5",
            "uuid": "17125f4e-8b80-4697-a5fc-edcd96c781f4",
            "value": "532c6fbf500525f6926e9c937fb90a3f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018473",
            "to_ids": true,
            "type": "sha1",
            "uuid": "e478e8cd-6225-4847-a1b5-a2ceef72404d",
            "value": "076cb7276345a98e9dbde0166d65a211e1d35faf",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018473",
            "to_ids": true,
            "type": "sha256",
            "uuid": "1691baa2-7409-452b-a617-9d2259e7188d",
            "value": "39557b570e87ab717fb7ddae453c92e78ab9d2a1d1623f67c915b7758c78a6cb",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776014567",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "cad27fa0-f30c-412c-a602-6f7b777c4390",
            "value": "3072:qJ7og3wQ217siFax6B+JhxupRkFWg3KvZ8qWkJdyRQKbCbpkLx87Jt8xp9qw:oog3wQ2Nex6BkxhUuqWcdyR/UMp9qw"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776014567",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "e8fec1a1-6d8c-45f9-ad08-2a5df679ccf2",
            "value": "232448"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776014567",
            "to_ids": true,
            "type": "vhash",
            "uuid": "1c00fe64-5e92-4911-8436-207f16986f84",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776014567",
            "to_ids": true,
            "type": "filename",
            "uuid": "8dd5d5c9-fab0-4677-aa56-72df8246bfcd",
            "value": "efxqe3.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  01/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776014567",
            "to_ids": false,
            "type": "text",
            "uuid": "edcda054-c4b7-41e3-b4bd-578bf70c57ef",
            "value": "Type Description: Win32 EXE\nMicrosoft: None\nVT Total Detection:21/72\nFirst Submission:2026-03-01T12:41:06.000000+00:00\nLast Submission:2026-03-01T12:41:06.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042514",
        "uuid": "a98debab-ba57-48db-a850-adc2958831b3",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042514",
            "to_ids": true,
            "type": "md5",
            "uuid": "97a17140-f4e6-4d26-93f0-bc6f0516f648",
            "value": "535233c14603f300d000d47440990c67",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018474",
            "to_ids": true,
            "type": "sha1",
            "uuid": "23bad758-65ed-4daa-b600-12804eeec03c",
            "value": "a678525a33964d7abc72e0824ccc785751354f8a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018475",
            "to_ids": true,
            "type": "sha256",
            "uuid": "17a454ca-810b-405a-a8a8-b5c384412fcf",
            "value": "c4c9e09954f0113bb5d6a5f5300996ec7dc54b70840835453bb383912c64e552",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776014588",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "b30cf11a-70e3-47a0-9bf5-509ff4ceb091",
            "value": "3072:+uasQyBVshtd+fOUIA1qwMpfUkwMU86O6iy5JuRw1pdvbF:+SDs7BlDUkwmn6iy5JTdvbF"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776014588",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "199a45e2-0fba-4b1e-b3eb-a9b21459538e",
            "value": "221184"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776014588",
            "to_ids": true,
            "type": "vhash",
            "uuid": "0cb5deac-b0c9-4600-bc1b-d81c660164bf",
            "value": "025046655d155035z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  25/02/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776014588",
            "to_ids": false,
            "type": "text",
            "uuid": "a94175b2-dd9b-4980-8b94-e4460e963455",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:41/72\nFirst Submission:2026-02-18T19:17:38.000000+00:00\nLast Submission:2026-02-18T19:17:38.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042536",
        "uuid": "284f697b-e529-43f4-8358-eb40a8807453",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042536",
            "to_ids": true,
            "type": "md5",
            "uuid": "526d0754-b17a-479e-a631-f64421cba40e",
            "value": "5368e2e9024698f246c3846c0323cb3f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018475",
            "to_ids": true,
            "type": "sha1",
            "uuid": "68727d40-148b-44a6-8b33-d6f87c14b4cb",
            "value": "ac40911ddac44112fc190325618b75c5eb1333a4",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018475",
            "to_ids": true,
            "type": "sha256",
            "uuid": "91b1a8fe-93d8-4396-a9e4-2480bfc5c86e",
            "value": "9770c984f03e90db30f32fbd5f705f2a0e9de3d20c68fdd9cfdc44e698d4901b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776014610",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "e0d10c4b-16d3-409a-8964-b02c4cc893ab",
            "value": "3072:JtDPL086KvAq6wHgG08mEthZs6siURap6AIJ:Tz08pYq5tlthZseo9J"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776014610",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "01249748-2dfb-4926-9dab-c3ae9801a986",
            "value": "228864"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776014610",
            "to_ids": true,
            "type": "vhash",
            "uuid": "3801292b-3efb-4944-b324-ae232de64617",
            "value": "0250466d7d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776014610",
            "to_ids": true,
            "type": "filename",
            "uuid": "b4dc1891-ba41-464c-aa8a-146fdeb8fd80",
            "value": "dq7r0q5bh.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  24/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776014610",
            "to_ids": false,
            "type": "text",
            "uuid": "276d18ad-2831-4848-9d28-6132ed923c0a",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:40/72\nFirst Submission:2026-03-21T15:48:07.000000+00:00\nLast Submission:2026-03-21T15:48:07.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042557",
        "uuid": "7579e04f-1de6-475e-86f9-6b2f029b1bfd",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042557",
            "to_ids": true,
            "type": "md5",
            "uuid": "679effda-b26f-47ff-97cb-70f3ffc18abf",
            "value": "54235cec6c138608198d6eba3306d391",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018476",
            "to_ids": true,
            "type": "sha1",
            "uuid": "3fce93fb-5a4f-4f58-9007-8086a3f054b3",
            "value": "9f056da4d9fa4dc670cab032e0c94660a4e69fb0",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018476",
            "to_ids": true,
            "type": "sha256",
            "uuid": "c2a488ab-b250-4c9f-8597-9241e0e4d37c",
            "value": "04747fba1dfa653375e3025849cbaa0c7e53517de1d8b454a34554bd18cffb8e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776014632",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "c5874a89-8c93-4db4-aced-9644e1f1c1e4",
            "value": "3072:6fbVJDkZeYmB3KhLp+TU9x8xxycC/rOD4r+1pi6XIqQtvhQPoR6:YJDsefB3Kxp+NyBtq6hT"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776014632",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "d059c7c0-8dbb-4397-ac05-5773ca655cc6",
            "value": "226304"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776014632",
            "to_ids": true,
            "type": "vhash",
            "uuid": "bdbd96c5-d8d1-4863-8c57-2c78b6e1959b",
            "value": "025046656d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776014632",
            "to_ids": true,
            "type": "filename",
            "uuid": "4e7495e2-0322-4923-81e1-9539affd02ee",
            "value": "ai0dux28.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  29/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776014632",
            "to_ids": false,
            "type": "text",
            "uuid": "56fa884f-09d8-4c8b-9837-f3f07399077c",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win64/Mint.MK!MTB\nVT Total Detection:38/71\nFirst Submission:2026-03-16T11:51:39.000000+00:00\nLast Submission:2026-03-16T12:58:57.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042578",
        "uuid": "27be02da-7cd1-4a38-8e63-e0ffbda59316",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042578",
            "to_ids": true,
            "type": "md5",
            "uuid": "c11e1015-3d11-42b9-ab39-b266c270e0a4",
            "value": "553c917fa6e19741c0602d89d1e1fd99",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018477",
            "to_ids": true,
            "type": "sha1",
            "uuid": "9b54c94d-8ffc-41ec-9156-443e37f75a72",
            "value": "99ba9dbbf9e0f6cda1823099a644f05f4bc2c6da",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018477",
            "to_ids": true,
            "type": "sha256",
            "uuid": "91b113b3-d4ce-4649-b838-56ab1be0108f",
            "value": "80bf0a5e19a76b36c91887db38c702a540629b8fdd10aa65bb76f90f7b3776da",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776014653",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "fb35d95e-f7e4-466d-96f2-a6092466037c",
            "value": "3072:2ZcVQT0bdnlqIG7tOvwOq808vefxxlMdipe3t1MfSxm0FR:LyQiAzq8Le5mi0h9"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776014653",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "efbc5120-422e-43b4-8c63-a48bdf234a66",
            "value": "223232"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776014653",
            "to_ids": true,
            "type": "vhash",
            "uuid": "8bb44ce1-b857-4d6e-8089-a5f7a9d1fc28",
            "value": "0250466d7d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776014653",
            "to_ids": true,
            "type": "filename",
            "uuid": "06b6b722-32ac-4513-a319-a25477fcaf39",
            "value": "yicuznor7.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  14/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776014653",
            "to_ids": false,
            "type": "text",
            "uuid": "c1543191-c808-49e0-a756-922cee842bd3",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.C!ml\nVT Total Detection:23/71\nFirst Submission:2026-03-14T00:40:35.000000+00:00\nLast Submission:2026-03-14T00:40:35.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042599",
        "uuid": "37e4c165-a5b1-42e1-80db-8245605c4872",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042599",
            "to_ids": true,
            "type": "md5",
            "uuid": "5da5b6b9-6681-4c65-b292-4a25011bf98c",
            "value": "557907bc223985cc85b3a3e3a0e16321",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018478",
            "to_ids": true,
            "type": "sha1",
            "uuid": "403cbbd0-a254-4924-b15c-4eb7be6fbd29",
            "value": "9d1ba83036e020f798dd0d4577675b0cc1a48b8c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018478",
            "to_ids": true,
            "type": "sha256",
            "uuid": "7a1930ab-b180-4797-a805-87ed1ef7f72e",
            "value": "d80ae24f72196925df13df80767a14ebb46a4dc092606f828232eb613562f2a4",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776014675",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "52b2639d-a5b6-4fb4-9ae7-536b7728ae4c",
            "value": "3072:wq0RV1RNu5qrc9hitBQU22Wc4F9XdmiBynoMRyDEOUG:x0VBrcLitmDVX0iyo2w"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776014675",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "9c7a5c3d-773b-4918-b8be-cc718e6ff295",
            "value": "227840"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776014675",
            "to_ids": true,
            "type": "vhash",
            "uuid": "0dc05c90-315f-47ea-8be5-4adf9581418f",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  07/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776014675",
            "to_ids": false,
            "type": "text",
            "uuid": "62d80c58-e38a-4173-ab50-22c61d33c47f",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.C!ml\nVT Total Detection:33/72\nFirst Submission:2026-04-06T17:25:31.000000+00:00\nLast Submission:2026-04-06T17:25:31.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042620",
        "uuid": "be951324-39cb-44dc-8065-f10ed715d41b",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042620",
            "to_ids": true,
            "type": "md5",
            "uuid": "68f01408-0495-4ceb-9255-4c7e07fcd5c7",
            "value": "5628d6e41e215caae43882d2d803a234",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018479",
            "to_ids": true,
            "type": "sha1",
            "uuid": "89049bb7-dddf-4627-9c28-5a41ee457959",
            "value": "b6745c01d48fa1c349f71f95286ff14539c9f04a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018479",
            "to_ids": true,
            "type": "sha256",
            "uuid": "dea2c74c-5edd-459d-9580-4fca6dede133",
            "value": "7a25253e6d8d9ccf62a67f8014cacb301daf9e40f1b68ecc7f354d6896d16960",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776014697",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "1b47e201-7293-44ae-837c-d152b23e9eea",
            "value": "6144:w7f7IMxRxpxbaxxpKQxLWiOEabaL/1g2KEBbcIshM+ug/6mRfZ/Y1T0ui:w7fZ9R2KEBb5sm+ci"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776014697",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "731cab3c-528d-401f-bd32-f9266f3797f8",
            "value": "274432"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776014697",
            "to_ids": true,
            "type": "vhash",
            "uuid": "f674553b-0df5-488d-8d84-4c3261a18f99",
            "value": "0250466d6d1557z81z37z504bz6fz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776014697",
            "to_ids": true,
            "type": "filename",
            "uuid": "78f9fd0a-64aa-4b63-948f-875dcfa61ecc",
            "value": "qo4he.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  12/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776014697",
            "to_ids": false,
            "type": "text",
            "uuid": "ba11d38c-d434-4196-9ae5-e80cba5ada9e",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:40/72\nFirst Submission:2025-11-15T16:13:48.000000+00:00\nLast Submission:2025-11-15T16:13:48.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042641",
        "uuid": "134f7b3f-c34f-42f7-acfa-c746fc9b9c62",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042641",
            "to_ids": true,
            "type": "md5",
            "uuid": "e3c34bdf-4b76-4f23-9040-6f4a208e20b7",
            "value": "575caa2ef7e618d4b57b6bc3dd96b431",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018481",
            "to_ids": true,
            "type": "sha1",
            "uuid": "ea49da7e-eec1-450c-ae24-f0e13380b76d",
            "value": "54abf301bfe8b8d3cf36872abe8b0073e791af69",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018481",
            "to_ids": true,
            "type": "sha256",
            "uuid": "f6e9d499-071d-4ca9-a347-68078eac101f",
            "value": "dda2c347c7e109775f28e5b3f90f9f10766b974e795b4a8ff1c45b2b377ac007",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776014719",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "a1d1923b-743c-40bf-a2e6-e4ad56a95cbd",
            "value": "3072:+uasQyBVshtd+fOUIA1qwMpfUkwMU86O6iy5JuRw1pdvbL:+SDs7BlDUkwmn6iy5JTdvbL"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776014719",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "7cae2d5b-5253-4026-afdf-067f61590aa8",
