2023-04-21 13:25:09 +00:00
{
2023-06-14 17:31:25 +00:00
"type" : "bundle" ,
"id" : "bundle--5e5709a4-8850-453e-9f11-275a0a0a020f" ,
"objects" : [
{
"type" : "identity" ,
"spec_version" : "2.1" ,
"id" : "identity--5e157d76-c92c-4acd-a54e-4a01950d210f" ,
"created" : "2021-05-24T10:04:30.000Z" ,
"modified" : "2021-05-24T10:04:30.000Z" ,
"name" : "laskowski-tech.com" ,
"identity_class" : "organization"
} ,
{
"type" : "report" ,
"spec_version" : "2.1" ,
"id" : "report--5e5709a4-8850-453e-9f11-275a0a0a020f" ,
"created_by_ref" : "identity--5e157d76-c92c-4acd-a54e-4a01950d210f" ,
"created" : "2021-05-24T10:04:30.000Z" ,
"modified" : "2021-05-24T10:04:30.000Z" ,
"name" : "Racoon Stealer" ,
"published" : "2020-07-02T05:50:25Z" ,
"object_refs" : [
"indicator--5e5868bc-0fe0-4390-80ab-d3b874656a8a" ,
"indicator--5e5868bc-1560-4807-9a76-d3b874656a8a" ,
"indicator--5e5868bc-0900-4886-9566-d3b874656a8a" ,
"indicator--5e5868bc-ea68-441d-a83a-d3b874656a8a" ,
"observed-data--5e5868bd-1fdc-4ee8-a3ea-d3d374656a8a" ,
"domain-name--5e5868bd-1fdc-4ee8-a3ea-d3d374656a8a" ,
"observed-data--5e5868fd-03b8-4af4-8b39-8add0a0a020f" ,
"url--5e5868fd-03b8-4af4-8b39-8add0a0a020f" ,
"indicator--5e5709b9-16d8-46eb-ab16-275d0a0a020f" ,
"indicator--5e5709ca-9564-4380-bee4-275a0a0a020f" ,
"indicator--5e570b34-1438-42ee-98d1-275a0a0a020f" ,
"indicator--5e586338-8820-458f-86a8-8add0a0a020f"
] ,
"labels" : [
"Threat-Report" ,
"misp:tool=\"MISP-STIX-Converter\"" ,
"keylogger/infostealer" ,
"racoon" ,
"misp-galaxy:mitre-attack-pattern=\"Spearphishing Attachment - T1193\"" ,
"misp-galaxy:mitre-attack-pattern=\"PowerShell - T1086\"" ,
"misp-galaxy:mitre-attack-pattern=\"Command-Line Interface - T1059\"" ,
"misp-galaxy:mitre-attack-pattern=\"Commonly Used Port - T1043\"" ,
"misp-galaxy:mitre-attack-pattern=\"Remote File Copy - T1105\"" ,
"misp-galaxy:mitre-attack-pattern=\"Exfiltration Over Command and Control Channel - T1041\"" ,
"misp-galaxy:mitre-attack-pattern=\"Data Compressed - T1002\"" ,
"misp-galaxy:mitre-attack-pattern=\"Automated Collection - T1119\"" ,
"misp-galaxy:mitre-attack-pattern=\"Data from Local System - T1005\""
] ,
"object_marking_refs" : [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
2023-04-21 13:25:09 +00:00
]
2023-06-14 17:31:25 +00:00
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5e5868bc-0fe0-4390-80ab-d3b874656a8a" ,
"created_by_ref" : "identity--5e157d76-c92c-4acd-a54e-4a01950d210f" ,
"created" : "2020-02-28T01:19:32.000Z" ,
"modified" : "2020-02-28T01:19:32.000Z" ,
"pattern" : "[url:value = 'http://35.228.134.218/gate/libs.zip']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2020-02-28T01:19:32Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Network activity"
}
] ,
"labels" : [
"misp:type=\"url\"" ,
"misp:category=\"Network activity\"" ,
"misp:to_ids=\"True\"" ,
"kill-chain:Delivery"
2023-04-21 13:25:09 +00:00
]
2023-06-14 17:31:25 +00:00
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5e5868bc-1560-4807-9a76-d3b874656a8a" ,
"created_by_ref" : "identity--5e157d76-c92c-4acd-a54e-4a01950d210f" ,
"created" : "2020-02-28T01:19:32.000Z" ,
"modified" : "2020-02-28T01:19:32.000Z" ,
"pattern" : "[url:value = 'http://35.228.134.218/gate/sqlite3.dll']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2020-02-28T01:19:32Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Network activity"
}
] ,
"labels" : [
"misp:type=\"url\"" ,
