2023-04-21 13:25:09 +00:00
|
|
|
{
|
2023-12-14 14:30:15 +00:00
|
|
|
"Event": {
|
|
|
|
|
"analysis": "0",
|
|
|
|
|
"date": "2018-04-03",
|
|
|
|
|
"extends_uuid": "",
|
|
|
|
|
"info": "Crypren Ransomware",
|
|
|
|
|
"publish_timestamp": "1523867501",
|
|
|
|
|
"published": true,
|
|
|
|
|
"threat_level_id": "3",
|
|
|
|
|
"timestamp": "1523867322",
|
|
|
|
|
"uuid": "5ad0ae92-71c4-44bb-a47d-4c17950d210f",
|
|
|
|
|
"Orgc": {
|
|
|
|
|
"name": "CIRCL",
|
|
|
|
|
"uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"
|
|
|
|
|
},
|
|
|
|
|
"Tag": [
|
|
|
|
|
{
|
|
|
|
|
"colour": "#ffffff",
|
|
|
|
|
"local": "0",
|
|
|
|
|
"name": "tlp:white",
|
|
|
|
|
"relationship_type": ""
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"colour": "#002642",
|
|
|
|
|
"local": "0",
|
|
|
|
|
"name": "osint:source-type=\"microblog-post\"",
|
|
|
|
|
"relationship_type": ""
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"colour": "#2c4f00",
|
|
|
|
|
"local": "0",
|
|
|
|
|
"name": "malware_classification:malware-category=\"Ransomware\"",
|
|
|
|
|
"relationship_type": ""
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"colour": "#0088cc",
|
|
|
|
|
"local": "0",
|
|
|
|
|
"name": "misp-galaxy:ransomware=\"Crypren\"",
|
|
|
|
|
"relationship_type": ""
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1523863015",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "attachment",
|
|
|
|
|
"uuid": "5ad0b376-b2d8-4cf9-8575-4dd8950d210f",
|
|
|
|
|
"value": "DZ3XmsHW4AIBUMf.jpg"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"data": "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
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1523863015",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "attachment",
|
|
|
|
|
"uuid": "5ad0b383-5aac-473b-ac89-4b08950d210f",
|
|
|
|
|
"value": "DZ3XmsNV4AAofZW.jpg"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"timestamp": "1523627556",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "5ad0b624-62e4-45b4-ba09-4e48950d210f",
|
|
|
|
|
"value": "c290907b168b106296718bab628cbbe42281ab5f066de4653fb38ffc21989690"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"Object": [
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "Microblog post like a Twitter tweet or a post on a Facebook wall.",
|
|
|
|
|
"meta-category": "misc",
|
|
|
|
|
"name": "microblog",
|
|
|
|
|
"template_uuid": "8ec8c911-ddbe-4f5b-895b-fbff70c42a60",
|
|
|
|
|
"template_version": "4",
|
|
|
|
|
"timestamp": "1523626348",
|
|
|
|
|
"uuid": "5ad0b16c-97c8-4b8f-8cda-48f4950d210f",
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "post",
|
|
|
|
|
"timestamp": "1523626348",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "text",
|
|
|
|
|
"uuid": "5ad0b16c-6880-4382-8a21-41a9950d210f",
|
|
|
|
|
"value": "Crypren #Ransomware sample @malwrhunterteam @BleepinComputer https://www.virustotal.com/#/file/c290907b168b106296718bab628cbbe42281ab5f066de4653fb38ffc21989690/detection \u00e2\u20ac\u00a6 26/65 atm. First submitted: today."