            "value": "221184"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776014719",
            "to_ids": true,
            "type": "vhash",
            "uuid": "a309a10b-5a1b-4ac3-bcd1-950a0d0b5b74",
            "value": "025046655d155035z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  25/02/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776014719",
            "to_ids": false,
            "type": "text",
            "uuid": "75dc659c-311d-475c-a20a-fa501456ecb7",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:48/72\nFirst Submission:2026-02-21T06:05:58.000000+00:00\nLast Submission:2026-02-21T06:05:58.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042662",
        "uuid": "f13a571e-7c83-4ffc-96d4-c3b8e9ef237d",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042662",
            "to_ids": true,
            "type": "md5",
            "uuid": "319646c6-b1db-47f5-8409-8b4faab55db7",
            "value": "57b330840e6542ee6b98d188283139cd",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018482",
            "to_ids": true,
            "type": "sha1",
            "uuid": "d7b70d7f-f682-4bfe-a243-c00a5316adde",
            "value": "91e19ad5d36f8746ab923d868beea5abd7758b76",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018482",
            "to_ids": true,
            "type": "sha256",
            "uuid": "cf3f8f0d-cda5-4935-9e3b-de76aee3a3bd",
            "value": "2413d78cd8f79d85b11affe5383aea34242ed7ef4596a6633aa507b48eb87067",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776014762",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "e2095f96-66c9-46c2-a51c-889346597e5a",
            "value": "3072:2fbVJDkZeYmB3KhLp+TU9x8xxycC/rOD4r+1pi6XIqQtvhQio96:MJDsefB3Kxp+NyBtq6h8"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776014762",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "cd61540d-b561-4500-8117-30916933d9cf",
            "value": "226816"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776014762",
            "to_ids": true,
            "type": "vhash",
            "uuid": "e1ac0ff7-d9ae-4453-9756-286a484ddf73",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  25/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776014762",
            "to_ids": false,
            "type": "text",
            "uuid": "35fc5f69-66c8-40e2-9444-8364dca0c576",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win64/Mint.MK!MTB\nVT Total Detection:50/72\nFirst Submission:2026-03-17T21:12:09.000000+00:00\nLast Submission:2026-03-17T21:12:09.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042683",
        "uuid": "ae7a76c2-a13f-4c9b-afe0-d691760a2149",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042683",
            "to_ids": true,
            "type": "md5",
            "uuid": "9b7bf33b-6f3c-44e9-b82f-e611e793024c",
            "value": "5826212251e6f7d83974e47fe64fd083",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018484",
            "to_ids": true,
            "type": "sha1",
            "uuid": "e0c1f94b-5267-409b-a69d-9e9e4bc4523c",
            "value": "ae95cbc2f008efcee780cc1a08dbe3117e8224c4",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018484",
            "to_ids": true,
            "type": "sha256",
            "uuid": "1733a993-e21d-4032-b543-73efba56fc12",
            "value": "73e1980b7e00c71f36d5f974971eb471845248a8b7b44ad3eebf84fdce1e7125",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776014784",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "4a733161-a4fb-446f-8b15-34414016ee42",
            "value": "3072:PMkiQ0Ti78ZGAttez2m7sKNqQNmTVm9he0xoyW3kOGnLwBsYC:BsG78sATmZbNmhQa34nsC"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776014784",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "95f175fc-7ae4-4ab4-9138-269e4210ed0c",
            "value": "230912"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776014784",
            "to_ids": true,
            "type": "vhash",
            "uuid": "45efcfb6-f671-487e-8960-1ee4f0017b29",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  04/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776014784",
            "to_ids": false,
            "type": "text",
            "uuid": "40949a85-e51a-4b71-9aae-a010834feecc",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:21/72\nFirst Submission:2026-03-04T07:45:04.000000+00:00\nLast Submission:2026-03-04T07:45:04.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042704",
        "uuid": "93ded6dc-b3a5-4658-9758-3abb7bed497e",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042704",
            "to_ids": true,
            "type": "md5",
            "uuid": "289aebab-10d6-4873-891a-5fa853a51796",
            "value": "58b03255384482c0e6fc6f48e2a2acc0",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018485",
            "to_ids": true,
            "type": "sha1",
            "uuid": "31b66918-d745-42fb-afcc-73b93e629b64",
            "value": "b493e4bf35f6f8db899ff2107ba8d2970bcc7e26",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018485",
            "to_ids": true,
            "type": "sha256",
            "uuid": "777cea18-a1a2-45a8-85f2-1c31896d83d8",
            "value": "c85e402ba00aac79452b44993e0088b4baeda120c130823ff26597209834f507",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776014805",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "b9f3b623-e2c0-45f8-bf22-c5dcc54f42e3",
            "value": "3072:2ZcVQT0bdnlqIG7tOvwOq808vefxxlMdipe3t1MfSxc0VR:LyQiAzq8Le5mi0h3"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776014805",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "7bc23bf7-93a2-4c16-b587-8f695f568a86",
            "value": "223232"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776014805",
            "to_ids": true,
            "type": "vhash",
            "uuid": "7590dc23-3f23-4da4-ae47-c543ec8f8aac",
            "value": "0250466d7d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776014805",
            "to_ids": true,
            "type": "filename",
            "uuid": "111012cc-718f-4359-a1cd-8b22859303e6",
            "value": "uhjb8c6t.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  23/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776014805",
            "to_ids": false,
            "type": "text",
            "uuid": "fba6eace-e6fd-4038-8986-a1a82a2b0b60",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win64/Mint.MK!MTB\nVT Total Detection:45/72\nFirst Submission:2026-03-15T07:58:04.000000+00:00\nLast Submission:2026-03-15T07:58:04.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042726",
        "uuid": "98da7377-f45b-496b-ad54-e9b1f0763a8c",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042726",
            "to_ids": true,
            "type": "md5",
            "uuid": "001cdc8c-d88c-4ef7-ade5-070f0b72be01",
            "value": "5e4130b1d73065896133db64f612304b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018486",
            "to_ids": true,
            "type": "sha1",
            "uuid": "66ab067d-6ad7-4f08-85e5-bfcadf5c01ab",
            "value": "a0170729b5a8db011251c49d87002f9212ccbb86",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018486",
            "to_ids": true,
            "type": "sha256",
            "uuid": "c31236e1-90b5-40cd-8d33-22a4bfa6543b",
            "value": "ce2368bd0c530f84a5b03bf8553741b004c89cf63f22f39d2866119b489768f1",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776014953",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "437a62e9-13a9-419f-9ee1-f6c76a6a9b9f",
            "value": "6144:mpFJxVbqzn7nZsdAzjOj2lvF8EIuHVoyqYY:mtxVbqYQlvFE"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776014953",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "7994d1be-3cc6-406e-8e7a-979c71dba527",
            "value": "204800"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776014953",
            "to_ids": true,
            "type": "vhash",
            "uuid": "4e7ae90a-2129-46e7-b1af-05aea2bfe28a",
            "value": "0250466d5d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776014953",
            "to_ids": true,
            "type": "filename",
            "uuid": "6aebc380-ce0f-4df8-8d90-22ff60d9a41e",
            "value": "omh4iu7.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  25/02/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776014953",
            "to_ids": false,
            "type": "text",
            "uuid": "a0b788c2-d731-4eba-a568-076fe8ba99a1",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:32/72\nFirst Submission:2026-02-22T12:10:41.000000+00:00\nLast Submission:2026-02-22T12:10:41.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042747",
        "uuid": "5107cb34-d4f9-4cba-99a0-f164365cb066",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042747",
            "to_ids": true,
            "type": "md5",
            "uuid": "af74516a-8d3a-4e2d-9459-a5b80f1184f9",
            "value": "5f200f7f5d4c7ec6b81f47fdd9622375",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018487",
            "to_ids": true,
            "type": "sha1",
            "uuid": "94c59c80-d388-4c98-85e4-a44adf8e0d3e",
            "value": "42a1e1af067ec170ec2fa624dd62934a4592e17b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018487",
            "to_ids": true,
            "type": "sha256",
            "uuid": "d1b53c5f-919c-4914-b0c5-69412841c5c6",
            "value": "aee63fa684a2eda6e87c6bb24fbed2f308046f5b31eab7c3726d15be93ac6404",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776014975",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "a3176c84-6905-4f27-aeba-88c64a5bfc24",
            "value": "3072:Mq0RV1RNu5qrc9hitBQU22Wc4F9XdmiBynoMRyDEO6:V0VBrcLitmDVX0iyo2L"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776014975",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "9131289c-40ee-40d1-a982-6fb5f43249a2",
            "value": "228352"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776014975",
            "to_ids": true,
            "type": "vhash",
            "uuid": "5ec91d30-462f-4667-b3c6-2fcea6fa5208",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776014975",
            "to_ids": true,
            "type": "filename",
            "uuid": "6d1c41a3-7b5c-4f5b-888c-0d4aaa12444e",
            "value": "8ie34pw4.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  08/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776014975",
            "to_ids": false,
            "type": "text",
            "uuid": "2f8c6a13-cccf-49ec-9160-e7b0aa862cb1",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Lazy.RR!MTB\nVT Total Detection:43/72\nFirst Submission:2026-04-06T22:13:01.000000+00:00\nLast Submission:2026-04-06T22:13:01.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042768",
        "uuid": "40246722-06c1-4968-9067-0a58da98b32f",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042768",
            "to_ids": true,
            "type": "md5",
            "uuid": "761748c9-da59-4130-979a-1bdaac8ae29b",
            "value": "6178a5620a05ba9e7eb9ae22abf83bb5",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018489",
            "to_ids": true,
            "type": "sha1",
            "uuid": "6cddb922-413f-4b3b-9274-a057cc6f4a8e",
            "value": "2ccc3656e663b0ebbb4905145ad10bd65ec5dfc8",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018489",
            "to_ids": true,
            "type": "sha256",
            "uuid": "37cc08de-9234-4437-b326-ab38d0ae6cc0",
            "value": "6e24a3aa4c75e5b8dbfc74b723b53d4aae58a99ef1490f71e108827c18e43e64",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776015039",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "ffc1716c-71af-4b3a-8859-6cf6bf27d32a",
            "value": "3072:2fbVJDkZeYmB3KhLp+TU9x8xxycC/rOD4r+1pi6XIqQtvhQpot6:MJDsefB3Kxp+NyBtq6hl"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776015039",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "a15b4f8b-4042-4fc6-b35d-f29433134189",
            "value": "226816"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776015039",
            "to_ids": true,
            "type": "vhash",
            "uuid": "c6bcc6b9-372b-4905-94c9-9b4cb9e18770",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776015039",
            "to_ids": true,
            "type": "filename",
            "uuid": "2f96a816-32af-41a4-b034-b736cc2a0ac2",
            "value": "va1han85g.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  31/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776015039",
            "to_ids": false,
            "type": "text",
            "uuid": "d0fa75f8-9681-4ca2-b066-7f8b868c358a",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Etset!rfn\nVT Total Detection:46/71\nFirst Submission:2026-03-16T14:03:04.000000+00:00\nLast Submission:2026-03-16T14:03:04.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042789",
        "uuid": "38fada91-652f-4575-9082-3a2e5ff2ae0c",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042789",
            "to_ids": true,
            "type": "md5",
            "uuid": "dd56d7a2-f257-4690-a26a-e0c44a0332ec",
            "value": "6347b7c1ece7216efa64f4414659726b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018490",
            "to_ids": true,
            "type": "sha1",
            "uuid": "3f3ac507-0603-4444-a3ea-2882fb0c732e",
            "value": "225a070b654d359290ed5ead33815187953c27c3",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018490",
            "to_ids": true,
            "type": "sha256",
            "uuid": "74b6228a-2c17-4d79-86d1-462bf645e6db",
            "value": "9a5679f8985ab7c2a344c23c8fa3c74b44fb7c3ec013c09bd25ee92e3f315668",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776015103",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "7094356a-6a36-44a6-8ac0-e4fbc5879dfb",
            "value": "3072:PMkiQ0Ti78ZGAttez2m7sKNqQNmTVm9he0xoyW3kXpnLwBsYC:BsG78sATmZbNmhQa3qnsC"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776015103",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "2c8cd6aa-503c-4e58-b1bb-0798322ee4bd",
            "value": "230912"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776015103",
            "to_ids": true,
            "type": "vhash",
            "uuid": "4dc8057a-31a3-41f1-8639-96b65ea593a9",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776015103",
            "to_ids": true,
            "type": "filename",
            "uuid": "3f409e55-9010-4846-bdd4-ab72fa3a5773",
            "value": "9dsoget5.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  08/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776015103",
            "to_ids": false,
            "type": "text",
            "uuid": "e9b4af88-0ae9-42fc-8066-ef5160a88f06",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Lazy.RR!MTB\nVT Total Detection:48/71\nFirst Submission:2026-03-05T15:28:29.000000+00:00\nLast Submission:2026-03-05T15:28:29.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042811",
        "uuid": "ee0f225a-267c-478c-932b-bf894b53bf04",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042811",
            "to_ids": true,
            "type": "md5",
            "uuid": "7d290916-7c01-47e3-a999-46798588ecce",
            "value": "637dfc6f0bd0a1a906a3a4e4bf7e3175",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018490",
            "to_ids": true,
            "type": "sha1",
            "uuid": "cdd04d3e-d27e-4d31-bd66-11559a4153e6",
            "value": "4394c834dfc362afc0f77a66445dec978d5c44a3",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018490",