"misp:category=\"Network activity\"" ,
"misp:to_ids=\"True\"" ,
"kill-chain:Delivery"
2023-04-21 13:25:09 +00:00
]
2023-06-14 17:31:25 +00:00
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5e5868bc-0900-4886-9566-d3b874656a8a" ,
"created_by_ref" : "identity--5e157d76-c92c-4acd-a54e-4a01950d210f" ,
"created" : "2020-02-28T01:19:08.000Z" ,
"modified" : "2020-02-28T01:19:08.000Z" ,
"pattern" : "[url:value = 'http://35.228.134.218/gate/log.php']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2020-02-28T01:19:08Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Network activity"
}
] ,
"labels" : [
"misp:type=\"url\"" ,
"misp:category=\"Network activity\"" ,
"misp:to_ids=\"True\"" ,
"kill-chain:Command and Control" ,
"kill-chain:Actions on Objectives"
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5e5868bc-ea68-441d-a83a-d3b874656a8a" ,
"created_by_ref" : "identity--5e157d76-c92c-4acd-a54e-4a01950d210f" ,
"created" : "2020-02-28T01:19:19.000Z" ,
"modified" : "2020-02-28T01:19:19.000Z" ,
"pattern" : "[url:value = 'http://109.201.143.181/1B5F/raccc_1B5F.exe']" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2020-02-28T01:19:19Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "Network activity"
}
] ,
"labels" : [
"misp:type=\"url\"" ,
"misp:category=\"Network activity\"" ,
"misp:to_ids=\"True\"" ,
"kill-chain:Delivery"
]
} ,
{
"type" : "observed-data" ,
"spec_version" : "2.1" ,
"id" : "observed-data--5e5868bd-1fdc-4ee8-a3ea-d3d374656a8a" ,
"created_by_ref" : "identity--5e157d76-c92c-4acd-a54e-4a01950d210f" ,
"created" : "2020-02-28T01:11:25.000Z" ,
"modified" : "2020-02-28T01:11:25.000Z" ,
"first_observed" : "2020-02-28T01:11:25Z" ,
"last_observed" : "2020-02-28T01:11:25Z" ,
"number_observed" : 1 ,
"object_refs" : [
"domain-name--5e5868bd-1fdc-4ee8-a3ea-d3d374656a8a"
] ,
"labels" : [
"misp:type=\"hostname\"" ,
"misp:category=\"Network activity\""
]
} ,
{
"type" : "domain-name" ,
"spec_version" : "2.1" ,
"id" : "domain-name--5e5868bd-1fdc-4ee8-a3ea-d3d374656a8a" ,
"value" : "doc-0s-24-docs.googleusercontent.com"
} ,
{
"type" : "observed-data" ,
"spec_version" : "2.1" ,
"id" : "observed-data--5e5868fd-03b8-4af4-8b39-8add0a0a020f" ,
"created_by_ref" : "identity--5e157d76-c92c-4acd-a54e-4a01950d210f" ,
"created" : "2020-02-28T01:12:29.000Z" ,
"modified" : "2020-02-28T01:12:29.000Z" ,
"first_observed" : "2020-02-28T01:12:29Z" ,
"last_observed" : "2020-02-28T01:12:29Z" ,
"number_observed" : 1 ,
"object_refs" : [
"url--5e5868fd-03b8-4af4-8b39-8add0a0a020f"
] ,
"labels" : [
"misp:type=\"link\"" ,
"misp:category=\"External analysis\""
]
} ,
{
"type" : "url" ,
"spec_version" : "2.1" ,
"id" : "url--5e5868fd-03b8-4af4-8b39-8add0a0a020f" ,
"value" : "https://laskowski-tech.com/2020/02/28/definitely-racoon-this-time/"
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5e5709b9-16d8-46eb-ab16-275d0a0a020f" ,
"created_by_ref" : "identity--5e157d76-c92c-4acd-a54e-4a01950d210f" ,
"created" : "2020-02-28T01:18:50.000Z" ,
"modified" : "2020-02-28T01:18:50.000Z" ,