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": true,
|
|
|
|
|
"object_relation": "type",
|
|
|
|
|
"timestamp": "1523626349",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "text",
|
|
|
|
|
"uuid": "5ad0b16d-bcc0-44e7-a4ca-41cd950d210f",
|
|
|
|
|
"value": "Twitter"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Network activity",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "url",
|
|
|
|
|
"timestamp": "1523626349",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "url",
|
|
|
|
|
"uuid": "5ad0b16d-fc24-45b2-9efc-450d950d210f",
|
|
|
|
|
"value": "https://twitter.com/leotpsc/status/981177718686466048"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "creation-date",
|
|
|
|
|
"timestamp": "1523626349",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "datetime",
|
|
|
|
|
"uuid": "5ad0b16d-6c90-4835-be9f-40fb950d210f",
|
|
|
|
|
"value": "2018-04-03T00:00:00"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "username",
|
|
|
|
|
"timestamp": "1523626349",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "text",
|
|
|
|
|
"uuid": "5ad0b16d-8524-4a2d-b4e4-40ae950d210f",
|
|
|
|
|
"value": "@leotpsc"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "File object describing a file with meta-information",
|
|
|
|
|
"meta-category": "file",
|
|
|
|
|
"name": "file",
|
|
|
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
|
|
|
|
"template_version": "7",
|
|
|
|
|
"timestamp": "1523863019",
|
|
|
|
|
"uuid": "a21432e3-570a-48ee-939f-d95a10ef6cff",
|
|
|
|
|
"ObjectReference": [
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"object_uuid": "a21432e3-570a-48ee-939f-d95a10ef6cff",
|
|
|
|
|
"referenced_uuid": "905ec2f4-8e70-493e-a2a0-496bd114bf8a",
|
2023-04-21 13:25:09 +00:00
|
|
|
"relationship_type": "analysed-with",
|
2023-12-14 14:30:15 +00:00
|
|
|
"timestamp": "1523863018",
|
|
|
|
|
"uuid": "5ad44dea-dc3c-4150-95f7-446002de0b81"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "md5",
|
|
|
|
|
"timestamp": "1523863016",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "md5",
|
|
|
|
|
"uuid": "5ad44de8-b0a4-4881-86c0-4cd902de0b81",
|
|
|
|
|
"value": "7e7ecaceec4e30e9e1aaec6ac31d6c5c"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha1",
|
|
|
|
|
"timestamp": "1523863016",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha1",
|
|
|
|
|
"uuid": "5ad44de8-667c-4614-9743-4d4102de0b81",
|
|
|
|
|
"value": "6190247aefb85720372101c9d69c87ee7dee21a1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Payload delivery",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "sha256",
|
|
|
|
|
"timestamp": "1523863017",
|
|
|
|
|
"to_ids": true,
|
|
|
|
|
"type": "sha256",
|
|
|
|
|
"uuid": "5ad44de9-043c-4040-a4bf-4e2a02de0b81",
|
|
|
|
|
"value": "c290907b168b106296718bab628cbbe42281ab5f066de4653fb38ffc21989690"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"description": "VirusTotal report",
|
|
|
|
|
"meta-category": "misc",
|
|
|
|
|
"name": "virustotal-report",
|
|
|
|
|
"template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
|
|
|
|
|
"template_version": "1",
|
|
|
|
|
"timestamp": "1523863017",
|
|
|
|
|
"uuid": "905ec2f4-8e70-493e-a2a0-496bd114bf8a",
|
|
|
|
|
"Attribute": [
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "last-submission",
|
|
|
|
|
"timestamp": "1523863017",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "datetime",
|
|
|
|
|
"uuid": "5ad44de9-47f8-4689-8076-437402de0b81",
|
|
|
|
|
"value": "2018-04-06T07:57:46"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "External analysis",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": false,
|
|
|
|
|
"object_relation": "permalink",
|
|
|
|
|
"timestamp": "1523863018",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "link",
|
|
|
|
|
"uuid": "5ad44dea-c004-4d20-b177-477102de0b81",
|
|
|
|
|
"value": "https://www.virustotal.com/file/c290907b168b106296718bab628cbbe42281ab5f066de4653fb38ffc21989690/analysis/1523001466/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"category": "Other",
|
|
|
|
|
"comment": "",
|
|
|
|
|
"deleted": false,
|
|
|
|
|
"disable_correlation": true,
|
|
|
|
|
"object_relation": "detection-ratio",
|
|
|
|
|
"timestamp": "1523863018",
|
|
|
|
|
"to_ids": false,
|
|
|
|
|
"type": "text",
|
|
|
|
|
"uuid": "5ad44dea-ad54-4946-b399-46b402de0b81",
|
|
|
|
|
"value": "46/65"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
2023-04-21 13:25:09 +00:00
|
|
|
]
|
2023-12-14 14:30:15 +00:00
|
|
|
}
|
2023-04-21 13:25:09 +00:00
|
|
|
}
|