            "to_ids": true,
            "type": "sha256",
            "uuid": "ad9e82d9-8a64-4b75-bcfb-361523083d0e",
            "value": "3a73bbc210c69435147dc60ebbe3840d043daf976a40846370a68696dce20ee0",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776015146",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "b5bd36bf-9229-467a-84b2-a0ef954c873c",
            "value": "3072:Mq0RV1RNu5qrc9hitBQU22Wc4F9XdmiBynoMRyDEPs:V0VBrcLitmDVX0iyo2k"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776015146",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "09360500-04e9-4743-aaaf-6813b287acb2",
            "value": "228352"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776015146",
            "to_ids": true,
            "type": "vhash",
            "uuid": "6d4cc66a-0d73-4294-9cb6-8d63f7a95c31",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  07/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776015146",
            "to_ids": false,
            "type": "text",
            "uuid": "587dc0b9-dba6-4935-ab4c-13c1793645d3",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:32/72\nFirst Submission:2026-04-06T17:34:29.000000+00:00\nLast Submission:2026-04-06T17:34:29.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042832",
        "uuid": "c831f162-8978-4cdc-847f-c766117f0864",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042832",
            "to_ids": true,
            "type": "md5",
            "uuid": "0891bcfe-78f4-4e76-8c88-74a573b1b302",
            "value": "64396461fe0607ea4f6ce49544674d3e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018492",
            "to_ids": true,
            "type": "sha1",
            "uuid": "7e4f6aef-b898-4d7b-9f5c-d67011dddb03",
            "value": "bf4d60d5bd87fd6da7368f5c97614d9c970db3bc",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018492",
            "to_ids": true,
            "type": "sha256",
            "uuid": "3cac8467-5256-480e-a080-1ad59c40ef14",
            "value": "15edb9f550a579638bcb307f6028d4bdbb89fd58c665d4838ef18a4ca39c40b5",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776015168",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "0adb9520-cfe2-47f3-ab1c-f82cae2bcc21",
            "value": "3072:PMkiQ0Ti78ZGAttez2m7sKNqQNmTVm9he0xoyW3k41nLwBsYC:BsG78sATmZbNmhQa35nsC"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776015168",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "b8f3a24c-e664-4ebf-a02b-d72689a066a5",
            "value": "230912"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776015168",
            "to_ids": true,
            "type": "vhash",
            "uuid": "384dfe4d-3550-4def-b7bd-50e9aff7e022",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776015168",
            "to_ids": true,
            "type": "filename",
            "uuid": "1f50df4d-e7cc-4f94-b89a-e38740dcc9da",
            "value": "ouw3p1p1b.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  05/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776015168",
            "to_ids": false,
            "type": "text",
            "uuid": "de9d93dc-9ff6-4efa-aeba-5a8486f5e847",
            "value": "Type Description: Win32 EXE\nMicrosoft: None\nVT Total Detection:25/72\nFirst Submission:2026-03-05T13:39:48.000000+00:00\nLast Submission:2026-03-05T13:39:48.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042853",
        "uuid": "6174c711-8c88-41c0-81ce-fa560ed4da66",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042853",
            "to_ids": true,
            "type": "md5",
            "uuid": "48522298-b8bc-451c-acaa-db939a5a599d",
            "value": "647c601ef459815297b6f7e87ad92a4b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018493",
            "to_ids": true,
            "type": "sha1",
            "uuid": "3eea9c47-ec1f-4571-bc8d-8f90575ea639",
            "value": "403218aa1120d028145badcf64a5bd7123e10a59",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018493",
            "to_ids": true,
            "type": "sha256",
            "uuid": "951ac12c-7c91-4bf5-83a4-f3bf30c412fd",
            "value": "8da71952e1fb06769f2cbde557a4331e61d7a9ddd353308cbbdcdd64eb498177",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776015190",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "3d6110f5-d519-41d7-9610-1bfda0531905",
            "value": "3072:wq0RV1RNu5qrc9hitBQU22Wc4F9XdmiBynoMRyDEOz:x0VBrcLitmDVX0iyo2W"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776015190",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "efff76da-52f9-45ad-8dd1-731e9f84ef79",
            "value": "227840"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776015190",
            "to_ids": true,
            "type": "vhash",
            "uuid": "50d7b528-d205-4f41-beb3-02587536612f",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776015190",
            "to_ids": true,
            "type": "filename",
            "uuid": "0585be27-87b8-46f9-bd97-e375879c3b14",
            "value": "q63jg.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  07/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776015190",
            "to_ids": false,
            "type": "text",
            "uuid": "59683008-9e5c-445b-9834-76b8d5dcac93",
            "value": "Type Description: Win32 EXE\nMicrosoft: None\nVT Total Detection:33/72\nFirst Submission:2026-04-06T22:13:42.000000+00:00\nLast Submission:2026-04-06T22:13:42.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042874",
        "uuid": "bd7ba2e3-7eb0-43c8-86cf-962c00c493c4",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042874",
            "to_ids": true,
            "type": "md5",
            "uuid": "1cdcc765-3738-4732-b0e3-952f70173fcc",
            "value": "674876285f1b837d5a884c013119ca18",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018493",
            "to_ids": true,
            "type": "sha1",
            "uuid": "d9523ccb-24e1-4d08-9184-30a00bd36ea6",
            "value": "5aa42c3c3c3b1729e6c8b0b055a56542366601e3",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018494",
            "to_ids": true,
            "type": "sha256",
            "uuid": "202b351c-6746-4598-8950-26e57b0419ec",
            "value": "a3ace044c1bd6f4e95543a4ee59d998a26a738e795e897df6bd7c5ab8b8ae240",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776015275",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "7ce6b958-c810-4bc0-94de-f98aa8df61b6",
            "value": "3072:o7MfJ8tf/L7DuXhpZwYtbYyeRSIgOeQq6Iz+9x6S+C5ofCs7kCxt0RNRqBQ:tO/itwGeR+OJIa9iCCT9t0RLq"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776015275",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "6d8bc6f1-8654-4006-aa0b-2e028a8e9074",
            "value": "226816"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776015275",
            "to_ids": true,
            "type": "vhash",
            "uuid": "3a75c1b3-7203-4bea-b796-657728520cb4",
            "value": "0250466d7d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776015275",
            "to_ids": true,
            "type": "filename",
            "uuid": "c4842a62-2331-4b30-8c0d-0be1d59451ff",
            "value": "rqja5m7.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  04/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776015275",
            "to_ids": false,
            "type": "text",
            "uuid": "30c0c5d8-794b-4c2a-97b6-6ffa8f94a1e5",
            "value": "Type Description: Win32 EXE\nMicrosoft: None\nVT Total Detection:29/72\nFirst Submission:2026-04-03T22:50:04.000000+00:00\nLast Submission:2026-04-03T22:50:04.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042895",
        "uuid": "6bb4e327-3818-49cf-bc80-33f78176cb0f",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042895",
            "to_ids": true,
            "type": "md5",
            "uuid": "d38e3166-e736-41e6-8731-ad1f294dcfc3",
            "value": "68cdb494119d322c76413cd5b04ff9e6",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018495",
            "to_ids": true,
            "type": "sha1",
            "uuid": "0b141360-6766-4ac7-a3d4-459c537a269c",
            "value": "5c600aed19034881e41d9e93309e3cec4b85588b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018495",
            "to_ids": true,
            "type": "sha256",
            "uuid": "8f978f7f-5872-4542-b039-ba707e79fc1e",
            "value": "822683e7100e0ac0fca5962b616339daa9fcdf8dea8e00ef082a35d361851506",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776015317",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "e4595972-7694-4c22-a7ca-39e518e7649d",
            "value": "3072:qJ7og3wQ217siFax6B+JhxupRkFWg3KvZ8qWkJdyRQKbCbpkLx87Jt8hBp9qw:oog3wQ2Nex6BkxhUuqWcdyR/Uip9qw"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776015317",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "bb8f2f68-76ed-4915-970b-c66fcf115ff1",
            "value": "232448"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776015317",
            "to_ids": true,
            "type": "vhash",
            "uuid": "536e0236-d425-4e97-b69e-049a6989c403",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776015317",
            "to_ids": true,
            "type": "filename",
            "uuid": "d212f1d0-05b1-4e92-9b8e-ac110f0eb768",
            "value": "l2ssns.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  30/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776015317",
            "to_ids": false,
            "type": "text",
            "uuid": "f3f3a67e-24ea-47d1-8ee4-1407e9a2e663",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win64/Tedy.KKC!MTB\nVT Total Detection:48/71\nFirst Submission:2026-02-28T19:37:21.000000+00:00\nLast Submission:2026-02-28T19:37:21.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042916",
        "uuid": "e56c9efd-26a8-4702-81cb-83c37c4035c0",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042916",
            "to_ids": true,
            "type": "md5",
            "uuid": "1ec3e7ec-5e83-43e0-9901-b73aa4d76b41",
            "value": "6954df8aed9cdae75d3af0331652fc2a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018496",
            "to_ids": true,
            "type": "sha1",
            "uuid": "e4889d99-4b84-430b-98ba-3668c5cc3b3d",
            "value": "c7032881ba5b8cdc059e6d148fc7053da9b6e859",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018496",
            "to_ids": true,
            "type": "sha256",
            "uuid": "ea46997d-57f8-4319-9d04-c710657aa7fd",
            "value": "981d0a4324d8a408aac6c01958699bb77fc1c1a87bb03a7a6b875e98e039acd7",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776015339",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "678400c3-99b1-4412-9277-f1168e463950",
            "value": "3072:Mq0RV1RNu5qrc9hitBQU22Wc4F9XdmiBynoMRyDEoC:V0VBrcLitmDVX0iyo2Z"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776015339",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "8484d63d-374f-474f-b9d6-b64751c7fe0a",
            "value": "228352"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776015339",
            "to_ids": true,
            "type": "vhash",
            "uuid": "e40bf9f6-5d00-423e-afbf-c14af5006186",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776015339",
            "to_ids": true,
            "type": "filename",
            "uuid": "f7d79738-ac71-43cf-a017-d3f8bc014ecd",
            "value": "8qssk7f6.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  08/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776015339",
            "to_ids": false,
            "type": "text",
            "uuid": "77456c3b-5cbd-48fa-9d1e-367ee0e73a67",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Lazy.RR!MTB\nVT Total Detection:48/72\nFirst Submission:2026-04-06T22:17:53.000000+00:00\nLast Submission:2026-04-06T22:17:53.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042937",
        "uuid": "d61302fd-5768-4a7d-ba71-fe7d36b36ff8",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042937",
            "to_ids": true,
            "type": "md5",
            "uuid": "19262ec5-12df-4989-b115-6036f9f82275",
            "value": "6cbce9161cf4b0c5a7f45d7565c9079b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018497",
            "to_ids": true,
            "type": "sha1",
            "uuid": "1095e7fe-72b3-4399-a180-7c457e81a2d5",
            "value": "3ea6c2975e0a1d338c4d54faf842fe259e488102",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018497",
            "to_ids": true,
            "type": "sha256",
            "uuid": "afb55b98-a3dd-4c9e-9aa2-0f7d496b2e91",
            "value": "2c4e415488d5ea4ecf18822e5541c382c1f522fb4bc03af56f16cb2ff7b13284",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776015487",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "3605cef9-0d2e-4d19-bd59-65bb6bdd34f9",
            "value": "3072:pWoaR2TKZKNLvdRwszNKlH8+GW9Rx7EbzmgRDpQf0qxrhSZD/xVvx88og:6R2TFFVRwrH8+h7EuXKD/xI8og"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776015487",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "c506cd5c-7c5f-4664-abe1-6c69ffa0471d",
            "value": "221696"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776015487",
            "to_ids": true,
            "type": "vhash",
            "uuid": "9e7fbd62-fe79-49ca-a995-c9e9d16215f7",
            "value": "0250466d7d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776015487",
            "to_ids": true,
            "type": "filename",
            "uuid": "79936c61-b098-4d27-985f-2a29aa4c1039",
            "value": "be7naii.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  23/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776015487",
            "to_ids": false,
            "type": "text",
            "uuid": "829076ba-b667-456c-af44-485adcc06193",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win64/Mint.MK!MTB\nVT Total Detection:46/72\nFirst Submission:2026-03-15T10:56:46.000000+00:00\nLast Submission:2026-03-15T10:56:46.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042958",
        "uuid": "fe55812c-3d60-4ef9-9234-7bae03978ef6",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042958",
            "to_ids": true,
            "type": "md5",
            "uuid": "febed503-0fb4-4d2a-b31e-db1797527f1b",
            "value": "6cdc4b3235cb16d7d2757ee9034bff42",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018498",
            "to_ids": true,
            "type": "sha1",
            "uuid": "0758cfc7-26d4-45f0-9151-3a34842ab57e",
            "value": "cb67d7a136d1b41bb4fbb4ea298c9564ef334b46",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018499",
            "to_ids": true,
            "type": "sha256",
            "uuid": "0afb4701-8c42-4570-ba25-026c372471d5",
            "value": "2a947feb455a64473ea59f1bd3c6a015504dab57019be3860db055ee5a594a72",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776015509",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "030ac09d-1de0-4ed0-915c-a444d0ded10b",
            "value": "3072:BtDPL086KvAq6wHgG08mEthZs6siURap6XiJ:rz08pYq5tlthZseoyJ"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776015509",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "858c718b-628e-4e86-b789-40703a7d11ae",
            "value": "229376"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776015509",
            "to_ids": true,
            "type": "vhash",
            "uuid": "b5b5df59-60b9-46ce-9838-b1be3e6e179a",