"pattern" : " [ f i l e : h a s h e s . M D 5 = ' 28 c 643 a 1 f 69 f 9 f c a 9481 a 4 b c 9 f 3 f 38 f 3 ' A N D f i l e : h a s h e s . S H A 1 = ' 904 a f e 59 f 6438848 b e 96 f d 26 f d e a b 0 1267070 d 25 ' A N D f i l e : h a s h e s . S H A 256 = ' 4478328408 c f 3 c 38 b 356 e e d 6e86171 a 5 c 879663 d 79867 c 2 b 55 e c 8 a 0 538 d 7588 d ' A N D f i l e : n a m e = ' r a c c c _ 1 B 5 F . e x e ' A N D f i l e : s i z e = ' 53248 ' A N D ( f i l e : c o n t e n t _ r e f . p a y l o a d _ b i n = ' U E s D B B Q A C Q A I A L c B W 1 D t R 9 L 8 a l I A A A D Q A A A g A B w A M j h j N j Q z Y T F m N j l m O W Z j Y T k 0 O D F h N G J j O W Y z Z j M 4 Z j N V V A k A A 7 k J V 165 C V d e d X g L A A E E I Q A A A A Q h A A A A i J y 2 M p P d Z z l Q u I X O S m G R k u u w a n L H r U C G 95 V Y p d Q 9 y i m 69 t P E 13 C n 8 J H L V 38 I g W w m K 3 P p B E 673 n h 1 r M 0 v z U K o a E W u z A L y 7 c 4 r E V A I 0 T 8 j k K U 3 i F g e x N u p D W D z 6 M 3 J 7 G W N b E M 6 z L I R y 4 l X U Z F F l s Z O Y I O Q f j D 2 D k q 5 p D s r I 3 c T K + p i q Z k X 4 Z u O Z p q 1 F a M P 0 f j D 0 G C 2 O K s 7 a u V 9e4 o L P 20 s M m 7 D u u o x 22 S Z h t g p P c A o D i b E e U t J N 5 V 8 f k N p / j 9 j 9 I q w q Y Q M d T 7 U h V N 9 d n A + s w 1 P w 3 Q j J S O 5 s D V d U t 2 y b / M 8 q c 0 K 2 T C r 3 R 6 / 0 X M K H n 1 L F I J u g m L O o W v n j O 1 T t q Y X D 2 y T E D J u n l 6 g I e F v c x n 3 Z z Y s D 4 q R m O B a 6 n z p E r G A z z X G E b M f N d Q z I C C E Z C v K O I Q J K q U 0 W d w 37 O / b G z P h G / B 7 L R q Q s Z P r R f e P w E K y X W o O y m h z o 3 f M h v H T W B 8 Z T v X 6 u 8 D w a z Q g + 6 C s f A V N 0 u L g C o B Q e / q y X b W B h t K 7 L d 37 o 8 z m e f Q c m x b c o D M o 2 E t 6 y 8 p 9 k j L S R k y 69 s T O W s l d 9 g 82 t G h E D W j x R V c f 8 M / u 6 o 5 c Z 7 u b F s x w y i b 5 B o R H / w W 8 q 1 A 9 i E I W F b L M D X q / m A G e S L I 9 J K 6 x H I r g v f E V z c K e L X k F i o v V f n O k q W 7 E Y z k E G a b b f H 5 q Z q K b 7e7 l U O h 5 m d L 45 I N k t P G W J j q h 5 O c i T K t + 5 w f Y J p u H c p G V f N Y R L O j d t P A 4 h O R Z S o y 42 z R K x h D q 4 T + Z t A N N P d R Q c d F z 7 r F G t n a 3 P b 6 h v O N E 6 n q l f 7 i m 91 K P / n u P z W j T 6 O O 38 a t B C J 87 m n Y T P 6 S K 77 T z K l t m G H i a O 31 G F 2 A U E X Y f 8 Q h P Z 4 P m B l Z G W T 1 H J e V x q w 2 N G T m x J F d R o t b B m G q n S s 3 n 8 w i 8 R G N 0 o r F U O H R R W Y c F n c E C J o U Y d y + + P g M Z 8 e h B o k v i t z + v M J + O d Y c p m j V X W z U n + v f B 9 y L V r f f b 6 r L 7 D k P Y 8 P 5 y R i y Y K y D x b Y L I 80 q W w u 5 n l p v V 225 I 9 t / o Y C Q I O T 9 G t W 0 v h S g e M P j N n P i O + J K Q l g b u F T m Q c i a c 0 2 F t M l l j f b c Y 5 H j v y t A P G t z L t y V 7 P K S i f C B m V N r F v P 4 R N 8 O 7 J w 0 T t Y H 0 32 z F k j 4 G U H 1 R 42 k o g Y c p V n j j 5 m e R 5 F h p L b k O 3 e Z G Z I 4 y n N W J W I U d L y U R P H A w x u Z + K 3 + + U w b A G D a P p x O + 0 1 I Z b s K H R T / G 4 u V F b b K H N f K U W i Q A k S I K d K K B 1 W i I m p 7 y Q c e l C x X A w B 5 / C a i P s 8 c n 3 A S H k m f n X o a A F 4 n k s K D 3 A m + 2 D 4 Z + g M D Y 1 f J o 10 z 31 m Q U m F E h Z P z W S 2 a c c 6 Y H 9 Z 3 z M w r o Z a + w o 1 d 9 g A W o P u P / j a f n k E 2 r r U b l b K / y z + o 1 c 5 Q 0 2 p R 243 Y b M 7 M 2 C l 5 y e r I g 8 E Q p G M F a n j a f g X P y V C v Z h k Z D 3 t X N 3 / O R P 2 H p L 1 l w b w z T N d V b A 0 q B P l Q + U W b L 1 u 8 T Y H p D N g e 3 B + B c t w w 6 s f c 5 w y V W h o I 0 2 S z o D s c g 8 w G b Z X S K 8 W X K x i L T x 2 Z Z F 7 s D 2 R + u G E A e Y e q H v y e k O K 6 S o 4 B + c H 8 T v 2 b a p H S q 7 w O 68 A t B T w Y v Z 4 + D T / v 2 N a O 