1 line
1.8 MiB
JSON
1 line
1.8 MiB
JSON
|
{"Event": {"info": "OSINT - HIDDEN COBRA \u2013 North Korean Trojan: Volgmer", "Tag": [{"colour": "#004646", "exportable": true, "name": "type:OSINT"}, {"colour": "#ffffff", "exportable": true, "name": "tlp:white"}, {"colour": "#002b4a", "exportable": true, "name": "osint:source-type=\"technical-report\""}, {"colour": "#13eb00", "exportable": true, "name": "misp-galaxy:threat-actor=\"Lazarus Group\""}, {"colour": "#0088cc", "exportable": true, "name": "misp-galaxy:tool=\"Volgmer\""}], "publish_timestamp": "0", "timestamp": "1511183700", "Object": [{"comment": "", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "uuid": "5a0ebb4a-6b6c-4af4-a678-46be950d210f", "sharing_group_id": "0", "timestamp": "1510914890", "description": "File object describing a file with meta-information", "template_version": "4", "Attribute": [{"comment": "", "category": "Payload delivery", "uuid": "5a0ebb4a-3d8c-4a8d-b34c-40d6950d210f", "timestamp": "1510914890", "to_ids": true, "value": "1ecd83ee7e4cfc8fed7ceb998e75b996", "disable_correlation": false, "object_relation": "md5", "type": "md5"}, {"comment": "", "category": "Other", "uuid": "5a0ebb4a-6768-4c0c-ba5e-4ed1950d210f", "timestamp": "1510914890", "to_ids": false, "value": "7.00782518905", "disable_correlation": false, "object_relation": "entropy", "type": "float"}, {"comment": "", "category": "Payload delivery", "uuid": "5a0ebb4a-0c90-4fbb-b447-49ba950d210f", "timestamp": "1510914890", "to_ids": true, "value": "1ecd83ee7e4cfc8fed7ceb998e75b996", "disable_correlation": false, "object_relation": "filename", "type": "filename"}, {"comment": "", "category": "Payload delivery", "uuid": "5a0ebb4a-c02c-48b7-a177-4873950d210f", "timestamp": "1510914890", "to_ids": true, "value": "eddb7228e2f8b7a99c4c32a743504ed3c16b5ef3", "disable_correlation": false, "object_relation": "sha1", "type": "sha1"}, {"comment": "", "category": "Payload delivery", "uuid": "5a0ebb4a-8ea8-46a4-804c-4614950d210f", "timestamp": "1510914890", "to_ids": true, "value": "3072:Kn13mR+uvEuCBlMclG4te7DFQstzN29ZfyXZM5QVj+XZ4dC:KneZvrRclG4mF5qZfyO2AJWC", "disable_correlation": false, "object_relation": "ssdeep", "type": "ssdeep"}, {"comment": "", "category": "Other", "uuid": "5a0ebb4a-c288-421c-bb0e-4711950d210f", "timestamp": "1510914890", "to_ids": false, "value": "131072", "disable_correlation": false, "object_relation": "size-in-bytes", "type": "size-in-bytes"}], "distribution": "5", "meta-category": "file", "name": "file"}, {"comment": "", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "uuid": "5a0ebfbe-2cd4-4955-a509-48cb950d210f", "sharing_group_id": "0", "timestamp": "1510916030", "description": "File object describing a file with meta-information", "template_version": "4", "Attribute": [{"comment": "", "category": "Payload delivery", "uuid": "5a0ebfbe-72d4-4880-8256-4fe0950d210f", "timestamp": "1510916030", "to_ids": true, "value": "81180bf9c7b282c6b8411f8f315bc422", "disable_correlation": false, "object_relation": "md5", "type": "md5"}, {"comment": "", "category": "Other", "uuid": "5a0ebfbe-2b40-4444-92fd-41c6950d210f", "timestamp": "1510916030", "to_ids": false, "value": "1.69870551288", "disable_correlation": false, "object_relation": "entropy", "type": "float"}, {"comment": "", "category": "Payload delivery", "uuid": "5a0ebfbe-2e38-48f1-84fe-4954950d210f", "timestamp": "1510916030", "to_ids": true, "value": "c9b703cbc692977dfa0fe7b82768974f17dbf309", "disable_correlation": false, "object_relation": "sha1", "type": "sha1"}, {"comment": "", "category": "Payload delivery", "uuid": "5a0ebfbe-56b0-4a3e-afe4-4281950d210f", "timestamp": "1510916030", "to_ids": true, "value": "3:3l/l/0P5BQCfqgFwylTDRv9tWpdYYg11MBMs5v\r\nY6Pw/l/lN:3tlMP5BQCigFwyFDlWzYn1FF6PQ/", "disable_correlation": false, "object_relation": "ssdeep", "type": "ssdeep"}, {"comment": "", "category": "Other", "uuid": "5a0ebfbe-9978-486d-9f18-4acc950d210f", "timestamp": "1510916030", "to_ids": false, "value": "546", "disable_correlation": false, "object_relation": "size-in-bytes", "type": "size-in-bytes"}], "distribution": "5", "meta-category": "f
|