            "value": "0250466d7d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776015509",
            "to_ids": true,
            "type": "filename",
            "uuid": "f02a9a8c-7429-4c28-88bf-e3bb6c929bb2",
            "value": "z2szhjxq.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  25/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776015509",
            "to_ids": false,
            "type": "text",
            "uuid": "87945689-b9e0-4c58-9c87-f3f53f7ce051",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:31/72\nFirst Submission:2026-03-24T17:26:25.000000+00:00\nLast Submission:2026-03-24T17:26:25.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776042980",
        "uuid": "2a14fa75-2a65-4082-8f45-3f3931733581",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776042980",
            "to_ids": true,
            "type": "md5",
            "uuid": "dc348fd7-f32f-484f-ab15-14a897885b2f",
            "value": "6fb426d82243ba6fb6afcb6411b570a5",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018499",
            "to_ids": true,
            "type": "sha1",
            "uuid": "14a19678-47a0-4f84-97ee-270efd247264",
            "value": "2505b45bbc8358f6605599d350b0cc234c7953b3",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018499",
            "to_ids": true,
            "type": "sha256",
            "uuid": "b0ccba53-b4fa-4649-a6c3-d0f86b65b698",
            "value": "ede26a1d5f9ab8fe544b594d59fbedca91368e30749d58c5afd9122d12692469",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776015615",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "3719e80a-fe9a-4c48-94f3-2414827c3cb3",
            "value": "3072:wq0RV1RNu5qrc9hitBQU22Wc4F9XdmiBynoMRyDEPz:x0VBrcLitmDVX0iyo2L"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776015615",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "5c46110e-c129-4a85-ad2f-525393dc793f",
            "value": "227840"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776015615",
            "to_ids": true,
            "type": "vhash",
            "uuid": "3e187ab3-6d70-4e28-9486-2e4c8d3b859c",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776015615",
            "to_ids": true,
            "type": "filename",
            "uuid": "fc155eea-9a6e-4cbc-b83b-b2d639de46d6",
            "value": "sx0jsv19.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  10/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776015615",
            "to_ids": false,
            "type": "text",
            "uuid": "21d7b07f-1e0a-4a25-bc6e-65256449ec3b",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Lazy.RR!MTB\nVT Total Detection:47/72\nFirst Submission:2026-04-05T08:04:08.000000+00:00\nLast Submission:2026-04-05T08:04:08.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043001",
        "uuid": "7a6ffd3f-f1ae-44a0-b497-c5aabda13673",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043001",
            "to_ids": true,
            "type": "md5",
            "uuid": "81559fa4-6f72-492a-8e80-380e1ec67656",
            "value": "717ee6ac2f12a5164dae69935dc09d04",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018501",
            "to_ids": true,
            "type": "sha1",
            "uuid": "75480ad4-6ce6-4284-9979-8ff4415a1b16",
            "value": "7c290520b45aad7c7db2e5c389b614fe200d9fa6",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018501",
            "to_ids": true,
            "type": "sha256",
            "uuid": "21841be8-a034-4fbe-9f9f-c412c7f8e972",
            "value": "3e503ce0a9843ebb5ebe5cae9f1e678191507a2b016ac324289b253d19b03c86",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776015700",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "96f6d405-071b-41da-8a37-d1a14e8694f2",
            "value": "3072:2fbVJDkZeYmB3KhLp+TU9x8xxycC/rOD4r+1pi6XIqQtvhQloa6:MJDsefB3Kxp+NyBtq6hF"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776015700",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "1f0c2f3c-35f9-40b5-9aa8-0aef63235946",
            "value": "226816"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776015700",
            "to_ids": true,
            "type": "vhash",
            "uuid": "ae06fe97-7087-4237-bc76-765798a0ed16",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  19/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776015700",
            "to_ids": false,
            "type": "text",
            "uuid": "9bf90b52-1464-478d-976e-f8e09b8f68b2",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win64/Mint.MK!MTB\nVT Total Detection:35/71\nFirst Submission:2026-03-19T12:13:19.000000+00:00\nLast Submission:2026-03-19T12:13:19.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043022",
        "uuid": "27ae8851-8cc9-4bfb-b3f4-41f4ce35dbbb",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043022",
            "to_ids": true,
            "type": "md5",
            "uuid": "137d1c55-db0a-4824-8e40-9223a5d071b5",
            "value": "71ff12fbab703fad1b3ee3795161e6ee",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018501",
            "to_ids": true,
            "type": "sha1",
            "uuid": "2ca4da5a-9188-4143-a981-5aa23e3597df",
            "value": "eff8d3a2e10715ccb64046d0f20c3400767d1917",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018502",
            "to_ids": true,
            "type": "sha256",
            "uuid": "08f20c40-5304-495a-9f83-7b8fa93c47b4",
            "value": "002205bb150a86c419fed04d3cd85dfd67d04ff570555b0ba42d8fc171fb92fa",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776015722",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "6b7e4586-99f0-4454-a171-326422415a86",
            "value": "3072:BtDPL086KvAq6wHgG08mEthZs6siURap67kJ:rz08pYq5tlthZseooJ"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776015722",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "c623549c-bcca-4567-9662-ed1a696b892a",
            "value": "229376"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776015722",
            "to_ids": true,
            "type": "vhash",
            "uuid": "815b392a-c8e4-42b2-b42d-4da54c5dd2cd",
            "value": "0250466d7d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776015722",
            "to_ids": true,
            "type": "filename",
            "uuid": "c118101e-4d0e-4ed7-a866-3e29613109a4",
            "value": "xzdlnv4re.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  04/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776015722",
            "to_ids": false,
            "type": "text",
            "uuid": "1c1ea4d6-2325-4807-aaa8-04c85c2fa3dd",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win64/Lazy.MKJ!MTB\nVT Total Detection:40/72\nFirst Submission:2026-04-04T04:53:23.000000+00:00\nLast Submission:2026-04-04T04:53:23.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043044",
        "uuid": "356427e9-7729-41d2-9cfd-1030088eea69",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043044",
            "to_ids": true,
            "type": "md5",
            "uuid": "cff98cd7-d571-4354-9216-4301c749fc06",
            "value": "720d7660779092374a0220603097e1da",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018503",
            "to_ids": true,
            "type": "sha1",
            "uuid": "92c9dd16-a1e0-45d3-a324-1fec8def7099",
            "value": "d12228d1b6d0adb801c44fb3076f1ff64bf0d545",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018503",
            "to_ids": true,
            "type": "sha256",
            "uuid": "6ae534e3-07cf-420b-b972-2512c73ddd10",
            "value": "3a14fdd5579f73548531790e4434a0ae99025aebfa69d48e6397e8944aec0222",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776015744",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "803df941-5e4f-4583-901c-ab981c2f4953",
            "value": "3072:wFoWC5C9nJvzUL6p8Y74iRzfioaJ/GQPvlzP4BQOGAbHQQd4Fvv:XWEC5zQ8DVa9Jnl7PAjQQd4F"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776015744",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "d664b618-1a3c-4d5d-b2ec-d5bb7326fc87",
            "value": "222720"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776015744",
            "to_ids": true,
            "type": "vhash",
            "uuid": "ccbe3cd9-a155-496f-ade5-6c18428e6aee",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776015744",
            "to_ids": true,
            "type": "filename",
            "uuid": "a163e744-09dc-4604-8fc0-b27c90e984a3",
            "value": "8b5nh.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  28/02/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776015744",
            "to_ids": false,
            "type": "text",
            "uuid": "dffb1104-a38e-4a9e-b0be-d972dbaa3a00",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:25/72\nFirst Submission:2026-02-26T18:20:33.000000+00:00\nLast Submission:2026-02-26T18:20:33.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043065",
        "uuid": "c888140c-6f40-48d2-937a-dbf202a67b81",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043065",
            "to_ids": true,
            "type": "md5",
            "uuid": "10ad6e68-f81b-4d1e-ad3f-f0f606501668",
            "value": "77e750194ee7b87e526cc88bd113d5ab",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018504",
            "to_ids": true,
            "type": "sha1",
            "uuid": "0419967d-491e-488f-bb4b-50d245c07458",
            "value": "b0fc5a333ed35b3eda820b001a94123736390251",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018504",
            "to_ids": true,
            "type": "sha256",
            "uuid": "35924490-ece0-414a-abc9-655544185ea4",
            "value": "773534622aaf76baff70d3c36e5a78264c45ad2b1399862930d11f9021995410",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776015808",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "a780514e-200f-4c64-b971-d742725180e6",
            "value": "6144:epFJxVbqzn7nZsdAzjOj2lvF8EIuA6oyqYY:etxVbqYQlvFE"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776015808",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "85d7a6ab-8a15-43c4-b155-ee25524a5687",
            "value": "205312"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776015808",
            "to_ids": true,
            "type": "vhash",
            "uuid": "7bc35a73-f307-49ae-98de-27abc0b95481",
            "value": "0250466d5d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776015808",
            "to_ids": true,
            "type": "filename",
            "uuid": "6683f8c8-2acc-4f3c-99a6-5fc90bb9ec0a",
            "value": "pwioxr.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  26/02/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776015808",
            "to_ids": false,
            "type": "text",
            "uuid": "0aac6573-5641-437b-95f5-e6329f042d91",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win64/Mint.AH!MTB\nVT Total Detection:28/72\nFirst Submission:2026-02-25T04:34:23.000000+00:00\nLast Submission:2026-02-25T04:34:23.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043086",
        "uuid": "043b10f4-5fba-4fce-9478-a4b5de735905",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043086",
            "to_ids": true,
            "type": "md5",
            "uuid": "c90be92c-7a2f-4131-9a8c-6ff00252f29f",
            "value": "780541810053ab365e060d6d5212417f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018505",
            "to_ids": true,
            "type": "sha1",
            "uuid": "b80c786f-99de-46be-a28f-e6e3b66f119c",
            "value": "7884ce050e699115243837dd7f4741591d41f69e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018505",
            "to_ids": true,
            "type": "sha256",
            "uuid": "5afa5ea6-2fb4-4443-9418-5e2f9c92e45d",
            "value": "42b9c4fc049834f0bf5db9361b0134b9183c1d8efff21a332c0d5de9858d19d1",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776015830",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "9ce81e65-c7cc-4cff-afd5-b7d945ce9a2d",
            "value": "3072:PMkiQ0Ti78ZGAttez2m7sKNqQNmTVm9he0xoyW3kXhnLwBsYC:BsG78sATmZbNmhQa3KnsC"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776015830",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "871d4563-5a04-4396-bdf0-277185ceddcf",
            "value": "230912"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776015830",
            "to_ids": true,
            "type": "vhash",
            "uuid": "2aae25b1-a8c7-43a1-b028-0ea8b5a1b2e4",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776015830",
            "to_ids": true,
            "type": "filename",
            "uuid": "c60825fd-d9e4-4ab7-bb4a-c21951851dbc",
            "value": "saf8xsn.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  07/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776015830",
            "to_ids": false,
            "type": "text",
            "uuid": "2ba3a647-869c-4b22-9d80-25b433408600",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:42/71\nFirst Submission:2026-03-05T19:47:53.000000+00:00\nLast Submission:2026-03-05T19:47:53.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043107",
        "uuid": "26d6ffc8-b187-4330-a1cd-d5d937408285",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043107",
            "to_ids": true,
            "type": "md5",
            "uuid": "89cd847d-1af9-40a8-83c0-562dfbca7e7f",
            "value": "7cd980f56ef03de2de20f48fa1749e67",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018506",
            "to_ids": true,
            "type": "sha1",
            "uuid": "ab3e1a63-ad6e-471d-a4b7-817b3b628fbe",
            "value": "de9e2038c593478b40a0f6bdeb1ead23f217222b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018506",
            "to_ids": true,
            "type": "sha256",
            "uuid": "41a93372-cae3-4318-8d98-71abca4225ce",
            "value": "83f4a9c17d08a28904c2b46153575e063faea1c4305f409eb18280720f6c357e",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776015957",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "6b094cab-2065-4bb2-86d5-21d5e4300754",
            "value": "3072:H1RNu5qrc9hitBQU22Wc4F9XdmiBynoMRyDE27:HBrcLitmDVX0iyo2K"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776015957",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "5a1445b4-179b-4a10-b0cd-030194eab89d",
            "value": "224256"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776015957",
            "to_ids": true,
            "type": "vhash",
            "uuid": "086d96c0-d192-4ff7-ab74-b389c2d377b9",
            "value": "0250466d5d55|z"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776015957",
            "to_ids": true,
            "type": "filename",
            "uuid": "a2c23059-f891-405b-8e20-26e615a627f5",
            "value": "qf5irsmb.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  11/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776015957",
            "to_ids": false,
            "type": "text",
            "uuid": "7d19c014-7e86-4e8e-a639-3228a85ce512",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:26/72\nFirst Submission:2026-04-05T15:59:52.000000+00:00\nLast Submission:2026-04-05T15:59:52.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043129",
        "uuid": "0fa27b88-fc30-4243-b971-176b9470dd07",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043129",
            "to_ids": true,
            "type": "md5",
            "uuid": "fcea42a7-408a-4380-b570-0ceea8522439",
