{ "Event": { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [ { "colour": "#00af7a", "exportable": true, "hide_tag": false, "id": "705", "name": "DescriptionTechnique", "numerical_value": null, "user_id": "0" } ], "category": "Other", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791811", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "comment", "uuid": "211f6377-c55a-4ff3-85b8-c4886518bffa", "value": "UAC-0133 (Sandworm) plans for cyber sabotage on almost 20 objects of critical infrastructure of Ukraine" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Adresse IP utilis\u00e9e par les op\u00e9rateurs du MOA SANDWORM [2024-03-01;]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791814", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "ip-dst", "uuid": "bb0965dc-ab9f-4dc9-b955-56e043d12a58", "value": "185.38.150.8" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Adresse IP utilis\u00e9e par les op\u00e9rateurs du MOA SANDWORM [2024-03-01;]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791815", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "ip-dst", "uuid": "640aa6a6-3a34-49b5-96e2-6dd6dbb82d34", "value": "165.231.34.106" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Adresse IP utilis\u00e9e par les op\u00e9rateurs du MOA SANDWORM [2024-03-01;]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791816", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "ip-dst", "uuid": "5d3e14c3-c264-4230-a314-368149bfab53", "value": "178.250.188.114" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Adresse IP utilis\u00e9e par les op\u00e9rateurs du MOA SANDWORM [2024-03-01;]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791817", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "ip-dst", "uuid": "a4078db9-33bd-4cc4-9377-616baeb3a06f", "value": "185.225.114.90" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Noeud de sortie Tor utilis\u00e9 par les op\u00e9rateurs du MOA SANDWORM [2024-03-01;]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791818", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1717581535", "to_ids": true, "type": "ip-dst", "uuid": "c1e60657-fdd9-4ec5-815f-e1a61f490438", "value": "193.189.100.203" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Adresse IP utilis\u00e9e par les op\u00e9rateurs du MOA SANDWORM [2024-03-01;]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791819", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "ip-dst", "uuid": "3715ae16-f090-4524-8d68-9fdc26d9e860", "value": "194.61.121.211" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Adresse IP utilis\u00e9e par les op\u00e9rateurs du MOA SANDWORM [2024-03-01;]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791820", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "ip-dst", "uuid": "4840f359-96e5-4e44-8585-537b705608a0", "value": "195.154.182.165" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Adresse IP utilis\u00e9e par les op\u00e9rateurs du MOA SANDWORM [2024-03-01;]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791821", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "ip-dst", "uuid": "54472de8-2107-43ba-8321-59361532a37e", "value": "196.245.156.154" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Adresse IP utilis\u00e9e par les op\u00e9rateurs du MOA SANDWORM [2024-03-01;]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791822", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "ip-dst", "uuid": "b8749df6-8ac6-4d31-942c-9f06502c67ae", "value": "196.245.156.34" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Adresse IP utilis\u00e9e par les op\u00e9rateurs du MOA SANDWORM [2024-03-01;]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791823", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "ip-dst", "uuid": "cb312bbc-9e00-4162-a2c1-7780f3c57f47", "value": "88.80.145.239" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Adresse IP utilis\u00e9e par les op\u00e9rateurs du MOA SANDWORM [2024-03-01;]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791824", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "ip-dst", "uuid": "f2b829a0-2618-4492-a46e-a8f43cd33e62", "value": "91.92.137.6" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Adresse IP utilis\u00e9e par les op\u00e9rateurs du MOA SANDWORM [2024-03-01;]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791825", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "ip-dst", "uuid": "38480670-2fb1-4d3c-b75e-ed2c12f9d362", "value": "5.45.75.45" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Adresse IP utilis\u00e9e par les op\u00e9rateurs du MOA SANDWORM [2024-03-01;]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791826", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "ip-dst", "uuid": "c08e04a8-fa13-4936-991a-368d5a251e59", "value": "5.45.74.11" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Adresse IP utilis\u00e9e par les op\u00e9rateurs du MOA SANDWORM [2024-03-01;]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791827", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "ip-dst", "uuid": "bad41164-90ed-4e70-b461-24ffaefe226b", "value": "195.154.166.87" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Adresse IP utilis\u00e9e par les op\u00e9rateurs du MOA SANDWORM [2024-03-01;]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791828", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "ip-dst", "uuid": "fe8d2d5b-1483-49a8-84c0-56d267020f92", "value": "185.153.199.43" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "Adresse IP utilis\u00e9e par les op\u00e9rateurs du MOA SANDWORM [2024-03-01;]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791829", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "ip-dst", "uuid": "e97bbe38-bf23-4df2-80bd-147a554d60ec", "value": "91.92.137.164" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "URL contact\u00e9e par un code malveillant du MOA SANDWORM [2024-03-01;]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791830", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "url", "uuid": "b9ab9510-c591-483e-a5af-b5ab857da2ba", "value": "https://185.38.150.8:443/star/key" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "URL contact\u00e9e par un code malveillant du MOA SANDWORM [2024-03-01;]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791831", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "url", "uuid": "c6f8cd1f-e173-4022-b2c8-211b104c1588", "value": "http://178.250.188.114/ubuntu/focal" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "URL contact\u00e9e par un code malveillant du MOA SANDWORM [2024-03-01;]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791832", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "url", "uuid": "8fe79e5e-e74d-4c34-a510-69bf39dc408d", "value": "http://185.225.114.90/accept" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "URL contact\u00e9e par un code malveillant du MOA SANDWORM [2024-03-01;]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791833", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "url", "uuid": "700934ca-9b40-40f0-9cc8-cc57d8c09857", "value": "http://194.61.121.211/application" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "URL contact\u00e9e par un code malveillant du MOA SANDWORM [2024-03-01;]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791834", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "url", "uuid": "e1ca8bd5-be82-423c-8438-f466aaae811a", "value": "http://195.154.182.165/checkhealth" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "URL contact\u00e9e par un code malveillant du MOA SANDWORM [2024-03-01;]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791835", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "url", "uuid": "a6b21df3-4b77-40e9-8126-1e19ba709e3d", "value": "http://196.245.156.154/map/title" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "URL contact\u00e9e par un code malveillant du MOA SANDWORM [2024-03-01;]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791836", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "url", "uuid": "1d055b98-8cd4-4abe-9f96-e1c9aabc219b", "value": "http://91.92.137.164/json" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "URL contact\u00e9e par un code malveillant du MOA SANDWORM [2024-03-01;]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791837", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "url", "uuid": "8d2dc4bf-ae9e-4674-ba0e-f3bb7b7d6417", "value": "https://165.231.34.106/users/me" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "URL contact\u00e9e par un code malveillant du MOA SANDWORM [2024-03-01;]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791838", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "url", "uuid": "dd3e4e77-bd26-4e41-9c78-b88bf7796825", "value": "https://178.250.188.114/ubuntu/focal" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "URL contact\u00e9e par un code malveillant du MOA SANDWORM [2024-03-01;]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791839", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "url", "uuid": "798a8066-3625-4012-b54f-43789ff25013", "value": "https://185.225.114.90/accept" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "URL contact\u00e9e par un code malveillant du MOA SANDWORM [2024-03-01;]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791840", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "url", "uuid": "2a5691b0-880a-4a3b-9400-0b7dddc02b36", "value": "https://194.61.121.211/application" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "URL contact\u00e9e par un code malveillant du MOA SANDWORM [2024-03-01;]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791841", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "url", "uuid": "c9548fa7-c428-4941-986f-5952efec0038", "value": "https://195.154.182.165/checkhealth" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "URL contact\u00e9e par un code malveillant du MOA SANDWORM [2024-03-01;]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791842", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "url", "uuid": "d7b83aec-2a85-457d-96ce-c2db9b3dae8a", "value": "https://196.245.156.154/map/title" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Network activity", "comment": "URL contact\u00e9e par un code malveillant du MOA SANDWORM [2024-03-01;]", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791843", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "url", "uuid": "94ff227f-f915-4955-b5fe-f361b12c1271", "value": "https://91.92.137.164/json" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [ { "colour": "#000000", "exportable": true, "hide_tag": false, "id": "706", "name": "cert-fr:relevantTimespan=\"from\"", "numerical_value": null, "user_id": "0" } ], "category": "Other", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "0", "event_id": "18675", "id": "1802400", "object_id": "0", "object_relation": null, "sharing_group_id": "0", "timestamp": "1716902932", "to_ids": true, "type": "comment", "uuid": "aa6ff2f3-97bd-4013-a4dc-6e503ffbd114", "value": "2024-02-01" } ], "Galaxy": [], "Object": [ { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791844", "object_id": "116511", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "md5", "uuid": "a9d7e86a-bbd1-4b56-a96d-aad6cb21ad5b", "value": "4d45d7b60c10c66977f1a593aa36cea7" } ], "ObjectReference": [], "comment": "r.bat", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116511", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801722", "uuid": "53a67256-7655-4c1d-8130-780d2a39e4cc" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791845", "object_id": "116512", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "md5", "uuid": "035f528a-ebcf-4322-aaec-d1d24ba0da0c", "value": "d58153d94e6b9b331ad2b0f0ce51743a" } ], "ObjectReference": [], "comment": "r3.bat", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116512", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801722", "uuid": "121d437d-40c0-4ea1-9667-c95fca291469" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791846", "object_id": "116513", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "md5", "uuid": "ba89e277-4a5b-437e-a52d-dd397b2ecebe", "value": "9ddb6f9dca2d946de295d40af0f35948" } ], "ObjectReference": [], "comment": "k.bat", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116513", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801722", "uuid": "47cdaf8d-b990-4fcb-87d1-bbf9e38bcd0b" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791847", "object_id": "116514", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "md5", "uuid": "80e30ead-d1ef-4fd2-af1a-5f3364e73c6f", "value": "6b0b5c00362339fc5a912eae413b7f1f" } ], "ObjectReference": [], "comment": "r1.bat", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116514", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801722", "uuid": "71611844-e68e-461a-b388-0407369ea1cd" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "distribution": "5", "event_id": "18675", "id": "1791848", "object_id": "116515", "object_relation": "size-in-bytes", "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": false, "type": "size-in-bytes", "uuid": "8c552f17-1d40-4888-84c9-2adc48d7b964", "value": "153600" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791849", "object_id": "116515", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "md5", "uuid": "b0bb1d05-1b6b-42a5-9e67-7e0ee6c0d713", "value": "1938a3545517650824657fd09ce4ee16" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791850", "object_id": "116515", "object_relation": "sha1", "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "sha1", "uuid": "9a69f0fe-539e-4ef5-b7a3-9b3d49d1226c", "value": "25a3bb6c1d11fac492825178e5a4ca7c5a8c4910" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791851", "object_id": "116515", "object_relation": "sha256", "sharing_group_id": "0", "timestamp": "1713801722", "to_ids": true, "type": "sha256", "uuid": "88dcc38d-fbdc-46a4-9104-16c90f233169", "value": "602dbcf4008c585582d5e5d5c8ddb1932fdee07a14308e9cbf937904f31df1f7" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791852", "object_id": "116515", "object_relation": "sha512", "sharing_group_id": "0", "timestamp": "1713801723", "to_ids": true, "type": "sha512", "uuid": "fadd3d1a-f583-43f8-a6e4-a03e870c1e8f", "value": "8dcf8ba85b19e57074fba677bfa2aed646d531d7ebb0376cdecdb2a4247b2ea5a0188873f618033faedab764100c7e5db7001f8443136e5fb814ab39da5b6c26" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791853", "object_id": "116515", "object_relation": "ssdeep", "sharing_group_id": "0", "timestamp": "1713801723", "to_ids": true, "type": "ssdeep", "uuid": "35fe6a1e-54ca-4558-83a7-52cb4386635f", "value": "1536:bcmdSR7NBuNA124hAsuDBajpQZfCT4DbAkfe9j5w35GKQTgtxjsWCtd7p9dlw2Qn:4mQD0Ar7pyPA8e9u35GKckxStXlp4Il" } ], "ObjectReference": [], "comment": "jp.exe (JUICYPOTATONG)", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116515", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801722", "uuid": "f92e22c3-cadd-4dc5-a34c-78ba402b63fb" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "distribution": "5", "event_id": "18675", "id": "1791854", "object_id": "116516", "object_relation": "size-in-bytes", "sharing_group_id": "0", "timestamp": "1713801723", "to_ids": false, "type": "size-in-bytes", "uuid": "e5094515-3583-4086-87aa-1206e22d3a48", "value": "8192" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791855", "object_id": "116516", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801723", "to_ids": true, "type": "md5", "uuid": "061a1302-967d-491b-822d-4f5a8c57c6f4", "value": "cf85ceea940ae5f2cc0ee0a9fc23d5c8" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791856", "object_id": "116516", "object_relation": "sha1", "sharing_group_id": "0", "timestamp": "1713801723", "to_ids": true, "type": "sha1", "uuid": "91875fc4-baea-4d6e-a6cc-7252b3762454", "value": "79dfb63ee8ab5214072c2872623b54c592e7cf5c" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791857", "object_id": "116516", "object_relation": "sha256", "sharing_group_id": "0", "timestamp": "1713801723", "to_ids": true, "type": "sha256", "uuid": "d8406d60-2003-4c89-968a-eb0e20337d25", "value": "ce85f5bcd52c79582a66bc7ef3f11f4ac74e9cc9962551b5912ac6bfa78ea841" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791858", "object_id": "116516", "object_relation": "sha512", "sharing_group_id": "0", "timestamp": "1713801723", "to_ids": true, "type": "sha512", "uuid": "7f40bba6-11b0-4c5b-b795-9d82a5385f96", "value": "4e46c832ab3df1975c51c4c4f4fb69204c990fb419a1e4c2273f86faf7e3fb4af2f16b49c0b9d866b4024583779faa365b84041493d9fc32b94f7142a9a8efd4" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791859", "object_id": "116516", "object_relation": "ssdeep", "sharing_group_id": "0", "timestamp": "1713801723", "to_ids": true, "type": "ssdeep", "uuid": "b1e2be8f-df8f-431b-b47b-9efcdf8ec7ed", "value": "96:CGkcaU6SbbNsEMqQPLTRf7OuuhQnWXdVU/L98r:CGkRFSbZsEMjfRfyuuhvtVU/L98r" } ], "ObjectReference": [], "comment": "msd.exe (dump", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116516", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801723", "uuid": "3041d8ef-9578-489f-b332-ca16c49c9709" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791860", "object_id": "116517", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801723", "to_ids": true, "type": "md5", "uuid": "05e84830-37d4-44a2-b738-d72a4b460d6b", "value": "a048daae363e6cbe9a191d7189733ea4" } ], "ObjectReference": [], "comment": "rp.exe (ROTTENPOTATONG)", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116517", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801723", "uuid": "df8ed3f0-fc89-42a4-96ff-04cb5f399271" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791861", "object_id": "116518", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801723", "to_ids": true, "type": "md5", "uuid": "e328c9f5-a506-4766-87c3-a1ad97707cad", "value": "691c1fb1a80f1d4c502753d656e72c32" } ], "ObjectReference": [], "comment": "fp.exe", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116518", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801723", "uuid": "81e11e8d-8fb1-4975-beed-122b61aecdb8" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "distribution": "5", "event_id": "18675", "id": "1791862", "object_id": "116519", "object_relation": "size-in-bytes", "sharing_group_id": "0", "timestamp": "1713801723", "to_ids": false, "type": "size-in-bytes", "uuid": "cb1f9a33-3e6c-47d7-ae94-1d8bbc1a38c1", "value": "273408" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791863", "object_id": "116519", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801723", "to_ids": true, "type": "md5", "uuid": "ca4fb469-df8f-4dc0-a682-7a43800597f3", "value": "50b5582904fe34451f5cb2362e11cb24" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791864", "object_id": "116519", "object_relation": "sha1", "sharing_group_id": "0", "timestamp": "1713801723", "to_ids": true, "type": "sha1", "uuid": "fd70bad0-1602-4eb8-8e8a-f71002275443", "value": "80fb042b4a563efe058a71a647ea949148a56c7c" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791865", "object_id": "116519", "object_relation": "sha256", "sharing_group_id": "0", "timestamp": "1713801723", "to_ids": true, "type": "sha256", "uuid": "bba75a06-ee86-46a6-a69e-32d9cd660227", "value": "bd07fb1e9b4768e7202de6cc454c78c6891270af02085c51fce5539db1386c3f" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791866", "object_id": "116519", "object_relation": "sha512", "sharing_group_id": "0", "timestamp": "1713801723", "to_ids": true, "type": "sha512", "uuid": "cd1c0d3e-f075-4432-845c-71946451e739", "value": "a9aa52a247a7af68305877dcb4e787f01e0428291e1a1db75a1134233f8db0c375ca5fa3551e8b06c845d830d06d54348c6e42704409b8c41588f41437b5efc3" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791867", "object_id": "116519", "object_relation": "ssdeep", "sharing_group_id": "0", "timestamp": "1713801723", "to_ids": true, "type": "ssdeep", "uuid": "9b9dd763-d57d-4208-8449-be6455bfd099", "value": "6144:X0alEVRVmnwztE0b8VyvBK+jrdqhbyCz3jDjsoB:X3gREnw3bmIjshbhzz0oB" } ], "ObjectReference": [], "comment": "crdss.exe (QUEUESEED", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116519", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801723", "uuid": "8bec2451-2443-4700-b96a-d0a849bc7852" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "distribution": "5", "event_id": "18675", "id": "1791868", "object_id": "116520", "object_relation": "size-in-bytes", "sharing_group_id": "0", "timestamp": "1713801723", "to_ids": false, "type": "size-in-bytes", "uuid": "47eabd2f-5b44-424c-8fc8-e91316adc0fc", "value": "115200" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791869", "object_id": "116520", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801723", "to_ids": true, "type": "md5", "uuid": "c0b0b466-1641-4688-9ecd-f8067d208111", "value": "5294aaf2ff80547172ebb9e0bcb52e0f" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791870", "object_id": "116520", "object_relation": "sha1", "sharing_group_id": "0", "timestamp": "1713801723", "to_ids": true, "type": "sha1", "uuid": "ea2a88a2-ee45-46ab-bb2a-0344f534eb00", "value": "9bbde40cab30916b42e59208fbcc09affef525c1" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791871", "object_id": "116520", "object_relation": "sha256", "sharing_group_id": "0", "timestamp": "1713801723", "to_ids": true, "type": "sha256", "uuid": "3da1b245-7dd0-44f3-9dc6-8a7d9203bfc5", "value": "f30b9f6e913798ca52154c88725ee262a7bf92fe7caac1ae2e5147e457b9b08a" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791872", "object_id": "116520", "object_relation": "sha512", "sharing_group_id": "0", "timestamp": "1713801723", "to_ids": true, "type": "sha512", "uuid": "18892ca2-2383-4ff3-b259-23eb3011a45a", "value": "3144f35d991919ed6e81f7dcd9eaf10ac4cda2a0cf98ec0783952d69ac191c2e7b31b013b376911d8f5fd92af705c34264427ba091317123fe580383388a943e" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791873", "object_id": "116520", "object_relation": "ssdeep", "sharing_group_id": "0", "timestamp": "1713801723", "to_ids": true, "type": "ssdeep", "uuid": "10e72a8a-d951-4c40-a1a4-d1633f701903", "value": "3072:qz5whrkrtKfcuWp05oWunbBm8CRa+pnH:rrkrtRZ3NmTnH" } ], "ObjectReference": [], "comment": "lunose.wll (QUEUESEED)", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116520", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801723", "uuid": "56e8f1cf-3aa9-4212-b17a-3c056108f333" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791874", "object_id": "116521", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801723", "to_ids": true, "type": "md5", "uuid": "0ed4f04d-6be3-43c3-bf96-0ce828fcd267", "value": "58504fc65456f2d932173446e15b1799" } ], "ObjectReference": [], "comment": "hasuti.", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116521", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801723", "uuid": "559c1629-3441-4740-9bbf-f29b40055829" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791875", "object_id": "116522", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801723", "to_ids": true, "type": "md5", "uuid": "ff0717fc-e986-4f35-b533-456575e52716", "value": "12b4ee7b8a55046520dd1e1dd388bf47" } ], "ObjectReference": [], "comment": "ntuser.exe.exe (GOSSIPFLOW)", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116522", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801723", "uuid": "1d7cb07c-8a7d-4e46-85c8-dffd328fdb1d" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791876", "object_id": "116523", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801723", "to_ids": true, "type": "md5", "uuid": "28ba128d-d6cc-45dc-881d-6479921c7743", "value": "fb9e2fc411c17160b97ab5abfcef7c55" } ], "ObjectReference": [], "comment": "opf.sh", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116523", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801723", "uuid": "13916003-3280-4a4f-90f6-7780d69618e4" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791877", "object_id": "116524", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801723", "to_ids": true, "type": "md5", "uuid": "9ed9e2e9-7ea3-4e06-b1a1-e38c32320166", "value": "963ea514ef1b047e99cc90503f16b2c5" } ], "ObjectReference": [], "comment": "opf.sh", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116524", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801723", "uuid": "6807200a-97c8-4925-8ff9-739697c34c1f" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791878", "object_id": "116525", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801723", "to_ids": true, "type": "md5", "uuid": "b9aa402a-aba4-4f37-9212-726e36725491", "value": "b80d7cb828535ec1ef6e27e5d5f2d2cd" } ], "ObjectReference": [], "comment": "opf.sh", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116525", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801723", "uuid": "ec714c81-6ad8-4fe8-a144-8d3035474c85" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791879", "object_id": "116526", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801723", "to_ids": true, "type": "md5", "uuid": "8c76e0a0-45e9-4085-a3f7-815c2fe4909f", "value": "97608532187c8df1abb17156e4d99ee2" } ], "ObjectReference": [], "comment": "zkj.sh", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116526", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801723", "uuid": "9f0ce34b-80b0-47f4-9028-198eb861cb19" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791880", "object_id": "116527", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801723", "to_ids": true, "type": "md5", "uuid": "83c6a7b8-04be-44ef-afff-a198f7cb6f6c", "value": "9769f67f2189ac32307600a2387e28f7" } ], "ObjectReference": [], "comment": "fcm.sh", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116527", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801723", "uuid": "a1044e37-1d97-4a6a-af3e-a59aa47d8e36" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791881", "object_id": "116528", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801723", "to_ids": true, "type": "md5", "uuid": "cc7c5258-387f-408a-b828-2659cc8c7a57", "value": "09fe0ab36d7c16108456c60eb56a09c7" } ], "ObjectReference": [], "comment": "crm.sh", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116528", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801723", "uuid": "1bc8cfbd-8955-4ee0-a4f0-98c3c2315ae7" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791882", "object_id": "116529", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801723", "to_ids": true, "type": "md5", "uuid": "ebaa2ea7-413f-45b0-b9c8-557bbdc9bdfb", "value": "cdacfee7c1122983c9394de44493c542" } ], "ObjectReference": [], "comment": "vuu.sh", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116529", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801723", "uuid": "d62e1b2d-a494-4918-95ef-47817337a145" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791883", "object_id": "116530", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801724", "to_ids": true, "type": "md5", "uuid": "1edb9a91-124e-487a-b42e-a127fd475ab8", "value": "48656739fe14c0d70f11f65f67f86de5" } ], "ObjectReference": [], "comment": "ktc.sh", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116530", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801723", "uuid": "1b96d98b-135f-4572-93d0-535008e54859" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791884", "object_id": "116531", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801724", "to_ids": true, "type": "md5", "uuid": "ab2e37ad-59ad-41dd-acc4-e096c6d530bb", "value": "0d2363b184e35c0f005db9b40e2cd76c" } ], "ObjectReference": [], "comment": "wzo.sh", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116531", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801724", "uuid": "37ced304-f844-43ac-88e9-7b32e974e651" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791885", "object_id": "116532", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801724", "to_ids": true, "type": "md5", "uuid": "2c1f99ee-76e6-427a-8bbf-15ca853498a6", "value": "ed7620864bd720c8cf79e63ec4e679d6" } ], "ObjectReference": [], "comment": "nyc.sh", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116532", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801724", "uuid": "db17e305-816d-40e1-a297-edde327d5ff2" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791886", "object_id": "116533", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801724", "to_ids": true, "type": "md5", "uuid": "4c44008e-4087-476b-8bf3-48e361aaf714", "value": "be43644bdf06e8b740ce31c82f4f8bb2" } ], "ObjectReference": [], "comment": "kpv.sh", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116533", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801724", "uuid": "0d67d054-56fa-47f8-8cd4-d61222cf6bfd" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791887", "object_id": "116534", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801724", "to_ids": true, "type": "md5", "uuid": "f93d446a-3c1a-4a64-9f75-647cd1a66c48", "value": "82f7464ec5921ab94656bd4bff58708f" } ], "ObjectReference": [], "comment": "opf.sh", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116534", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801724", "uuid": "3446bb2e-0c17-4667-8c44-c0e6a87b1f46" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791888", "object_id": "116535", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801724", "to_ids": true, "type": "md5", "uuid": "bb1c759f-187e-44f3-8d95-e1778b0a5071", "value": "715fcd523ffceafb970679099b21c55e" } ], "ObjectReference": [], "comment": "psk.sh", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116535", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801724", "uuid": "e2f8b5e6-6dee-4995-a65d-f1267d597450" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791889", "object_id": "116536", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801724", "to_ids": true, "type": "md5", "uuid": "8d451d22-f1fa-4dfa-a117-04029c9117ee", "value": "5ff34c5296a5b170ba86f5a9c1222fca" } ], "ObjectReference": [], "comment": "bir.elf (BIASBOAT decrypted)", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116536", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801724", "uuid": "364613b6-239a-42df-993e-403c073deca0" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791890", "object_id": "116537", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801724", "to_ids": true, "type": "md5", "uuid": "74d0c62f-d477-4aa2-a895-cb575b46cf8a", "value": "4e23243e3e2ce4d234034fe163d4d095" } ], "ObjectReference": [], "comment": "eso.elf (BIASBOAT decrypted)", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116537", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801724", "uuid": "2e306a06-94a0-41a2-91d1-266b8d75c4fc" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791891", "object_id": "116538", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801724", "to_ids": true, "type": "md5", "uuid": "a7c640be-0e15-4155-8154-ba388ac40099", "value": "f05aec3e7ea30b93ea11e3cc8b998ca5" } ], "ObjectReference": [], "comment": "sdo.elf (BIASBOAT decrypted)", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116538", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801724", "uuid": "a8eb42f4-18fc-47e2-bef6-66da95ec0380" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791892", "object_id": "116539", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801724", "to_ids": true, "type": "md5", "uuid": "452773ba-d239-40a0-98b5-47735e492632", "value": "5fad6d88dc503f59adfa767e11985ff1" } ], "ObjectReference": [], "comment": "qqa.elf (BIASBOAT decrypted)", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116539", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801724", "uuid": "5c32c60a-0902-4a12-8f44-fe85d417d940" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791893", "object_id": "116540", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801724", "to_ids": true, "type": "md5", "uuid": "fc0afeed-637d-4390-b159-f620972860ac", "value": "3bee971f994f21779c3bc7e07f7029be" } ], "ObjectReference": [], "comment": "jjh.elf (BIASBOAT decrypted)", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116540", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801724", "uuid": "fdae23f9-f4df-48f9-ae4d-625e996e746c" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791894", "object_id": "116541", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801724", "to_ids": true, "type": "md5", "uuid": "a0e07933-fc5b-47e6-a313-f1aa65be4c90", "value": "0b0f1f38f85827b4753c0cfc95ee9dc9" } ], "ObjectReference": [], "comment": "lpq.elf (BIASBOAT decrypted)", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116541", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801724", "uuid": "5797d0b6-ded8-4ac0-8fd6-39464367fca0" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791895", "object_id": "116542", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801724", "to_ids": true, "type": "md5", "uuid": "88717bc9-8617-4565-882b-3f73f0672c53", "value": "2574bd88088e3437a183016e59302928" } ], "ObjectReference": [], "comment": "oat.elf (BIASBOAT decrypted)", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116542", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801724", "uuid": "9c32e51d-350c-45ea-bf6e-1c3389ee55c1" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791896", "object_id": "116543", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801724", "to_ids": true, "type": "md5", "uuid": "6da9212b-8836-4d30-b87f-007bfce6f2f9", "value": "31d5165a9d83c3ea370c2cd262fbba6f" } ], "ObjectReference": [], "comment": "rgp (LOADGRIP)", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116543", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801724", "uuid": "d3b38a85-8b2b-4533-b81e-29d002acd262" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791897", "object_id": "116544", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801724", "to_ids": true, "type": "md5", "uuid": "eb5ad5d9-a336-47c8-8ce7-f3ca373ecae6", "value": "087e6a5bf9bafac4b5c7fcc0ab0201f1" } ], "ObjectReference": [], "comment": "kkd (LOADGRIP)", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116544", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801724", "uuid": "9c0cf177-e0d1-426d-ac6c-cc2785e17d00" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791898", "object_id": "116545", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801724", "to_ids": true, "type": "md5", "uuid": "88cd8e48-0ccf-44ed-aabf-b540bb10d647", "value": "ea2161085f0c5a7a67ab245513ff5162" } ], "ObjectReference": [], "comment": "sxw (LOADGRIP)", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116545", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801724", "uuid": "07265d6e-883b-40a0-ad5b-87257982b196" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791899", "object_id": "116546", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801724", "to_ids": true, "type": "md5", "uuid": "a5bf11c5-e3f4-4dc2-af3b-ea960b085ad6", "value": "3d7c4521233b9d9dd6a150c26b5fcc68" } ], "ObjectReference": [], "comment": "bir", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116546", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801724", "uuid": "a8c97d54-1de7-43d4-bfb1-e7b7a242f4eb" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791900", "object_id": "116547", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801724", "to_ids": true, "type": "md5", "uuid": "6e33dcac-d477-4eaf-b46a-0d37da7d7953", "value": "8ab0e9251fe39a6d9ef36d0548476654" } ], "ObjectReference": [], "comment": "eso", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116547", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801724", "uuid": "adc8ab3b-1d2b-47ee-9cd5-c28cdc3a40dc" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791901", "object_id": "116548", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801724", "to_ids": true, "type": "md5", "uuid": "f11a9e2b-f16c-4a19-937d-6b61a0dda4ec", "value": "938f05807048a4e9b95bd4eee8c7c1a4" } ], "ObjectReference": [], "comment": "qqa", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116548", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801724", "uuid": "397eff86-0912-47b0-af93-8081f257a9f3" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791902", "object_id": "116549", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801724", "to_ids": true, "type": "md5", "uuid": "e21f1a76-a984-4298-a76e-c51b763c0f24", "value": "064c252bc5ee2395fb82aa7c0e599d3a" } ], "ObjectReference": [], "comment": "jjh", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116549", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801724", "uuid": "4fb21d79-dea0-433c-b998-51f066a11c7d" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791903", "object_id": "116550", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801724", "to_ids": true, "type": "md5", "uuid": "cca45691-f0b5-4e0a-94b2-a12ae3320087", "value": "fbe469cbe4c1a746619b0fad3c3647e7" } ], "ObjectReference": [], "comment": "sdo", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116550", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801724", "uuid": "72203a31-3079-48e7-a6c8-a0fd639c5d93" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791904", "object_id": "116551", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801724", "to_ids": true, "type": "md5", "uuid": "dbd624e0-b4c9-4d89-ac50-990906b69c8f", "value": "bdb21d4397f8e76923d6635504a5ada4" } ], "ObjectReference": [], "comment": "lpq", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116551", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801724", "uuid": "7a03017b-45e6-41bf-a10f-e390731e80b3" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791905", "object_id": "116552", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801724", "to_ids": true, "type": "md5", "uuid": "72df6c11-1694-4e78-963e-c4db9e8a7dcb", "value": "227b6198541178db566714c503dab36e" } ], "ObjectReference": [], "comment": "oat", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116552", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801724", "uuid": "15adea62-624e-482e-8334-608db725c06d" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791906", "object_id": "116553", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801724", "to_ids": true, "type": "md5", "uuid": "fc72f5fa-9de7-4ad5-8d35-6e567df28db5", "value": "dee2d8477084747edf37026dade1a827" } ], "ObjectReference": [], "comment": "vjr", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116553", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801724", "uuid": "8e15fbbb-16cf-4f7b-b64b-5c3ca646a851" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791907", "object_id": "116554", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801725", "to_ids": true, "type": "md5", "uuid": "0626e44c-a8b9-4521-95ed-9f47bc0c2dd2", "value": "7055dce07c716aa2429001dae97633fb" } ], "ObjectReference": [], "comment": "ajh", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116554", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801725", "uuid": "6a1a7493-c28f-4d88-a30d-d980f1f80a75" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791908", "object_id": "116555", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801725", "to_ids": true, "type": "md5", "uuid": "7004e17f-7f60-403c-b1e2-113a934ddd06", "value": "3e9022ce46fdccab4e40d1e01a8addb4" } ], "ObjectReference": [], "comment": "lws", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116555", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801725", "uuid": "9ea40fd0-9257-4bae-8404-24869252d6ed" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791909", "object_id": "116556", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801725", "to_ids": true, "type": "md5", "uuid": "cb421f00-8c21-46c4-b1e3-ef7333a98bd8", "value": "63ee45adf7d1fe4acd5b1632bbadd873" } ], "ObjectReference": [], "comment": "jpt", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116556", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801725", "uuid": "0830253d-07c3-4071-ab2d-04094fcc93c0" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791910", "object_id": "116557", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801725", "to_ids": true, "type": "md5", "uuid": "1a208f1b-a5cc-4a69-b71d-c9a25a9dcad1", "value": "b53e37e7a414872ec3d33d36c0bc1e81" } ], "ObjectReference": [], "comment": "bir", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116557", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801725", "uuid": "a435d987-7d9c-485f-a434-7c02ebd939e1" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791911", "object_id": "116558", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801725", "to_ids": true, "type": "md5", "uuid": "80a5e8dc-63ce-4235-839c-54f8ddd7858d", "value": "3eeebd90a6ea0d60b10eeac1da2d735c" } ], "ObjectReference": [], "comment": "ijs", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116558", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801725", "uuid": "82b9704f-5fe0-497c-905f-211a4736894e" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791912", "object_id": "116559", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801725", "to_ids": true, "type": "md5", "uuid": "18fe5cbd-4693-405f-a7d1-b0eb9b6f899c", "value": "d597d341ade717dd73a443172458fc86" } ], "ObjectReference": [], "comment": "meter.php (WEEVELY)", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116559", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801725", "uuid": "ca484ccd-09b7-4ec1-99f8-fd1f3faf2be9" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791913", "object_id": "116560", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801725", "to_ids": true, "type": "md5", "uuid": "75b4b595-2632-4476-89d8-e3c1d1631242", "value": "d59c63ddb629773aded9c85e472d67e3" } ], "ObjectReference": [], "comment": "_backup_dataform.php (WEEVELY)", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116560", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801725", "uuid": "42abbc41-9966-417a-9ce0-4ecd3008d107" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791914", "object_id": "116561", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801725", "to_ids": true, "type": "md5", "uuid": "0e916c39-0564-46c0-a095-d6987e39aed0", "value": "c998ac471420f48ec121050068972d47" } ], "ObjectReference": [], "comment": "man.php (WEEVELY)", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116561", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801725", "uuid": "077d7a1f-7b68-43e7-8b0c-86670aa7bbb5" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791915", "object_id": "116562", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801725", "to_ids": true, "type": "md5", "uuid": "9c4b7699-1c8e-40c2-8fad-de5f067e3271", "value": "b1c30d0f77386b42cefa8f10d0a98576" } ], "ObjectReference": [], "comment": "preload.php (WEEVELY)", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116562", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801725", "uuid": "9d5c1d44-cb10-4cfb-9964-e5a2e31eadfe" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791916", "object_id": "116563", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801725", "to_ids": true, "type": "md5", "uuid": "2f114b0b-10e0-435b-a6a8-148b0ff4d109", "value": "38f3f5ccb8906940282d0046583d318e" } ], "ObjectReference": [], "comment": "jspdf.php (WEEVELY)", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116563", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801725", "uuid": "00e7b186-8ecf-43bf-9e53-ddd105816a8b" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791917", "object_id": "116564", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801725", "to_ids": true, "type": "md5", "uuid": "ea770b76-445b-484e-9b82-9e44227d021f", "value": "cd439b12d10428db1d3365ea01361f48" } ], "ObjectReference": [], "comment": "getformdate.php (WEEVELY)", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116564", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801725", "uuid": "48e47959-8d48-49f4-8cc7-a97c736701ab" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791918", "object_id": "116565", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801725", "to_ids": true, "type": "md5", "uuid": "9ceea4cb-4328-46eb-9dc0-847217f2ccda", "value": "9ca2c77a5c2f8401dfb67dab34b648cf" } ], "ObjectReference": [], "comment": "getformdate.php (WEEVELY)", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116565", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801725", "uuid": "cb1dafa2-2e0d-48bc-9a3e-e928abc13dfd" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791919", "object_id": "116566", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801725", "to_ids": true, "type": "md5", "uuid": "f6850c57-3917-45ea-9337-43cae49debd5", "value": "0f359771ef52bf54b2196ce6f8a2642c" } ], "ObjectReference": [], "comment": "init.php (WEEVELY)", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116566", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801725", "uuid": "e38a413c-7e65-46bd-9f92-b8f7317f7fa7" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791920", "object_id": "116567", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801725", "to_ids": true, "type": "md5", "uuid": "12b5a231-4da7-467f-8346-208171c23be1", "value": "2cfc8ce15a56667074c4b0ca4a11d7f3" } ], "ObjectReference": [], "comment": "settings125.report.php (REGEORG.NEO)", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116567", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801725", "uuid": "e3388401-8eda-402a-8a0c-1b18e1037c05" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791921", "object_id": "116568", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801725", "to_ids": true, "type": "md5", "uuid": "4aed903b-d017-4b62-83f3-fad42259b296", "value": "108dddf7f1bc10fafbdc6f11c26b4c5a" } ], "ObjectReference": [], "comment": "water.php (REGEORG.NEO)", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116568", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801725", "uuid": "969b1fa6-b108-43c3-b38e-7d6c8aa9de1e" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791922", "object_id": "116569", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801725", "to_ids": true, "type": "md5", "uuid": "4780127b-73b4-4997-a67b-deb3d7a3706e", "value": "7f1712c4102e4cfadd1c44d9b29f139d" } ], "ObjectReference": [], "comment": "main.php (REGEORG.NEO)", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116569", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801725", "uuid": "ad1a9c80-ce54-4330-92d0-b9a631393d5b" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791923", "object_id": "116570", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801725", "to_ids": true, "type": "md5", "uuid": "fb68bbb8-1757-4f3c-a077-cd26a6cc2734", "value": "e64ec2535335ddd40e2fb53b53e5b5f9" } ], "ObjectReference": [], "comment": ".back_devices_.php (REGEORG.NEO)", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116570", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801725", "uuid": "4ad658f7-6901-44c5-b9e0-5b9bba0299eb" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791924", "object_id": "116571", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801725", "to_ids": true, "type": "md5", "uuid": "51ec9fc1-6e6c-4361-b0fd-ff18dc3bd0a1", "value": "7cf92e30acd55232a050fe1cf6eaf2be" } ], "ObjectReference": [], "comment": "report.php (REGEORG.NEO)", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116571", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801725", "uuid": "d5ea5552-8eb3-4a5a-9f40-8e6712931308" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791925", "object_id": "116572", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801725", "to_ids": true, "type": "md5", "uuid": "3f4906c7-421c-4e9e-99ca-8d3ca9809faa", "value": "4a7250531376bf48d06547d46a853d60" } ], "ObjectReference": [], "comment": "skm2.php (REGEORG.NEO)", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116572", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801725", "uuid": "76b8b9ae-0f7f-4ac7-83e0-25cdf135aba5" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791926", "object_id": "116573", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801725", "to_ids": true, "type": "md5", "uuid": "2167cb36-614e-4b31-9dd7-e3ea8a67b226", "value": "233ceffbb3119df13ceb72f01077c998" } ], "ObjectReference": [], "comment": "jobs.php (PIVOTNACCI)", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116573", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801725", "uuid": "ef8a2487-7b91-4e33-bb3d-24634c7d40c1" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791927", "object_id": "116574", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801725", "to_ids": true, "type": "md5", "uuid": "3a779a95-99f0-4954-b0f1-43b9330f239b", "value": "f8cf05346cba3ccd0cdb28c44e8036a1" } ], "ObjectReference": [], "comment": "fexport.php (PIVOTNACCI)", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116574", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801725", "uuid": "a85a4f18-9b48-4717-9ac0-2212c75fa1aa" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "distribution": "5", "event_id": "18675", "id": "1791928", "object_id": "116575", "object_relation": "size-in-bytes", "sharing_group_id": "0", "timestamp": "1713801725", "to_ids": false, "type": "size-in-bytes", "uuid": "bc816218-5265-47ca-ae81-ee99e8a498cf", "value": "8654848" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791929", "object_id": "116575", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801725", "to_ids": true, "type": "md5", "uuid": "ab8656d3-54d7-468f-9d12-a1f2b200daf4", "value": "ed8b9d38fe272f2692b47292e74a0352" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791930", "object_id": "116575", "object_relation": "sha1", "sharing_group_id": "0", "timestamp": "1713801725", "to_ids": true, "type": "sha1", "uuid": "fc8f6729-252b-4f3c-b171-944606722198", "value": "a1f2a3f401ad3d18a14030353a2975afaf8dac4d" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791931", "object_id": "116575", "object_relation": "sha256", "sharing_group_id": "0", "timestamp": "1713801725", "to_ids": true, "type": "sha256", "uuid": "9f211c56-f434-4ebb-ab26-c3ba5d87b3d2", "value": "cca9accd3c1554703ab11eb9c10b146d9d8a84ea165450003200de1ebbc2ac4c" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791932", "object_id": "116575", "object_relation": "sha512", "sharing_group_id": "0", "timestamp": "1713801725", "to_ids": true, "type": "sha512", "uuid": "824ce433-d4b8-47c6-9b80-fcd74351dc37", "value": "a7505a453a5a345b6eb8ccb2eaeafd83dd4f12da5003afa784c3a211017136489ce6649156ba2c76cb8d20122cb278feddf85db714b04ae7b09fa5e84f4a580c" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791933", "object_id": "116575", "object_relation": "ssdeep", "sharing_group_id": "0", "timestamp": "1713801725", "to_ids": true, "type": "ssdeep", "uuid": "f5ea4185-09ff-4652-9ff9-3fb2e308d5c8", "value": "98304:W9xfRkMV/rPn55hSjvLJIEVQNRt5uO/N9T:yOMV/rPIjJhU5Fl9T" } ], "ObjectReference": [], "comment": ".env (CHISEL)", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116575", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801725", "uuid": "9c3a82cc-739f-4295-aff4-98effbaf5f0b" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "distribution": "5", "event_id": "18675", "id": "1791934", "object_id": "116576", "object_relation": "size-in-bytes", "sharing_group_id": "0", "timestamp": "1713801725", "to_ids": false, "type": "size-in-bytes", "uuid": "a352b10d-a98f-4147-9c48-d5e855dafa66", "value": "8384512" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791935", "object_id": "116576", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801726", "to_ids": true, "type": "md5", "uuid": "519ff7ea-c760-464d-8fd4-30a9283d6649", "value": "2c1397f61325d3ab7eee97124ed8dcfa" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791936", "object_id": "116576", "object_relation": "sha1", "sharing_group_id": "0", "timestamp": "1713801726", "to_ids": true, "type": "sha1", "uuid": "715f3548-9b82-43c3-bbb6-6fba9a981b13", "value": "1157c3cbe87405459dc6523ea10bac1d553c379e" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791937", "object_id": "116576", "object_relation": "sha256", "sharing_group_id": "0", "timestamp": "1713801726", "to_ids": true, "type": "sha256", "uuid": "033323be-3ca3-4224-a640-efa05f9da277", "value": "c237f1a3f75b2759f66ec741448bb352e95e186a9a689f87c8641b44a13d878b" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791938", "object_id": "116576", "object_relation": "sha512", "sharing_group_id": "0", "timestamp": "1713801726", "to_ids": true, "type": "sha512", "uuid": "afbd6851-527b-4643-ae8c-545bbb820c07", "value": "58fb1ec4da3f901c57fe68ab492a5c16dacdc730a210edfd091e3246ad311ca4e290a9d7a3012224d930c73a402d3271d857396afa3e44f1b988f13b2f492cae" }, { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791939", "object_id": "116576", "object_relation": "ssdeep", "sharing_group_id": "0", "timestamp": "1713801726", "to_ids": true, "type": "ssdeep", "uuid": "d32db71f-042e-4277-b252-108e1693ff39", "value": "49152:1mn+Taif3rsfnUrb/T+vO90d7HjmAFd4A64nsfJrg8u0Y9kwvn1MO3i+p7GfOudW:xQHIM1hvkZdGAEgRlc6N7EweKWBOJg" } ], "ObjectReference": [], "comment": "oscada (CHISEL)", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116576", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801725", "uuid": "11534d59-58a7-4d81-a6fa-e0d3b19b87f3" }, { "Attribute": [ { "Galaxy": [], "ShadowAttribute": [], "Tag": [], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "18675", "id": "1791940", "object_id": "116577", "object_relation": "md5", "sharing_group_id": "0", "timestamp": "1713801726", "to_ids": true, "type": "md5", "uuid": "7e2deeb7-77cc-4a8e-8dfd-5b519d57d74b", "value": "88d7b461ac0c52f95a81090cf0903ebc" } ], "ObjectReference": [], "comment": "env.so (LIBPROCESSHIDER)", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "18675", "id": "116577", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "15", "timestamp": "1713801726", "uuid": "1e5abff3-fbfb-4154-b427-87dbaaa1ac4d" } ], "Org": { "id": "1", "name": "CERT-FR", "uuid": "56bdf779-46f8-4353-bdf9-2bb95bce2212" }, "Orgc": { "id": "1", "name": "CERT-FR", "uuid": "56bdf779-46f8-4353-bdf9-2bb95bce2212" }, "RelatedEvent": [], "ShadowAttribute": [], "Tag": [ { "colour": "#f89595", "exportable": true, "hide_tag": false, "id": "40", "name": "fr-classif:non-classifiees=\"NON-CLASSIFIEES\"", "numerical_value": null, "user_id": "0" }, { "colour": "#ffffff", "exportable": true, "hide_tag": false, "id": "9254", "name": "cert-fr:TLP=\"clear\"", "numerical_value": null, "user_id": "0" }, { "colour": "#ffffff", "exportable": true, "hide_tag": false, "id": "9253", "name": "cert-fr:PAP=\"clear\"", "numerical_value": null, "user_id": "0" }, { "colour": "#007350", "exportable": true, "hide_tag": false, "id": "473", "name": "cert-fr:fiabilite=\"Bonne\"", "numerical_value": null, "user_id": "0" }, { "colour": "#6d35f2", "exportable": true, "hide_tag": false, "id": "8735", "name": "misp-galaxy:threat-actor=\"IRIDIUM\"", "numerical_value": null, "user_id": "0" }, { "colour": "#0088cc", "exportable": true, "hide_tag": true, "id": "678", "name": "misp-galaxy:threat-actor=\"Sandworm\"", "numerical_value": null, "user_id": "0" }, { "colour": "#d4b075", "exportable": true, "hide_tag": true, "id": "1322", "name": "misp-galaxy:threat-actor=\"ELECTRUM\"", "numerical_value": null, "user_id": "0" }, { "colour": "#0088cc", "exportable": true, "hide_tag": true, "id": "234", "name": "misp-galaxy:threat-actor=\"TeleBots\"", "numerical_value": null, "user_id": "0" } ], "analysis": "0", "date": "2024-04-22", "disable_correlation": false, "distribution": "0", "extends_uuid": "", "id": "18675", "info": "[CERT-UA] UAC-0133 (Sandworm) plans for cyber sabotage on almost 20 objects of critical infrastructure of Ukraine", "locked": false, "org_id": "1", "orgc_id": "1", "proposal_email_lock": false, "publish_timestamp": "0", "published": false, "sharing_group_id": "0", "threat_level_id": "4", "timestamp": "1717581535", "uuid": "662689f9-8510-480e-9e08-e3de0abe1822" } }