5 r U R g 99 O F n r B z s h F K 58 p a N E C h v 3 P 4 u f X 2 z / 5 P 2 I G 8 n u 3 C j 3 T e G n X w a E 1 U V 3 O i t P u Q Y e F m n U 92 U f A x z 7 a r t V n C j 5 e V J 8 e X y R U Z h a 8 j 45 d s 0 b S 1 p 0 F W o 2 a s v 4 r s E w P V R o S a k p j B i y l o T z 0 A m Z g O w g J r Y S 39 + x R 2 Q Z D 3 U C J n y f B p d s 2 j i + N + B O S c 3 H M v z g 8 c 52 K c N 4 k 0 x 2 i z S 4 t 7 s V P I 8 I J O X Z B D p V s I R F e V X n V 12 K u k V s r Z w t V g M 6 G h R f a g n P K O b 9 S N x Q L w y 9 l L M j L j 32 X H L Y M G V g z y D q y 6 c V E G 6 S i 3 p 3 j H V Z N k X r R d g 7 Y z v j 4 L W u F A x r O d c C D A n 3 s f m d b W k h 7 D D 8 I x d c x / 9 U b X 5 B p E R d m D c 6 + d o S z 3 / v E c C G u P J B k + T Q O Q x i w T 2 g F S J A P l y i x U P P n o C / U V J G a c 1 l Y z R K 5 B c H b + X 7 Z G 3 f 3 f q W m 8 i G y y + + q b 8 p E A L i M e W x w V 7 Q 5551 q s i g D 0 A + V 6 O b D e l p 53 h 18 Y 362 R M L J 2 l C S j h l u K v c y N v Y o q 7 Y 3 h m j z B Y q I R 5 H g y u w 89 t 3 f P w 0 y Y l p s V Q 4 v 2 U M r S g m + t m g g 1 Q K h h i x + n f k h 3 J u h a w s W W W l p o Q Q 9 t Y r m O N l X C R / T 6 v C k Z T a E j h o O I F B r b 7 X m 75 C B q n Q a / 4 t G G 2 P G 6 t X s b t o U d N E u a e r c k o F b y O E 1 n i E m u U E S w 3 q b 0 Y C s 4 Q m q h V a G X b z 0 L G 8 j j F / 5 k 9 q W u O z J 43 q 4 v o o 0 I w p B 3 f R b C m 1 F V c h S T y f 0 y R h h z Z d 9 G v c Y P 6 v L K u / t C p I o R L h e l G 11 a r K b b 8 L 9 B k F J z y 2 v 9 O 4 F G S E g n 5 Z f d Z g N P x 2 y A z C s X N U x F h l 3 z Z c 1 o J F F L o A 6 j Y x w V B q L 4 B p E + k 0 k V V i 2 s O P v W T 9 x M F z u Q z l 5 + s u u h w g r 5 F x P k E Z / i I 0 J 96 i D i p v V b 6 e U 4 m I 7 d R 3 G / y z P D 0 U N I j L m b 24 m w J 1 R k n W 2 K 7 H d q S / t Z j Z p v + b D g Y o S C Z q c b t r b s e O t o S 4 a X e Y a z Z p S 36 F a c V b 2 m K R p O F b j A M A o V p R F X F + D j w D 0 G P y I R q J S L Y K U G l j 1 s r I G p A k 4 t G 3 Q 2 G F T Q f f N E M 1 P b l S 6 u W l R 6 + d n 51 V x 3 p 4 w B U L X J q Z n s y T N F R 30 j 4 Y w u y V o a c o 9 b / Y S j 6 r l 4 k k g 5 x t 91 b 7 b 9 Y W h a T V Y d v j H 8 N 5 y a i B q y X l 8 I h + F d J U h e D e Y 5 Y 4 s u L / k X u u y O Y o R r Z C L u q g 8 I i Q N 2 l I p f 97 W K 4 k z E G S M V / e O / k S q d w p q g p 5 R d d b 2329 K 4 Z r 5 G 0 k P N X M C v M l C t L 477 S F 8 q S t M E C y C Q K e b h g w h 2 u F N M E 9 V 8 x 5 D b B x j + t i s Y C u R k i l W + O X 32 c y z L N 9 B P l 5 i T B n i t z 4 N 773 A k x + U q d C q o //XtdLG42KyX/z2g4MVfZ652M78u4hnjjgmjoMt7+Cty7lccy7eQHjOBjrIPEdp5IgYbJYNrMJzzi1W2TSaK5GYwgrXu2O6n75jXr3rs68X8/5xfWcAx3a79ETQbczQerDREVjqKbIXHwVbHgTGHMkr+ZOa4AoC9DlQHXyx/LVBTVNjSZGBGFO2r8ErX8i8rcWfQeb4j2lg0IWD5AsnerrkKGqfRI7DnpDNkHigYyfqqyQnmZN6IVQfnIm9h5wsaYHyKGus4sDopgK348rDJDZIAK6ZkwCeFK/DFpWVoZSCSihiPuqVYVCx/zh+tqsuHF26VB176NVkE3XWC4t4Gyo/7m1nlicdyjCr2n8Fd1z8VEKs9BwiG8q1b3fHx00S4bzNz+bMbXNrYmlBQqFIEgJSZrurhm4WMF4SH/anrrCXBiaKHTzEzqNY9JU/6ou2Pz8mabypOhL9FhR5/uqgGv7QWpl3G2JIW6/i/z/gGt5hGIG3S27sPUwXxzwQG0RbwezqQKK2+yBiIsbgKP+qHf/B+PrHHQLgeSXg0pFYmQ6IbSC2hhgDJGcb+fqLDkl8oUL+gWVCZri7G2mJiZ1wf9IZPMGRH+sQXVKBXfHWlGynHkTDt5xcdm0i5Ckpj3dMp+QENsLGNmBf7mI+DJSz+sb7fTmft6iFoPpXy7uOHqZKZOGKowM0hMrVH+kadMrsf8BpJWUHREkGbIzNknvrn29QopM/UONzAzetcoL83HnqJ1o277hdZpC2SmUBXyLXW6hXAtjnw5BYNYcjB/l8+f63wqYKmz