            "value": "7e42825e89c1731b4db08c6cfe0242f7",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018507",
            "to_ids": true,
            "type": "sha1",
            "uuid": "fb10773f-f80b-4174-ab98-dc3458eb3181",
            "value": "53090f7093c39c7dd860bb7db4e0f9ff3ca7a07d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018507",
            "to_ids": true,
            "type": "sha256",
            "uuid": "2cde2e80-782b-4853-b1c5-7120dd5dfaa0",
            "value": "00c9f40cfaa2bba66091b29419167a9894f3ae6218343ac8bdb159a5e08bd3db",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776016000",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "15cb5290-c2d3-426a-b6d6-1c229db3cf07",
            "value": "3072:wq0RV1RNu5qrc9hitBQU22Wc4F9XdmiBynoMRyDEPz:x0VBrcLitmDVX0iyo2b"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776016000",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "d9480f2e-57ca-4736-8440-5056d374dc79",
            "value": "227840"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776016000",
            "to_ids": true,
            "type": "vhash",
            "uuid": "e8583d5f-9136-490d-9aad-4c14e940cba0",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  07/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776016000",
            "to_ids": false,
            "type": "text",
            "uuid": "374c8198-0ce3-4087-96dd-dc11c2222528",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:32/72\nFirst Submission:2026-04-06T17:34:59.000000+00:00\nLast Submission:2026-04-06T17:34:59.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043155",
        "uuid": "3b1d7fb2-1ee8-4f9b-aa76-860710dfe1e2",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043155",
            "to_ids": true,
            "type": "md5",
            "uuid": "595edfd5-5445-48e5-b417-cbf410c45717",
            "value": "7f01bff17c7717e84dbcba038ffc5eca",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018508",
            "to_ids": true,
            "type": "sha1",
            "uuid": "d9552c96-f354-4724-9050-de27dd00816b",
            "value": "4225f3ab9f46f4f29941fe3e0d55fbf3ad758a1a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018508",
            "to_ids": true,
            "type": "sha256",
            "uuid": "3b79e641-2dfa-4b05-b427-50447ebd20de",
            "value": "c17b51ea9144911a5ce52476432c43c50f2cd6039f5f3801b39c1f4d257fbd2b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776016043",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "a22346ae-eb34-4af2-b974-edc9e3ea5694",
            "value": "3072:PMkiQ0Ti78ZGAttez2m7sKNqQNmTVm9he0xoyW3kXaknLwBsYC:BsG78sATmZbNmhQa38nsC"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776016043",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "a0fc4d97-67c1-4f3d-a8af-c8f86a381d37",
            "value": "230912"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776016043",
            "to_ids": true,
            "type": "vhash",
            "uuid": "b8a55018-6372-41f0-a6fc-bd13fc362097",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776016043",
            "to_ids": true,
            "type": "filename",
            "uuid": "7fa85d73-bc03-4795-ad71-7d4388e32f04",
            "value": "neb7w.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  04/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776016043",
            "to_ids": false,
            "type": "text",
            "uuid": "1533ceaf-f68b-43c3-a547-e486d7339a1e",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:54/72\nFirst Submission:2026-03-04T07:03:24.000000+00:00\nLast Submission:2026-03-04T07:03:24.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043180",
        "uuid": "7c862f04-4cf4-43af-89a8-1bf36d55f174",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043180",
            "to_ids": true,
            "type": "md5",
            "uuid": "51aaefee-f3b6-4029-a47d-6c5cd1a90b42",
            "value": "812463dc8de587af1513b129b388b447",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018509",
            "to_ids": true,
            "type": "sha1",
            "uuid": "a28c1939-d232-4433-b290-11bc6dbdd98b",
            "value": "124fb11390481661509ff17aa332f7abe304dfd5",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018509",
            "to_ids": true,
            "type": "sha256",
            "uuid": "7e693742-bc2a-41e9-954d-0ce3c69fe357",
            "value": "93f040ec4d5cbaa94d2503c9cb38a589c75932e8dacfa983472c2c959e8f34c2",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776016086",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "8d6e193a-93df-416d-a6f8-6bd8f3a48e40",
            "value": "3072:27MfJ8tf/L7DuXhpZwYtbYyeRSIgOeQq6Iz+9x6S+C5ofCs7kCxtwRNRuP:PO/itwGeR+OJIa9iCCT9twRLuP"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776016086",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "93474e4e-5abc-4df8-8690-a1836fe0a762",
            "value": "226816"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776016086",
            "to_ids": true,
            "type": "vhash",
            "uuid": "3db1383e-3a34-4bd2-964c-d4302eb496e2",
            "value": "025046657d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776016086",
            "to_ids": true,
            "type": "filename",
            "uuid": "390179b0-1af5-4120-a290-408426cd6418",
            "value": "3ese5.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  10/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776016086",
            "to_ids": false,
            "type": "text",
            "uuid": "997c97f3-ad46-4f0d-b826-583dfece60c8",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Lazy.RR!MTB\nVT Total Detection:46/72\nFirst Submission:2026-04-04T11:30:23.000000+00:00\nLast Submission:2026-04-04T11:30:23.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043202",
        "uuid": "28c30728-f745-481c-9b55-778addf5fb37",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043202",
            "to_ids": true,
            "type": "md5",
            "uuid": "87b6ca6f-b15c-4180-90b4-08c366f30afe",
            "value": "8269ff3f7318f2eedc6031afffa0d4b1",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018510",
            "to_ids": true,
            "type": "sha1",
            "uuid": "d39cf8de-ae22-4336-8baa-787b36c88b42",
            "value": "599f5ff97dd66c116d5735061e1b6524d71687c0",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018510",
            "to_ids": true,
            "type": "sha256",
            "uuid": "a55ef071-3054-4c1a-9ae1-e6114c41f4f6",
            "value": "dc29068327274eec2a74eba1942ac19b222d0f070f20550a78667d936be427a1",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776016150",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "c1cf6b36-1417-41f3-abbc-dbb7979ffcbd",
            "value": "3072:2fbVJDkZeYmB3KhLp+TU9x8xxycC/rOD4r+1pi6XIqQtvhQOoK6:MJDsefB3Kxp+NyBtq6hw"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776016150",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "511cf07e-58fa-4cc0-b231-fab4827cfe3f",
            "value": "226816"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776016150",
            "to_ids": true,
            "type": "vhash",
            "uuid": "c3c6d0d4-9578-45b6-9300-f4edca4a0b8c",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776016150",
            "to_ids": true,
            "type": "filename",
            "uuid": "236a5fad-90db-4c26-94bd-926389a2b7ac",
            "value": "0og3u.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  17/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776016150",
            "to_ids": false,
            "type": "text",
            "uuid": "803fc18a-ee9a-4e78-ba7f-8c59ef5fb610",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:22/72\nFirst Submission:2026-03-16T18:26:59.000000+00:00\nLast Submission:2026-03-16T18:26:59.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043223",
        "uuid": "32de2766-8173-4c1b-b93d-c1f114168646",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043223",
            "to_ids": true,
            "type": "md5",
            "uuid": "0f3810e8-611a-4f12-be7f-4c6e63abfd01",
            "value": "8306255c14a11a4b7c33db1759d0c733",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#230087",
                "local": false,
                "name": "rectifyq:samples-found-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018511",
            "to_ids": true,
            "type": "sha1",
            "uuid": "d2eb8914-8252-4c8c-8864-0bdc92f92bd5",
            "value": "f47b5c00c64a256bd2652e477c066327a94f6075",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#230087",
                "local": false,
                "name": "rectifyq:samples-found-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018511",
            "to_ids": true,
            "type": "sha256",
            "uuid": "9202a5f1-a03c-4cc2-8c3f-73ae38d7be77",
            "value": "e276d6a50789ec5096af5f0535e401999702ec589547332f855331286f9d95c8",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#230087",
                "local": false,
                "name": "rectifyq:samples-found-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776016172",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "1e46505e-9fa6-464c-b726-f30e30abe38f",
            "value": "3072:nMkiQ0Ti78ZGAttez2m7sKNqQNmTVm9he0xoyW3k9NnLwBsYC:5sG78sATmZbNmhQa38nsC"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776016172",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "6a133d46-5360-4151-9894-473e88b9749d",
            "value": "230400"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776016172",
            "to_ids": true,
            "type": "vhash",
            "uuid": "3569a312-ec73-40c6-8571-54cc4f2de16e",
            "value": "025046656d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776016172",
            "to_ids": true,
            "type": "filename",
            "uuid": "9234c156-6386-44ee-bfea-99f51d49ad9d",
            "value": "z937f.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  03/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776016172",
            "to_ids": false,
            "type": "text",
            "uuid": "54ddebdb-5993-447a-9324-224cea02c11d",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:46/72\nFirst Submission:2026-03-03T13:21:43.000000+00:00\nLast Submission:2026-03-05T14:15:21.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043244",
        "uuid": "92fdae6f-c379-4bc9-97b0-b67de3134d7d",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043244",
            "to_ids": true,
            "type": "md5",
            "uuid": "19e7d461-30c0-440a-a05a-fdedd84f7c2b",
            "value": "831d286f321e1faab7cfe22011326c97",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018512",
            "to_ids": true,
            "type": "sha1",
            "uuid": "4060a993-d9b9-41e9-8c7f-a8606636d858",
            "value": "23670238b52eb58157e40038f53957b04a5ba264",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018512",
            "to_ids": true,
            "type": "sha256",
            "uuid": "8f2441b3-13e4-4518-b6a8-7b1c8af69134",
            "value": "969bd9c438fac94fe663093df83f12d814cc6d4de3b0ba74a4d97a4524498d83",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776016193",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "ed658fc1-8e24-488b-9031-b53b9ad90345",
            "value": "3072:N7MfJ8tf/L7DuXhpZwYtbYyeRSIgOeQq6Iz+9x6S+C5ofCs7kCxtzRNREP:CO/itwGeR+OJIa9iCCT9tzRLEP"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776016193",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "70b72268-ac53-4c79-9665-da35365280cd",
            "value": "227840"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776016193",
            "to_ids": true,
            "type": "vhash",
            "uuid": "e3ff9036-5d6a-48d1-84ed-4501df23b9d9",
            "value": "0250466d7d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776016193",
            "to_ids": true,
            "type": "filename",
            "uuid": "e56ccd3e-7493-4c5b-a0ee-dd1443edff67",
            "value": "ei3v8y7.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  03/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776016193",
            "to_ids": false,
            "type": "text",
            "uuid": "3af880e4-8b60-4d66-953f-5b7261c07686",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:32/72\nFirst Submission:2026-04-03T15:46:42.000000+00:00\nLast Submission:2026-04-03T15:46:42.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043265",
        "uuid": "1ecc0d8a-d052-4fcc-badc-1fd635d6357d",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043265",
            "to_ids": true,
            "type": "md5",
            "uuid": "a41980bd-c071-4e01-ae26-e095679e48b6",
            "value": "835fc955f397f2f44325a0b86b96d5a8",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018513",
            "to_ids": true,
            "type": "sha1",
            "uuid": "17506eab-887e-49e0-95b1-d82864a4462b",
            "value": "ba6b6038edb26e20b2ffd92eb813e785af6fd02d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018513",
            "to_ids": true,
            "type": "sha256",
            "uuid": "7a699048-5a16-4dc9-97aa-10ab0c9a08ee",
            "value": "51199942cd7972c5944002df31541e242b33d29df5d1b97f6839c5c4d6c32b6f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776016215",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "f00720af-613d-4c73-b778-81d3a453ddc6",
            "value": "3072:Mq0RV1RNu5qrc9hitBQU22Wc4F9XdmiBynoMRyDEPD:V0VBrcLitmDVX0iyo2L"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776016215",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "728179b6-ce1a-4c58-83e8-1f3292ca23bb",
            "value": "228352"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776016215",
            "to_ids": true,
            "type": "vhash",
            "uuid": "4b28e5ce-63ba-428e-83bb-d2b6f3e55d39",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  06/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776016215",
            "to_ids": false,
            "type": "text",
            "uuid": "4b295846-38e1-43ee-bc69-03146e3e7c8d",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:31/72\nFirst Submission:2026-04-06T13:42:03.000000+00:00\nLast Submission:2026-04-06T13:42:03.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043286",
        "uuid": "bf677fd3-227a-4dcd-b494-e95158d5d562",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043286",
            "to_ids": true,
            "type": "md5",
            "uuid": "ff63b4ad-4f3a-4f57-894b-648f3ed75046",
            "value": "86a8c7efc08df09df7943542da5a8616",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018514",
            "to_ids": true,
            "type": "sha1",
            "uuid": "d456d2ae-2356-46fe-ada0-493822eb7fa3",
            "value": "db1a3fddc383275b09309a63efa1feb894ac2dad",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018514",
            "to_ids": true,
            "type": "sha256",
            "uuid": "c31c72a5-4728-4dfb-8ceb-6dc626142ed9",
            "value": "8e63e2e5dc0d7011df70bb543686fb857f5ce4c31bc664c647fc382d20c4f002",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776016279",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "524d9e7c-3bb1-4003-bd6e-dd0d353fc656",
            "value": "3072:qJ7og3wQ217siFax6B+JhxupRkFWg3KvZ8qWkJdyRQKbCbpkLx87Jt8fp9qw:oog3wQ2Nex6BkxhUuqWcdyR/UKp9qw"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776016279",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "980b61fe-4c6a-461b-8bcb-bdb77f1c777b",
