chg: [threat-actor] jq all the things late in the night

This commit is contained in:
Alexandre Dulaunoy 2019-02-22 22:47:25 +01:00
parent d5df0d1064
commit f621b40263
Signed by: adulau
GPG key ID: 09E2CD4944E6CBCD

View file

@ -7544,14 +7544,14 @@
"value": "ANEL" "value": "ANEL"
}, },
{ {
"value": "BabyShark",
"uuid": "78ed653d-2d76-4a99-849e-1509e4573c32",
"description": "BabyShark is a relatively new malware. The earliest sample we found from open source repositories and our internal data sets was seen in November 2018. The malware is launched by executing the first stage HTA from a remote location, thus it can be delivered via different file types including PE files as well as malicious documents. It exfiltrates system information to C2 server, maintains persistence on the system, and waits for further instruction from the operator.", "description": "BabyShark is a relatively new malware. The earliest sample we found from open source repositories and our internal data sets was seen in November 2018. The malware is launched by executing the first stage HTA from a remote location, thus it can be delivered via different file types including PE files as well as malicious documents. It exfiltrates system information to C2 server, maintains persistence on the system, and waits for further instruction from the operator.",
"meta": { "meta": {
"refs": [ "refs": [
"https://unit42.paloaltonetworks.com/new-babyshark-malware-targets-u-s-national-security-think-tanks/" "https://unit42.paloaltonetworks.com/new-babyshark-malware-targets-u-s-national-security-think-tanks/"
] ]
} },
"uuid": "78ed653d-2d76-4a99-849e-1509e4573c32",
"value": "BabyShark"
} }
], ],
"version": 110 "version": 110