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2020-02-28T01:18:50Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "file"
}
] ,
"labels" : [
"misp:name=\"file\"" ,
"misp:meta-category=\"file\"" ,
"misp:to_ids=\"True\"" ,
"kill-chain:Installation"
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5e5709ca-9564-4380-bee4-275a0a0a020f" ,
"created_by_ref" : "identity--5e157d76-c92c-4acd-a54e-4a01950d210f" ,
"created" : "2020-02-28T01:20:03.000Z" ,
"modified" : "2020-02-28T01:20:03.000Z" ,
"pattern" : "[file:hashes.MD5 = '6ffe0b3009316720968139c02ae06aa2' AND file:hashes.SHA1 = 'c6d85ab5723e37dc81f8662d066e6260f76cad0f' AND file:hashes.SHA256 = '40543a9b3f82e8321f21206489245abdd565d3d7c8bfaea9241506a4176a4504' AND file:name = 'hrjytrj.cmd' AND file:size = '20' AND (file:content_ref.payload_bin = 'UEsDBAoACQAAAMEBW1CeHkZWIAAAABQAAAAgABwANmZmZTBiMzAwOTMxNjcyMDk2ODEzOWMwMmFlMDZhYTJVVAkAA8oJV17KCVdedXgLAAEEIQAAAAQhAAAA69GQvedCA7qMU6mfCHy3d7XwGK8o2a10KDdYInTwxphQSwcInh5GViAAAAAUAAAAUEsDBAoACQAAAMEBW1B0OMEUFwAAAAsAAAAtABwANmZmZTBiMzAwOTMxNjcyMDk2ODEzOWMwMmFlMDZhYTIuZmlsZW5hbWUudHh0VVQJAAPKCVdeyglXXnV4CwABBCEAAAAEIQAAAI4XI0cNxSlmFbI9I7/LP+GVEZ6g6UgRUEsHCHQ4wRQXAAAACwAAAFBLAQIeAwoACQAAAMEBW1CeHkZWIAAAABQAAAAgABgAAAAAAAEAAACkgQAAAAA2ZmZlMGIzMDA5MzE2NzIwOTY4MTM5YzAyYWUwNmFhMlVUBQADyglXXnV4CwABBCEAAAAEIQAAAFBLAQIeAwoACQAAAMEBW1B0OMEUFwAAAAsAAAAtABgAAAAAAAEAAACkgYoAAAA2ZmZlMGIzMDA5MzE2NzIwOTY4MTM5YzAyYWUwNmFhMi5maWxlbmFtZS50eHRVVAUAA8oJV151eAsAAQQhAAAABCEAAABQSwUGAAAAAAIAAgDZAAAAGAEAAAAA' AND file:content_ref.x_misp_filename = 'hrjytrj.cmd' AND file:content_ref.hashes.MD5 = '6ffe0b3009316720968139c02ae06aa2' AND file:content_ref.mime_type = 'application/zip' AND file:content_ref.encryption_algorithm = 'mime-type-indicated' AND file:content_ref.decryption_key = 'infected')]" ,
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2020-02-28T01:20:03Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "file"
}
] ,
"labels" : [
"misp:name=\"file\"" ,
"misp:meta-category=\"file\"" ,
"misp:to_ids=\"True\"" ,
"kill-chain:Installation"
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5e570b34-1438-42ee-98d1-275a0a0a020f" ,
"created_by_ref" : "identity--5e157d76-c92c-4acd-a54e-4a01950d210f" ,
"created" : "2020-02-28T01:18:37.000Z" ,
"modified" : "2020-02-28T01:18:37.000Z" ,
"pattern" : " [ f i l e : h a s h e s . M D 5 = ' c 1847 a 0 4 d 79 f 0 c 84 a 88 d f c 2 f 556e5 a c b ' A N D f i l e : h a s h e s . S H A 1 = ' b 0 5 a 8 c f c 70 d 8 e a 97 d 1127 f e a f a c 6 c 40320 d 4 d d 52 ' A N D f i l e : h a s h e s . S H A 256 = ' f 0 0 2 c 889 d c 7 f f f e e 97 c f c 41 b 25 c 1 b 27 b b 65704 c a 0 c 71 a 320 a 9 f f 58 d 95 b a 4131 c ' A N D f i l e : n a m e = ' B A N K . d o c ' A N D f i l e : s i z e = ' 245354 ' A N D ( f i l e : c o n t e n t _ r e f . p a y l o a d _ b i n = ' U E s D B B Q A C Q A I A I I C W 1 C I u 8 l a b V 0 A A G q + A w A g A B w A Y z E 4 N D d h M D R k N z l m M G M 4 N G E 4 O G R m Y z J m N T U 2 Z T V h Y 2 J V V A k A A z Q L V 140 C 1 d e d X g L A A E E I Q A A A A Q h A A A A Y l x p C i K f L c P L 3 L O K 2 k m R m Y O x M n Y e s X a q Z w L g l u 7 Q 3 x a u 0 E o 4 J Z 5 Q 6 C M P x F F 9 j G 70 E B x t 12 A E U C 5 A V R X a C D p 24 k B Z N 0 x A n T T w b S y 8 a b N E H u s e W C c N a q w r C 9 P R m X P j A / 93 u G 2 z Q 61 B 3 X X C h E + C g 3 J m D 1 C f E 7 k + p r f Z + e Z 3 M v t S m x J f p c l j R E y D