            "value": "232448"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776016279",
            "to_ids": true,
            "type": "vhash",
            "uuid": "7c58139f-e8b8-43bf-ab45-ad06efd8b2f2",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776016279",
            "to_ids": true,
            "type": "filename",
            "uuid": "6e1eff15-c771-4db6-a92a-61032fc04d95",
            "value": "9g9g5e96.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  03/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776016279",
            "to_ids": false,
            "type": "text",
            "uuid": "e3e98cde-1e79-496e-98f4-57172fbdbba5",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Etset!rfn\nVT Total Detection:37/72\nFirst Submission:2026-02-28T17:03:55.000000+00:00\nLast Submission:2026-02-28T17:03:55.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043307",
        "uuid": "09cca553-4467-42b9-b0e1-90743c5a6ff0",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043307",
            "to_ids": true,
            "type": "md5",
            "uuid": "290fbf08-b0f4-4d04-b4af-53f0cdf12c94",
            "value": "89089b7a1531be5fc2832817dac6d499",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018515",
            "to_ids": true,
            "type": "sha1",
            "uuid": "7643b2bf-2a09-4918-8dff-4fac15be7854",
            "value": "131999ffdd9c56439812a625ce631bff150c3124",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018515",
            "to_ids": true,
            "type": "sha256",
            "uuid": "5376e400-67a7-4bee-b63c-b71875825aab",
            "value": "34c4923b19461df7218671c06a57aeafab42cdd46d715e665ab56aaf8f5c6092",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776016385",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "8c8cd5ad-b244-4fc9-9b34-c4cb0f8df63c",
            "value": "3072:HMkiQ0Ti78ZGAttez2m7sKNqQNmTVm9he0xoyW3k8CknLwBsYC:ZsG78sATmZbNmhQa3LnsC"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776016385",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "c9049b77-f1f1-4605-ae4f-71c8e21ee268",
            "value": "230400"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776016385",
            "to_ids": true,
            "type": "vhash",
            "uuid": "43919d5e-0b08-45b2-9d9f-dad5a61ab142",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  10/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776016385",
            "to_ids": false,
            "type": "text",
            "uuid": "dc1b6c53-a5f1-4280-a7b5-830ba0e57603",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win64/Tedy!MTB\nVT Total Detection:45/72\nFirst Submission:2026-03-07T14:17:52.000000+00:00\nLast Submission:2026-03-07T14:17:52.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043329",
        "uuid": "b471a229-2857-41ec-8812-8e94a3862c14",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043329",
            "to_ids": true,
            "type": "md5",
            "uuid": "47420af6-54ea-4640-a1e6-02ae5d2f5d5b",
            "value": "8ac68b43bb471fb676c76e999d38501f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018516",
            "to_ids": true,
            "type": "sha1",
            "uuid": "a1e18039-7f3a-4009-bc11-9a59a2c122ad",
            "value": "9909133066b011119bd2c8be5dacfb16d55e09fd",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018516",
            "to_ids": true,
            "type": "sha256",
            "uuid": "0e090fe1-77df-4d29-b1c9-4a578e227b07",
            "value": "64fdaf28d2f52ed847fa32d016e20e06d6a5728319000ade61363a5b291a9031",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776016429",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "36545068-037b-4e31-8a62-69ba3893de7e",
            "value": "3072:puasQyBVshtd+fOUIA1qwMpfUkwMU86O6iy5JuRw1pdvbU:pSDs7BlDUkwmn6iy5JTdvbU"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776016429",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "b6bd08e3-80c7-404d-905c-0e14d7d751c1",
            "value": "233472"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776016429",
            "to_ids": true,
            "type": "vhash",
            "uuid": "dacf77e0-c91d-41e3-af79-22a0871fc8b5",
            "value": "025046655d155035z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  25/02/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776016429",
            "to_ids": false,
            "type": "text",
            "uuid": "520230f6-686a-4d57-826e-eb9537f9f3b3",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:45/72\nFirst Submission:2026-02-21T05:39:34.000000+00:00\nLast Submission:2026-02-21T05:39:34.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043350",
        "uuid": "bc095954-360b-4621-ac7d-11c1e72aabb5",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043350",
            "to_ids": true,
            "type": "md5",
            "uuid": "8dbb3b41-9ca7-465d-98e4-e395503c1f07",
            "value": "8c23c3f131284fe43de0af89e1974bad",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018517",
            "to_ids": true,
            "type": "sha1",
            "uuid": "299aba74-36b3-4c8e-a8d0-7ff34d089afb",
            "value": "8af379e7651763bc45048b41b307367cd9ad0053",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018517",
            "to_ids": true,
            "type": "sha256",
            "uuid": "6c66b706-e605-48d2-b7a9-01bfc68b8d3a",
            "value": "cf186babc65417ce2d30910c7c145f53c4cd5acb452e58adfbbdcb36836c9bd8",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776016472",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "a0d1f055-0886-470f-8e2c-502e9155f6ca",
            "value": "3072:2y+NC+3FGCgIuXHbTZvQJoUaCSC0CwMQv7PfyeLZlwABcJwQr:oDPgIuXHnZQyUSC/5ubfhce"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776016472",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "508975aa-9ae2-43ca-9ab9-6de9d47b603e",
            "value": "223744"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776016472",
            "to_ids": true,
            "type": "vhash",
            "uuid": "db1cf1f3-c946-43e0-a941-7261902a43c7",
            "value": "0250466d7d155025z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  09/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776016472",
            "to_ids": false,
            "type": "text",
            "uuid": "06960457-2f8b-4775-8aa1-32423877bde7",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:24/72\nFirst Submission:2026-03-09T06:49:44.000000+00:00\nLast Submission:2026-03-09T06:49:44.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043371",
        "uuid": "62bd3406-aa9f-4686-93e6-879966c2fa11",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043371",
            "to_ids": true,
            "type": "md5",
            "uuid": "4166ac84-ac0d-46f6-9ba4-7c8742710279",
            "value": "8c47c2a79352e74cbfcfb32cd0e49db0",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018518",
            "to_ids": true,
            "type": "sha1",
            "uuid": "21cb574e-018f-48b7-8276-1f55a43de0ab",
            "value": "75b58f6bab6294779af2890c2ccb4907091c2200",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018518",
            "to_ids": true,
            "type": "sha256",
            "uuid": "61c4e215-821a-4161-a5a2-9dc084200bea",
            "value": "cb6f47466d36a57e89c2ca0bdde18a87b11e05febec4686cb1f61d44056400ec",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776016494",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "fc05a1ad-c115-4559-87bb-8c07f73ce93e",
            "value": "3072:qJ7og3wQ217siFax6B+JhxupRkFWg3KvZ8qWkJdyRQKbCbpkLx87Jtzp9qw:oog3wQ2Nex6BkxhUuqWcdyR/UHp9qw"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776016494",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "2dcb9b99-ec1f-4d08-b2e0-d3c6b81ef57e",
            "value": "232448"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776016494",
            "to_ids": true,
            "type": "vhash",
            "uuid": "dc554b33-8dd6-4581-aade-026669dbf1b3",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776016494",
            "to_ids": true,
            "type": "filename",
            "uuid": "2947aa90-de95-48ac-8745-713f07bf4515",
            "value": "0v1do.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  02/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776016494",
            "to_ids": false,
            "type": "text",
            "uuid": "930a196b-253c-4c1f-aa98-b5e29626a90c",
            "value": "Type Description: Win32 EXE\nMicrosoft: None\nVT Total Detection:22/72\nFirst Submission:2026-03-02T07:09:17.000000+00:00\nLast Submission:2026-03-02T07:09:17.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043392",
        "uuid": "920649fc-6c4e-4c26-8805-932cd33e0c95",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043392",
            "to_ids": true,
            "type": "md5",
            "uuid": "3fd8c722-40e4-465d-9126-4b9a06dc294a",
            "value": "8e21bdcce589369c342238f6b400a2e2",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018519",
            "to_ids": true,
            "type": "sha1",
            "uuid": "2e5d9e19-36ca-4b59-bdf8-a0ad763b4b62",
            "value": "fd773b4dac3c0a799990dc8849e52d6518b04d40",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018519",
            "to_ids": true,
            "type": "sha256",
            "uuid": "8f9cc379-07c9-4f4e-a062-53f0b246fa50",
            "value": "e9ad97a04a5723efa4faea2dc511c2af68730d1e6365f18bef47cafc79466f49",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776016536",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "57378c19-018a-4f4d-bcb0-5daaffcc3252",
            "value": "3072:2fbVJDkZeYmB3KhLp+TU9x8xxycC/rOD4r+1pi6XIqQtvhQpoN6:MJDsefB3Kxp+NyBtq6hl"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776016536",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "23b34897-3282-41d7-b801-0571ad97055c",
            "value": "227328"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776016536",
            "to_ids": true,
            "type": "vhash",
            "uuid": "02862ccc-bdc8-4c4f-8293-a505b7d8696f",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776016536",
            "to_ids": true,
            "type": "filename",
            "uuid": "3f098eda-8bf2-40be-94cd-95215b0fb9f3",
            "value": "fo5tmr23.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  20/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776016536",
            "to_ids": false,
            "type": "text",
            "uuid": "e0ef4064-bebd-452d-ad4d-1a1bd22cfed8",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win64/Mint.MK!MTB\nVT Total Detection:35/71\nFirst Submission:2026-03-20T02:41:55.000000+00:00\nLast Submission:2026-03-20T02:41:55.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043413",
        "uuid": "5b75e132-121c-4b99-aedd-0b770d591cc3",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043413",
            "to_ids": true,
            "type": "md5",
            "uuid": "4209020b-91da-4b00-ba46-7f715ab7e45a",
            "value": "8e93d0148f80171e3029fbeda9d1a88a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018520",
            "to_ids": true,
            "type": "sha1",
            "uuid": "937cdfc8-b76c-4894-b1dd-ce854b9911bc",
            "value": "7803563f9ea976c66be8c15367781142ca1c6821",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018520",
            "to_ids": true,
            "type": "sha256",
            "uuid": "612c1089-173f-430f-b293-cd24ddc962e7",
            "value": "1f78c40f12f785bf5cd990a6be01826f02daefd05ea8cfea8dbb601e1a3f781c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776016579",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "b6ddc59d-d6bb-48e3-9d0f-2679841c1d23",
            "value": "3072:2y+NC+3FGCgIuXHbTZvQJoUaCSC0CwMQv7PfyeLZlwABcJwMr:oDPgIuXHnZQyUSC/5ubfhce"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776016579",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "98a3c2db-c820-43b2-8142-b6f05845cb38",
            "value": "223744"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776016579",
            "to_ids": true,
            "type": "vhash",
            "uuid": "566ce34b-5754-4704-8ccf-c5776b9633e3",
            "value": "0250466d7d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776016579",
            "to_ids": true,
            "type": "filename",
            "uuid": "8074c9d2-b00c-460f-9349-7a988c26aac3",
            "value": "localfile~"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  09/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776016579",
            "to_ids": false,
            "type": "text",
            "uuid": "16230623-70c1-4e73-bced-af5c46ef288b",
            "value": "Type Description: Win32 EXE\nMicrosoft: Program:Win32/Wacapew.C!ml\nVT Total Detection:22/72\nFirst Submission:2026-03-08T18:57:03.000000+00:00\nLast Submission:2026-03-08T18:57:03.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043434",
        "uuid": "e1e15974-d842-4601-a739-a572df90be2b",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043434",
            "to_ids": true,
            "type": "md5",
            "uuid": "8e75dc2a-befc-4564-9c88-0ce105f2b7e2",
            "value": "8edf939093f663573a101d534d6091bd",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018521",
            "to_ids": true,
            "type": "sha1",
            "uuid": "ad42c795-7c63-41c2-b236-34f642bd6db6",
            "value": "196cec7b2cdb4ba9a6ed2c52032aca62478de53f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018521",
            "to_ids": true,
            "type": "sha256",
            "uuid": "3b137865-920c-4176-a7e2-56b94983da46",
            "value": "36264ed4b85465434dcb1bcf151e2c41702c12107126b605abb5479273aea702",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776016601",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "e0fd4161-6acb-4024-9b8e-cc88f4fa3e8c",
            "value": "3072:+uasQyBVshtd+fOUIA1qwMpfUkwMU86O6iy5JuRw1pdvb7:+SDs7BlDUkwmn6iy5JTdvb7"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776016601",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "80c54779-e987-4bd8-949e-1cdb784b2cc4",
            "value": "221184"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776016601",
            "to_ids": true,
            "type": "vhash",
            "uuid": "49105207-0407-45eb-b8d7-e8c3d2509e20",
            "value": "025046655d155035z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  25/02/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776016601",
            "to_ids": false,
            "type": "text",
            "uuid": "b07b9a78-06de-4d21-a625-733f9cbe91b8",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:46/72\nFirst Submission:2026-02-21T05:36:35.000000+00:00\nLast Submission:2026-02-21T05:36:35.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043455",
        "uuid": "8b8b51a4-4837-4e20-bfc8-775ea081e6e6",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043455",
            "to_ids": true,
            "type": "md5",
            "uuid": "8b082321-18c0-4ec9-a989-3b1ebdc35b1a",
            "value": "8ffcab1c7f6b0ada58607ec9a85289fe",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018522",
            "to_ids": true,
            "type": "sha1",
            "uuid": "710ec167-4d3a-42bd-b8bc-d6d175bd5314",