i u / d e q B M q A R / N R y y 9 T S z I i T n a x B 3 n J x 9e1 G 5 F a k e P e N r n / p + 9 I 3 m 7 / h 9 x L h H Y g z g t w e E k U g b 0 Y a f g d H n F r c e y G 63 o 32 x a 1 H f n I i X t S V P W w O l 6 Y F d t z 4 b l P n g i L I / Z W v f K 3 K e W x Y N N k Y j M m x + t 0 X Y n N i A / K + 65 + t D c C 7 M M l l 9 a p w r G i P c j p w m 97 h B e S v E i p P b O m P 8 O w E a u k t 7 W l 1 a v G K z 7 y H 3 B G F L x a c w f l d J N k o X b e G j h 5 H L y 0 Y z f X t G Z z t g 80 B N R P u F C s s P F f G N + + L I M z G 3 U j s b k x n e r Z b H 9 N X T I 0 s 9 i l X m 8 W J 8 U Z a l a O i e 6 D x F F g 9 r g y z 7 T 7 u 68 p a m 3 + G m K 8 e g Z 3 x P 6 / x + D / t Q x w C n 7 X 1 X m 64 s K z D u M 7 M x o S Z I P 0 j W h / c z Z v v C a V p q z h Z i p T o B g U / u K N z L z d Z Z o y d y T R n + z a n d N f w q i 8 R n R 4 Z y l k m d L s y / 2 D E v 9 i N B v V D y b 3 u U p v R e 0 q l g Y v 8 r M O Y f J 5 Q T 6 s Q 3 x E 5 P 9 n p G G f N 2 T I c l u 20 s 4 / a j l p + p n 1 a f R C y A f a B 7 q J F x s X 3 x a u k r B c K D W G L 7 I R e E f k l R c 4 R x e B D P P 3 x 4 p L H e r z P W w T 3 p b A c 7 S O F q M T + M N N V u 7 k j b + Q O L + b v I s 4 m 49 u D t 54 J p v x 5 l v q c g w 0 J j i 8 H d c y X N b u W a m U I 3 N C P + O r C h 1 j m X X S K R 0 X t d s s r a L 7 o 7e3 J R g S 615 R R M z K w i F P J P Q r c R S b v I W x l t 7 b 1 G o Y d E Y 9 E l 2 Y v H e u C D g F f C u k u + k n x 5 j K d 4 R 3 i j h z L 8 w x P 43 u o X e s W F H 2 u X Q B J Z q k i W s O S / g W e V H u A M h 5 P X z w 3 P n f F l i i k A z 8 l f t J 9 A Y o t X 5 z 5 N p j y s T c B n Y g c + R 4 u U f s a o z 0 6 d y z C 6 K 46 J c s / N 0 + / n D K s p c R Z Y m B t N 9 s K 8 D + 7 j v N D k i v 4 t H n Z a d L L i 0 6 v 8 C 5 B 8 Q K f n m U y 9 j 5 B 1 G T E f 237 k 95 / d e 29 w b I 1 u s S 42 a C 95 c G U a S o 4 t m 53 d R s g P M q y A r E q V E K s 27 X 0 e l y Y D w V o Q 0 P T L N m n / J r E h v E z p u / 72 z L 9 P P d b P N j W 0 2 X a v K U k Y G h E 5 Y a 1 / y + D e l x e V Z J x c o i R J V S n I / 48 Y L T i v a 3 h X Z R Q c 9 C d Q 1 J m I 7 Y w i B P / N o j x Y U g K f O K w O b + t n 4 d t 98 U Y W 7 D 6 W Z v B h C 9 J G F 3 t T 8 R 7 F c w p 0 P E A q F n 7 L W r h n F h J s R I Q W P / X x Z x B + 0 L l v R X o C A / x H r s P 286 W x H K 2 X S F n V c t c q c b q S + H N X 8 M L H L T 4 l 3 q E u e k T R J 82 c N + o p 2 / 7 x E K 6 i x F m 4 b n A X z R m 4 N 3 I b M s B 8 D F h 80 k 6 v T C P X F e M X q a u 81 E M W 6 k c 0 / u z C M M y g 9 p 1 T G R 3 y m G 0 K z u z G y 1 W U y 0 i J U l 89 i Q + T Z D 5 q K I i w 5 T E 5 A M u y 2 o 7 j A h U Z 9 J R Q F U T n 4 / k G + Q J 9 V B y + 2 r U w X I 9 p y 4 K h 8 W Z u C / y N c 3 s K 28 e S w x O j Z V M T 3 F B I t j D N S 3 Z c 5 q U b z + I S 9 e e X h O O E g h n T B T x W M F H n Y n z M Q T q 6 t u e Z M v V O U D m q L J 3 q w + Y P e 1 y M d 49 O F D i P 3 h 45 T o 3 + 5 b 15 E n + w u I 7 Z 1 W 3 w c q 2 r 0 n 9 G D T 6 t 551 O 9 h H w v M F Z T N A 8 F s k / 9 K z K Q F K 6e5 k x E S P Y E e j / d c n S 6 U b c 5 n s R 3 n c C p Q T q j V 33 v 7 k w 5 V E 9 m N 19 T s j + v A S S w i / f 7 v 2 J 9 i r S u s q 3 l B 4761 i l l J O N b P 8E0 X h f y t 68 Z k G U 4 G L J m 304 j x m R h M 4 m k w C S V v F H 2 H 0 v q c g B F t n I x a D f j c L L 0 x Z X 5 Y W C P d A D + H D E 0 + N v 7 C B n T Z H Z s A 1 + G 5 l r U F A W X n y R F E j e H V u / K F X 9 / i f O F d + R f b R g f s A 3 P u n L H P m 6 i E b x l 9 r T Q z r p V J l w 92 R R R a I L h e z i N k r m 5 H t 31 C M S p V k S t Y p K 2 / N C X B l C Q i i t J k r B f U q X D 1 Q Q x r c n B 6 Y X i J E R m O B Q h v C Y U W a + P O z l C 9 f Z 1 H N y C l f Q Q Q L J s m q u s o S y U X R D F 2 i I t M f N O R p e k M U 5 N / 6 P z 6 Z G + n T m / y e V H e k R A 4 y Q s / I K n b o W V 0 U Q U g X a c L H S / P I L b Q a Z Q t U Y K p b U b k 6 s z S z 1 L 9 j 7 r 5 r 8 h 6 V X p / r B E k d 9 M A U 9 x h A s l C / k c O A 79 p B j 6 c Y s Q 7 r 3 M 4999 n 6 D 7 P f q v F 0 y S h N X e 0 I T b r L S M u o F Y R 0 r G D S c J k g p j Y L v V q 653 B T L z A 5 T k F p N J P 7 P s f f 6 u V L H q m W D h F 79 k e S F 4 Z N O L k 49 t L Y N R N i o c g h 2 L q Y Q U f q d k M Z Y U o a j y l G g 0 A r z u D Y Q l I D M b w j 8 R 9 o P q L R M u T y 37 W N F w H o f W J O s / D 6 G u R v N O u Y 9 K n k 1 z V g c 8 T H M 1 W 8 q b j m d H N Q P H / c t V 1 r A R M Q X Q I Z l N t g 5 s + K a L P g 7 o B v 6 B L p i 52 I f 3 Y g N X K U B L O y 6 d 4 q a 9 n e 5 a D a G / Q 7 L U Y 6 O v s O / M 161 m T 61 A 5 v P y X k Q h + 9 F r Y O M u Q B H Q k R 9 s b a 2 c D w h X P 1 D + s c 4 d u G N f Z z t y S T p F h b h B I Z z 5 A G 3 l k j O z w a m p d j H N z V S e U Z u V i j D A F s 47 V P S Z 8 H l R r M n a z e I j V Z a S w b j T a O H I / p e / C I S r 76 y s U T M C h L j i l V o w J j 0 l + D T e b X a q x l U L 40 W Q C d h 8 s a m 4 j b L X + V X d U 5 b Q l W x c k K w l 0 e O / d O y 9 P 6 W z 7 x C a U x J s K W p z u h o X 6 M U T L r M A T u N E s M K p G q V Y n G w d b x q J i c d B D T A f D w S F W 5 s h h v y A 2 q S U U a r W U k r P o 5 t o e 78 t B 4 Z 2 K M 7 d c Y 8 Z L y h 6 b J X I E S t o T i h B j P K s A r O 5 / 6 u f v p z n 1 n a Y 8 F g K f / M J 5 v Z q m p s q w E 8 M T 1 L K W Z h Z H h z U e M 4 l K p K i B i X y x e 1 S d U N j T U F P v 2 G L b 6 i E Q e t Y O c O G w 6 F a 5 T Q O l a k o 1 p / R w N 1 p n I S S a 7 n q G g y 4 P r 0 i h l v m 8 y + V t E o E I i V T x A 6 B u H D h F Q O m q / n D o Y p U T e H V Q 3 A Z V M X t g m E s Y c / r i + i a P r j v E B I 7 I K E d x a v 0 O K v 0 A T V V 62 j c S W 1 k R i b B 1 L E D V Z j H E i R v Z K z c v q f L p J L 2 T u v F Q R a a Y 37 U i 4 I G I p r x t Q 62 K K Q e E b c / Q c U 855 P e k 4 X V s g 4 C 3 p i w 0 U B D 843 M x g 9 I A V U v U K 4 S Z N W 5 x Z b Z k p U i 8 N O c b s k 3 B R s + M / 5 P u 3 A / G A W r P E 1 q t M F n 9 m W N x Y R U q m H B Z v I j 8 e w 2 Z 9 S a 4 b w O N q e K J V O R Q 9 q e Z o X M O T Q v y l g i 74 M Z f V O K T v t t Z G c U K i 3 O X L x A L Y G x d J + v x g D 2 B 1 Z b S A z C j u q S J 6 x r 2 H G E 9 S w + 7 p O 3 u i m r + E 3 d 0 m D X Q t 6 P 5 d m 0 F g 37 u 9 g v 6 Z E I Z 6 v L W w q m b w I I d e x 6 X x f 4 G q b o Q 7 f 4 d g F d 0 7 O 2 N 4 B C g 9 o 9 P c B l M f z C R + T 3 r t R D o P X G 9 N a l R J E t M R h M 7 I o 97 C 5 S N U D / Q 0 F 8 B a X 4 h 9 V 7 D I 8 R s 0 a 7 B 9 L y Z 1 j U V Y c T F a 38 I U E N w I E R 2 K f / T 5 d 3 C m a j b o A o n a c i Q A F J m 6 f a 23 b Q o 9 H 6 K 36 N 8 T 6 P n 37 Z d Y I l A J w K G / h 376 R b I j q v Z y D z h 7 k Y P x l m j V 4 X Z d 4 b R a A L 5 h k + V t r c N 2 J h 11 O a s h K d 8 j Z W u K w 84 u B 7 u M k 2 r 7 z K 4 y f 9 q T T p S q V j p U m d r x 7 D E 7 n N M y m 5 w u R f I f l J e o o K K J A u G o J l j E i u 6 v x T W l 5 y u r 2 L e