            "value": "23f79e9f06403a3157efeaf9c82070ad5494606c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018522",
            "to_ids": true,
            "type": "sha256",
            "uuid": "7ee7922a-0dd7-4f54-9699-172179fe7105",
            "value": "012b19c34f961da8e074a361a1eda0448e031d77a24081d47c86c1bca85f9bac",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776016643",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "da70c583-fbf2-4d91-a276-81ddcc458da5",
            "value": "3072:aZcVQT0bdnlqIG7tOvwOq808vefxxlMdipe3t1MfSxP0cR:XyQiAzq8Le5mi0hW"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776016643",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "47d2e021-792b-40f5-8a4b-9e4afea867cd",
            "value": "223744"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776016643",
            "to_ids": true,
            "type": "vhash",
            "uuid": "3ac95d97-f9ea-4ff9-9c81-dfe3a3eb946c",
            "value": "0250466d7d155025z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  14/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776016643",
            "to_ids": false,
            "type": "text",
            "uuid": "ae74dbd3-5da2-4ec9-a00b-7b25cb5f600f",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:25/72\nFirst Submission:2026-03-14T12:52:56.000000+00:00\nLast Submission:2026-03-14T12:52:56.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043477",
        "uuid": "01593f0c-2716-4a2c-bddc-6982fdaccb5a",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043477",
            "to_ids": true,
            "type": "md5",
            "uuid": "fd6a552a-925b-4b11-b802-181f700eea60",
            "value": "911848ea66ffe115f274fe7cc7a22b61",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018524",
            "to_ids": true,
            "type": "sha1",
            "uuid": "ce703d5e-dd25-4d70-b383-c8a389fa82d2",
            "value": "662d3ecea654fcd37e62e2cda38c0ad2792eac8f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018524",
            "to_ids": true,
            "type": "sha256",
            "uuid": "a3999ac6-d400-49e6-8129-a6f36df82c92",
            "value": "b0884f8a82ae7bed82f4f19237748c8e8196fa586d662ed36eb079a0b7a07375",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776016686",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "595b5fbb-7194-48ad-8187-3163cdc30832",
            "value": "3072:puasQyBVshtd+fOUIA1qwMpfUkwMU86O6iy5JuRw1pdvbq:pSDs7BlDUkwmn6iy5JTdvbq"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776016686",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "454714a0-2a58-4472-811b-b823cc60e3e5",
            "value": "233472"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776016686",
            "to_ids": true,
            "type": "vhash",
            "uuid": "2c47f863-dd48-4531-ad98-3cb3c5d18442",
            "value": "025046655d155035z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  25/02/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776016686",
            "to_ids": false,
            "type": "text",
            "uuid": "74f4920d-5575-4353-bd4c-509e16c77376",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:45/72\nFirst Submission:2026-02-21T05:43:22.000000+00:00\nLast Submission:2026-02-21T05:43:22.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043498",
        "uuid": "47ea9a72-d856-4a75-82a1-bc0c7db384d1",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043498",
            "to_ids": true,
            "type": "md5",
            "uuid": "98faa1e2-6ea8-4b6a-b6ed-31582043e36c",
            "value": "939dc9e4baef138da5d12ba86ce620f7",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018524",
            "to_ids": true,
            "type": "sha1",
            "uuid": "7d7f8747-81c5-4d91-a334-08871b74e368",
            "value": "6d6430e08860ed1e61a941036680a1306a3bbf81",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018525",
            "to_ids": true,
            "type": "sha256",
            "uuid": "a5f71b09-3fe6-4511-85aa-cab1acc692dc",
            "value": "54a096fefe8c79117990ec0d6dde36531378200da51c6f7d4f75bb294189bc0c",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776016708",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "cc1655ce-4712-424d-b15e-135b6c108226",
            "value": "6144:epFJxVbqzn7nZsdAzjOj2lvF8EIua6oyqYY:etxVbqYQlvFE"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776016708",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "4875904d-3c2b-466c-b710-9edb5990117a",
            "value": "205312"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776016708",
            "to_ids": true,
            "type": "vhash",
            "uuid": "e8937a22-2dfe-41c7-80dc-ca96489fcd49",
            "value": "0250466d5d155025z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  25/02/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776016708",
            "to_ids": false,
            "type": "text",
            "uuid": "e2a24c18-26cf-4055-a767-b2f0fde296bd",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win64/Mint.AH!MTB\nVT Total Detection:29/72\nFirst Submission:2026-02-24T09:42:07.000000+00:00\nLast Submission:2026-02-24T09:42:07.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043519",
        "uuid": "617ccea1-3c5f-4034-949e-65ba4dfcd89b",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043519",
            "to_ids": true,
            "type": "md5",
            "uuid": "26d93bde-650b-4642-bf5a-0d23790b0756",
            "value": "942dfb3e135980c7ff79ce6941c9f837",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018526",
            "to_ids": true,
            "type": "sha1",
            "uuid": "7784ed63-4a8d-4829-b935-714f1b0a6f1b",
            "value": "5d6be43f2004722951bde7d1a2ca85ca2d874f3f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018526",
            "to_ids": true,
            "type": "sha256",
            "uuid": "2732ec0f-0f04-4aae-bfd9-da8369d57472",
            "value": "6d4e66e0564c89409233d812c9267b2031ee0f23114fe645c539dc1cc01b76c7",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776016751",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "2c902a71-bca2-4172-aa21-72a3266ce441",
            "value": "3072:27MfJ8tf/L7DuXhpZwYtbYyeRSIgOeQq6Iz+9x6S+C5ofCs7kCxtORNREP:PO/itwGeR+OJIa9iCCT9tORLEP"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776016751",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "dc09f103-e8f6-40ad-bbd9-bd196d1e26c6",
            "value": "226816"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776016751",
            "to_ids": true,
            "type": "vhash",
            "uuid": "6e245c29-b9a0-4370-a3b2-45ce1753df20",
            "value": "025046657d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776016751",
            "to_ids": true,
            "type": "filename",
            "uuid": "836faffb-95ea-4917-90a3-576cf4ab19f6",
            "value": "9zgj79ekx.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  10/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776016751",
            "to_ids": false,
            "type": "text",
            "uuid": "37b5d5db-5e1f-4de3-a496-9d91fe81275e",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Lazy.RR!MTB\nVT Total Detection:48/72\nFirst Submission:2026-04-04T18:15:26.000000+00:00\nLast Submission:2026-04-04T18:15:26.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043540",
        "uuid": "395557ae-f5cf-41f7-b2fe-434c867fdc35",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043540",
            "to_ids": true,
            "type": "md5",
            "uuid": "4db676f8-01ca-47d7-8e2c-be517a13e83a",
            "value": "98aa68ce3b4ad2364ae39faffe555ce2",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018527",
            "to_ids": true,
            "type": "sha1",
            "uuid": "c00a8ac1-2131-48fd-843f-ecede495a059",
            "value": "5e5311815071158ebebca073959ca016632aaf01",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018527",
            "to_ids": true,
            "type": "sha256",
            "uuid": "aa1dd6a8-9d92-4343-8f6d-57988ac41cb5",
            "value": "1ddf9c5371a13081c43b2c9a0c71dd35fe09842b51f3e582a2f7336b80c3f4a5",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776016815",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "d82e0737-6e15-49a7-90e3-421bc1a74b09",
            "value": "6144:epFJxVbqzn7nZsdAzjOj2lvF8EIuAKoyqYY:etxVbqYQlvFE"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776016815",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "be9d8f7e-cde1-48c1-b209-d80ad5ad8c58",
            "value": "205312"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776016815",
            "to_ids": true,
            "type": "vhash",
            "uuid": "5718488c-a64a-4e88-9d06-294fd75ba114",
            "value": "0250466d5d155025z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  02/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776016815",
            "to_ids": false,
            "type": "text",
            "uuid": "23ac5d71-3858-4108-8ffc-7c4e933628c4",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win64/Mint.AH!MTB\nVT Total Detection:23/72\nFirst Submission:2026-03-02T05:50:34.000000+00:00\nLast Submission:2026-03-02T05:50:34.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043562",
        "uuid": "1398d30f-204e-48fc-a9d1-b728d2ea3b07",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043562",
            "to_ids": true,
            "type": "md5",
            "uuid": "526fb103-af36-4fcf-baff-0e35522a7786",
            "value": "99dfb29a6144d3fbf63527a561c17870",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018529",
            "to_ids": true,
            "type": "sha1",
            "uuid": "cdfae864-9341-43de-b174-4c9644922432",
            "value": "15cbf90613c6a1bcd84f843710d64a87c23f44c8",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018529",
            "to_ids": true,
            "type": "sha256",
            "uuid": "a7091608-1d8a-4be3-bd91-9aa0bb10415d",
            "value": "854e537b9961d6f8910f8f70c421f276bb76a292abdbc9cf9fd60c994655b174",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776016837",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "44deefcd-a7b4-4c00-85b0-15d528c4ef6b",
            "value": "3072:eKsdw6g4JCbeZDrInZgQlFecnH3bzIEXAQxf+coftuEV/3N3LBgl+mgF6Tgg:Md9J3ebH33LQSitFBgl+mgF6Tgg"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776016837",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "ddc0662a-1158-43f1-9de9-5e46220cd4bc",
            "value": "227328"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776016837",
            "to_ids": true,
            "type": "vhash",
            "uuid": "c42fd464-c48d-44a8-af2a-ac7ff3de1342",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776016837",
            "to_ids": true,
            "type": "filename",
            "uuid": "d4a8bfd6-979b-4495-97de-74bc334d5d3b",
            "value": "x242dgiha.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  06/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776016837",
            "to_ids": false,
            "type": "text",
            "uuid": "459a9342-f3ee-4031-bbb0-c66e3be3ed33",
            "value": "Type Description: Win32 EXE\nMicrosoft: None\nVT Total Detection:47/72\nFirst Submission:2026-04-04T16:59:32.000000+00:00\nLast Submission:2026-04-04T16:59:32.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043583",
        "uuid": "dc73bc33-6803-463e-a081-43a842d23928",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043583",
            "to_ids": true,
            "type": "md5",
            "uuid": "ce19d85b-447f-4af1-a707-34838cff2683",
            "value": "9bb390f1dd1afb45cad9984a29573afc",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018530",
            "to_ids": true,
            "type": "sha1",
            "uuid": "51a064d2-18a9-4d24-b30c-e04fd842f6a4",
            "value": "f373bbe32bdd44d294aeae8e0c0f9ced7b77a3c5",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018530",
            "to_ids": true,
            "type": "sha256",
            "uuid": "4c9761a2-c365-4798-af9d-fdd72b2eb689",
            "value": "4b3e0cd785f442d0606ba043ced7efb6b46fd1c987ce0a710428db907b2b5e49",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776016879",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "6152923c-4610-4220-a83a-74159e3a9dc5",
            "value": "6144:mpFJxVbqzn7nZsdAzjOj2lvF8EIuH4oyqYY:mtxVbqYQlvFE"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776016879",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "c52ce5dd-8b69-4bf9-9459-8a72630de4dc",
            "value": "204800"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776016879",
            "to_ids": true,
            "type": "vhash",
            "uuid": "1ab38714-84a0-49a6-9c4e-aafca19af426",
            "value": "0250466d5d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776016879",
            "to_ids": true,
            "type": "filename",
            "uuid": "51aa3398-a683-4080-b2ea-a3c773a4ee34",
            "value": "wy38o.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  25/02/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776016879",
            "to_ids": false,
            "type": "text",
            "uuid": "ff154b50-f6db-402e-804b-d82db1a38e40",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Etset!rfn\nVT Total Detection:31/72\nFirst Submission:2026-02-22T12:16:39.000000+00:00\nLast Submission:2026-02-22T12:16:39.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043604",
        "uuid": "1e1ef521-676a-4db8-a8dd-3f53d1bff38d",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043604",
            "to_ids": true,
            "type": "md5",
            "uuid": "fdc079ec-d0a2-4b5c-9bff-38b787538d78",
            "value": "9d0ae7345ef141e9818c94bc068ff73d",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018531",
            "to_ids": true,
            "type": "sha1",
            "uuid": "0711f47c-e538-4e7e-ae6d-59e6094a715c",
            "value": "29caeda7f2ddb52c3d1d9e603dbe1e17515ca8be",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018531",
            "to_ids": true,
            "type": "sha256",
            "uuid": "e88ac586-3e07-4c5d-af9b-dbc910ed3b1d",
            "value": "ead4f1832b9c64acf473e292360ae5a7dba7f8a8e28b06a901fafa990555983a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776016923",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "40d36076-3692-4523-b664-04af60e9edde",
            "value": "3072:wq0RV1RNu5qrc9hitBQU22Wc4F9XdmiBynoMRyDEO8:x0VBrcLitmDVX0iyo2R"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776016923",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "0f043727-cd1c-46b2-89be-c69e92990308",
            "value": "227840"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776016923",
            "to_ids": true,
            "type": "vhash",
            "uuid": "c880bc53-c814-4b01-9aea-4afc29c19a8a",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776016923",
            "to_ids": true,
            "type": "filename",
            "uuid": "0385a655-b18f-4316-be8e-badef68a4563",
            "value": "fdzypz.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  09/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776016923",
            "to_ids": false,
            "type": "text",