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2020-02-28T01:18:37Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "file"
}
] ,
"labels" : [
"misp:name=\"file\"" ,
"misp:meta-category=\"file\"" ,
"misp:to_ids=\"True\"" ,
"kill-chain:Delivery"
]
} ,
{
"type" : "indicator" ,
"spec_version" : "2.1" ,
"id" : "indicator--5e586338-8820-458f-86a8-8add0a0a020f" ,
"created_by_ref" : "identity--5e157d76-c92c-4acd-a54e-4a01950d210f" ,
"created" : "2020-02-28T00:47:52.000Z" ,
"modified" : "2020-02-28T00:47:52.000Z" ,
"pattern" : " [ f i l e : h a s h e s . M D 5 = ' 1117 c d 347 d 0 9 c 43 c 1 f 2079439056 a d a 3 ' A N D f i l e : h a s h e s . S H A 1 = ' 93 c 2 c e 5 f c 4924314318554e131 c f b c d 119 f 0 1 a b 6 ' A N D f i l e : h a s h e s . S H A 256 = ' 4 c f a d a 7 e b 51 a 6 c 0 c b 26283 f 9 c 86784 b 2 b 2587 c 59 c 46 a 5 d 3 d c 0 f 0 6 c a d 2 c 55 e e 97 ' A N D f i l e : n a m e = ' l i b s . z i p ' A N D f i l e : s i z e = ' 2828315 ' A N D ( f i l e : c o n t e n t _ r e f . p a y l o a d _ b i n = ' U E s D B B Q A C Q A I A P o F X F B + v U Y I J + I q A B s o K w A g A B w A M T E x N 2 N k M z Q 3 Z D A 5 Y z Q z Y z F m M j A 3 O T Q z O T A 1 N m F k Y T N V V A k A A z h j W F 44 Y 1 h e d X g L A A E E I Q A A A A Q h A A A A P m v W v R R e P o F 5 D i J T T 8 A 8 k 4 D f m 0 I U x V T x j S 5 U X 0 6 E F 1 i 1 O u O c C 8 q S 32 J 4 K k 9 O j N p Z O d v G W n L Z o U B f o 3 R 77 U K I B i a E I h n Q F s b t Z U o M w N z r 4 T 1 P 6 J l X E 8 y 8 a H i L 1 N 4 G 57 e s 1 B p J V K 9 S F i + J P t c x C Q a 0 Y g y g i P a 7 k Y x c c L W v K Q 4 E U S x I D J l b / P p X M + a 34 F M + l + 2 L a v x R o w F w E Y d I x l F q v l A 0 8 y g x d Q A 8 v j A R 9 L 3 D C G C D z 351 T T F d Q 219 I z S m Y K g t S u r S v x 2 O j p X 5 z f W N j X h L B H b J 2 C + K N W T H 8 t Z T O U r 4 r S V y B 5 c X 7 F a c m M 9 l H 1 z u Z u 9 Y z v i G N A e q / E N z Y 0 O 0 1 x o P r Z / 7 H g x O d a N O X S N M I e w 7 V j B e Y c u + B D B e W h M 9 Z u Q N + 4 w f q y M S H K l b T 3 i m D l z + L G T R U C Y H W k h r f x o T p I 2 e K r R l J l o c N G S + y u z K I 7 m S E g Q 41 k Q e 2 f S A 44 o Z V 6 i X 3 R L J 45 t E 0 s 4 w j 7 U w v f Y L T D b 1 q H o F 0 i Q G T d o 28 H N 93 s u u U 0 t B D Y 3 c N q L X f j r 1 d x O X + s E A p F I 0 t w q j F o E G V x u d B m x E N W U q G z W 3 G a 0 t w s / G 5 h S x f d U U H + P r l / X Q 3 m K w l a + 0 H Q N w P 3 S s w k P Z b E c j 9 Z s y B 2 J s 0 + V N Z Q 8 u q b f R b O j z V C 0 s Z Z m j s c Z n L K Z c R d H 3 m 1 G 3 g 88 b z 4 p a B A L o N u V f U R X 1 D + j / 324617 B h N 0 / z N d 4 q Y 7 C w k M + 2 Q K L w g D R 9 H C B G U l + N 6 B 2 H 8 Y p S n p D D o h j D l P 7 p D Q 6 x R A 1e+8 P 4 w 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
"pattern_type" : "stix" ,
"pattern_version" : "2.1" ,
"valid_from" : "2020-02-28T00:47:52Z" ,
"kill_chain_phases" : [
{
"kill_chain_name" : "misp-category" ,
"phase_name" : "file"
}
] ,
"labels" : [
"misp:name=\"file\"" ,
"misp:meta-category=\"file\"" ,
"misp:to_ids=\"True\""
]
} ,
{
"type" : "marking-definition" ,
"spec_version" : "2.1" ,
"id" : "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ,
"created" : "2017-01-20T00:00:00.000Z" ,
"definition_type" : "tlp" ,
"name" : "TLP:WHITE" ,
"definition" : {
"tlp" : "white"
}
}
2023-04-21 13:25:09 +00:00
]
}