            "uuid": "a84af68b-60e0-4cd3-977b-8749dedd8941",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Lazy.RR!MTB\nVT Total Detection:46/72\nFirst Submission:2026-04-07T00:38:30.000000+00:00\nLast Submission:2026-04-07T00:38:30.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043625",
        "uuid": "3e833d62-00b3-433c-a344-3065c5ea6c97",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043625",
            "to_ids": true,
            "type": "md5",
            "uuid": "c2aaf596-65c8-4914-a6c1-3d33ab598ce0",
            "value": "9e1a1dfd516d721b2b30dcfb44812da3",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018533",
            "to_ids": true,
            "type": "sha1",
            "uuid": "2285b672-b825-445c-9ab7-b4515efc73eb",
            "value": "097a24c696471ff7c646dcb1549bf84f1e59b95f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018533",
            "to_ids": true,
            "type": "sha256",
            "uuid": "912b09e5-5c07-403f-8c9a-3c2f1bb32c74",
            "value": "52e9b90c664f7be32cc35c493007f91282781d11184d4b72d522e5c18c726063",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776016966",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "a970aad5-3a8a-4d03-8eab-b9e946ad8061",
            "value": "3072:Mq0RV1RNu5qrc9hitBQU22Wc4F9XdmiBynoMRyDEpaA:V0VBrcLitmDVX0iyo2X"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776016966",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "03d9f5fe-fcb2-41d0-8514-b20989f3aa51",
            "value": "228352"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776016966",
            "to_ids": true,
            "type": "vhash",
            "uuid": "528c7bba-02a1-4edf-b187-b2d18a6bf973",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776016966",
            "to_ids": true,
            "type": "filename",
            "uuid": "d5893470-547f-4cbc-a2e1-a8a580707a3b",
            "value": "6jj9tg3.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  07/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776016966",
            "to_ids": false,
            "type": "text",
            "uuid": "5ca7ce51-c22b-4c12-be10-fdc00638a9ef",
            "value": "Type Description: Win32 EXE\nMicrosoft: Program:Win32/Wacapew.C!ml\nVT Total Detection:32/72\nFirst Submission:2026-04-06T21:11:31.000000+00:00\nLast Submission:2026-04-06T21:11:31.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043646",
        "uuid": "596c4e04-e2c3-40b8-84b3-dcc675b55427",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043646",
            "to_ids": true,
            "type": "md5",
            "uuid": "dd3a2f55-644d-4fbc-8296-2994a1115d07",
            "value": "9e532c8a8b41d2fe62fdfbae4ba0e15f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018534",
            "to_ids": true,
            "type": "sha1",
            "uuid": "75e7f5de-3130-40f0-93e1-a55258a0af2e",
            "value": "606f8f82058863f004ca71f7ec9231b4f45d7d35",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018534",
            "to_ids": true,
            "type": "sha256",
            "uuid": "e4dba42f-26c3-49c9-bbbb-da329fdda822",
            "value": "8f61d7b46285ed1f21bcff9c8ce385a66a1777a1046b1a5462d1e468c54a3210",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776016987",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "8c97c5b4-72bf-4f89-8d52-9870c60c2e03",
            "value": "3072:2fbVJDkZeYmB3KhLp+TU9x8xxycC/rOD4r+1pi6XIqQtvhQloP6:MJDsefB3Kxp+NyBtq6hF"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776016987",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "2d2bb8d8-8ec6-4a1b-bd65-1dbbd2ce2e01",
            "value": "227328"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776016987",
            "to_ids": true,
            "type": "vhash",
            "uuid": "9dbc00c5-7c98-4761-99f8-456c984c7bbb",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  19/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776016987",
            "to_ids": false,
            "type": "text",
            "uuid": "ae6f596a-e1d6-4410-94c3-e84d9a573123",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win64/Mint.MK!MTB\nVT Total Detection:33/71\nFirst Submission:2026-03-19T12:12:30.000000+00:00\nLast Submission:2026-03-19T12:12:30.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043668",
        "uuid": "f152b7fc-046e-44a9-bd29-91736f7c2233",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043668",
            "to_ids": true,
            "type": "md5",
            "uuid": "f5086b59-dac8-4376-b724-925e89c0b933",
            "value": "9fb86da99e170ba8d7a8fa9607d0754a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018534",
            "to_ids": true,
            "type": "sha1",
            "uuid": "f81f0459-0475-4cc3-9799-9811436e8d30",
            "value": "fc9093690a6c41c34444f27a0bff1978054dd99f",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018535",
            "to_ids": true,
            "type": "sha256",
            "uuid": "cb9fa34c-f824-4510-8912-0a25a72add17",
            "value": "d1ac2d04e71c6ea47ffba24bf1943eff8e99c21af5c10931157e19fe6e5fa564",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776017030",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "0057de1f-6111-4646-bc37-7b4b1a45b373",
            "value": "3072:N7MfJ8tf/L7DuXhpZwYtbYyeRSIgOeQq6Iz+9x6S+C5ofCs7kCxtQRNR8P:CO/itwGeR+OJIa9iCCT9tQRL8P"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776017030",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "90268030-ee85-4cc6-8ef9-90245bcc0aff",
            "value": "227840"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776017030",
            "to_ids": true,
            "type": "vhash",
            "uuid": "5f4eea22-5977-490e-a942-28ed2e8a30ed",
            "value": "0250466d7d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776017030",
            "to_ids": true,
            "type": "filename",
            "uuid": "4bf52345-7f25-4a99-bbaa-48a16f445a0f",
            "value": "jfwb0oy.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  02/04/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776017030",
            "to_ids": false,
            "type": "text",
            "uuid": "84aaccad-df74-4b99-b57b-9e14c2c3bf5c",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:36/71\nFirst Submission:2026-03-31T17:27:35.000000+00:00\nLast Submission:2026-03-31T17:27:35.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043689",
        "uuid": "075f513c-f219-4390-b859-32ec9856bcac",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043689",
            "to_ids": true,
            "type": "md5",
            "uuid": "279a7dbd-75cf-4867-a6ff-fd388e23e50a",
            "value": "9fd2ad5419584f64180c90812ea7fbef",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018536",
            "to_ids": true,
            "type": "sha1",
            "uuid": "f168a67b-1483-41e7-90c9-d44cb26d311a",
            "value": "8a689ec5cfda697f2288003aba29f106c71defdc",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018536",
            "to_ids": true,
            "type": "sha256",
            "uuid": "92236e9d-003a-45c9-bc8f-06f159f11fee",
            "value": "31fb8105179b382baa5ea4e3244d4a2861591ed22b838af757d58061d2e5e23a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776017073",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "588f8fb9-4dc7-4ae4-9701-8e27b675dc8a",
            "value": "3072:aZcVQT0bdnlqIG7tOvwOq808vefxxlMdipe3t1MfSxh0tR:XyQiAzq8Le5mi0h4"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776017073",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "43f551aa-1518-4aaf-ad0a-9afb2f5033cd",
            "value": "223744"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776017073",
            "to_ids": true,
            "type": "vhash",
            "uuid": "1efe7ab4-7d8f-42a2-8910-5ea295e51106",
            "value": "0250466d7d155025z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  16/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776017073",
            "to_ids": false,
            "type": "text",
            "uuid": "f0ff4299-a38a-41f3-a93a-70cb8e7256e2",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:41/72\nFirst Submission:2026-03-14T12:38:18.000000+00:00\nLast Submission:2026-03-14T12:38:18.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043710",
        "uuid": "a91f8e84-b76e-405d-b4f2-aeed8346dfc9",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043710",
            "to_ids": true,
            "type": "md5",
            "uuid": "5d9a7d3b-ae18-4294-b9e8-c5b5bd036024",
            "value": "a0b6d334fe266d8973db1cde5824c438",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018537",
            "to_ids": true,
            "type": "sha1",
            "uuid": "a8c5f9c7-19e1-48d4-bef2-036d7c35c075",
            "value": "ba116cfc3ca8850caf7f06abcfa803c4017adc4a",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018537",
            "to_ids": true,
            "type": "sha256",
            "uuid": "5632d9cb-4d28-45d2-b2f9-60209ab49e85",
            "value": "a41ea92f3e8480cf78617cfdbe024fab350918d18ae9cb640bb3043b5af4d5db",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776017158",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "52f95032-98f0-484a-a486-d086b43a75de",
            "value": "3072:2ZcVQT0bdnlqIG7tOvwOq808vefxxlMdipe3t1MfSx009sR:LyQiAzq8Le5mi0hf"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776017158",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "885b9759-11ab-4bcf-bf00-9adfa1e80b48",
            "value": "223232"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776017158",
            "to_ids": true,
            "type": "vhash",
            "uuid": "b53df723-1868-46eb-b90e-2270e91e17f5",
            "value": "0250466d7d155025z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  15/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776017158",
            "to_ids": false,
            "type": "text",
            "uuid": "68533118-37b4-426c-a111-4d2362946ed6",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.C!ml\nVT Total Detection:23/72\nFirst Submission:2026-03-15T06:10:07.000000+00:00\nLast Submission:2026-03-15T06:10:07.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043731",
        "uuid": "a38fdce1-ea30-4d6b-a935-e3a5375a2e63",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043731",
            "to_ids": true,
            "type": "md5",
            "uuid": "7178994b-4bc6-44a9-8614-ae49f6744d63",
            "value": "a1e91139c9844d74e1937cef6d64e993",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018538",
            "to_ids": true,
            "type": "sha1",
            "uuid": "e0414993-ce9a-4963-85f4-4cd83ea460ed",
            "value": "371a5ff66a1fc7d3f7e67ebd8e7db178fc91a66b",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018538",
            "to_ids": true,
            "type": "sha256",
            "uuid": "7a8e93ca-27b5-441c-a1ca-cacdcca45673",
            "value": "1ce76b73231ffdce6c78ef3e5edc2624f58c108c0c61d81274df308932f791bf",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776017201",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "5c83240d-9da0-4851-bc16-2ec565ef37a3",
            "value": "3072:FtDPL086KvAq6wHgG08mEthZs6siURap6iyJ:Xz08pYq5tlthZseoFJ"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776017201",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "059629c9-5154-4633-9d0e-e32089109c58",
            "value": "229888"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776017201",
            "to_ids": true,
            "type": "vhash",
            "uuid": "48dc4b0d-a068-42e8-a180-984d692e2f7e",
            "value": "0250466d7d155025z91z67z504bzafz"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  31/03/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776017201",
            "to_ids": false,
            "type": "text",
            "uuid": "5ce0ae0f-d4e6-429c-ba30-cee2fda3bef3",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:36/71\nFirst Submission:2026-03-31T05:04:48.000000+00:00\nLast Submission:2026-03-31T05:04:48.000000+00:00"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "25",
        "timestamp": "1776043753",
        "uuid": "ec153618-8e26-4108-b599-224d7e050cc4",
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1776043753",
            "to_ids": true,
            "type": "md5",
            "uuid": "de55a910-68e7-427a-acb8-5df8032f99b3",
            "value": "a23c9dc7ffe63c6eea07b6e112ae89e8",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              },
              {
                "colour": "#342294",
                "local": false,
                "name": "CommentAdded",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1776018539",
            "to_ids": true,
            "type": "sha1",
            "uuid": "f2c2fd4d-f94e-4ebd-ac66-eee65b267808",
            "value": "2347d5a7b56fd36f76da4be45f86a1c8308ef421",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1776018539",
            "to_ids": true,
            "type": "sha256",
            "uuid": "09742fcd-c421-4aec-83f0-fb09e9a027fa",
            "value": "67cde450e21161cf879c084d05c4cc147058f6f8d750bda8bd605e127d59b716",
            "Tag": [
              {
                "colour": "#260091",
                "local": false,
                "name": "rectifyq:ioc=\"enriched\"",
                "relationship_type": ""
              },
              {
                "colour": "#220085",
                "local": false,
                "name": "rectifyq:samples-found-in=\"VirusTotal\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
                "relationship_type": ""
              },
              {
                "colour": "#626567",
                "local": false,
                "name": "rectifyq:no-samples-in=\"Tria.ge\"",
                "relationship_type": ""
              }
            ]
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "ssdeep",
            "timestamp": "1776017223",
            "to_ids": true,
            "type": "ssdeep",
            "uuid": "2c410143-b64f-4c57-942d-6a74f5b3fb39",
            "value": "3072:2P2Up7/iiOrVA6GX4apRs/kBMjV9SDpKHr2zcViQQ:RUp7qbrVLQ7pRP8VQD1QQ"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "size-in-bytes",
            "timestamp": "1776017223",
            "to_ids": false,
            "type": "size-in-bytes",
            "uuid": "aa0744be-fbb8-470a-84d6-a722ef4024da",
            "value": "221184"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "vhash",
            "timestamp": "1776017223",
            "to_ids": true,
            "type": "vhash",
            "uuid": "e16806f3-94e3-45da-9812-3df314e98b4b",
            "value": "0250466d6d155025z91z67z504bzafz"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "filename",
            "timestamp": "1776017223",
            "to_ids": true,
            "type": "filename",
            "uuid": "7fa848f3-5b5f-49fd-bf2e-aae086d41246",
            "value": "xlw524fue.exe"
          },
          {
            "category": "Other",
            "comment": "Checked: 13/04/2026\nLast-scan\t:  28/02/2026",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "text",
            "timestamp": "1776017223",
            "to_ids": false,
            "type": "text",
            "uuid": "b5bd696a-aa51-4d4e-92a8-e10fdfcb4445",
            "value": "Type Description: Win32 EXE\nMicrosoft: Trojan:Win32/Wacatac.B!ml\nVT Total Detection:26/72\nFirst Submission:2026-02-26T02:41:53.000000+00:00\nLast Submission:2026-02-26T02:41:53.000000+00:00"
          }
        ]
      }
    ]
  }
}