{
  "Event": {
    "analysis": "2",
    "date": "2013-03-04",
    "extends_uuid": "",
    "info": "OSINT  In-Depth Look: APT Attack Tools of the Trade blog post by Trend Micro",
    "publish_timestamp": "1456152088",
    "published": true,
    "threat_level_id": "4",
    "timestamp": "1423152758",
    "uuid": "54d39595-f1e4-4823-8ad4-4ef2950d210b",
    "Orgc": {
      "name": "CthulhuSPRL.be",
      "uuid": "55f6ea5f-fd34-43b8-ac1d-40cb950d210f"
    },
    "Tag": [
      {
        "colour": "#004646",
        "local": false,
        "name": "type:OSINT",
        "relationship_type": ""
      },
      {
        "colour": "#33FF00",
        "local": false,
        "name": "tlp:green",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1423152548",
        "to_ids": false,
        "type": "link",
        "uuid": "54d395a4-dd6c-4a75-bbe5-f543950d210b",
        "value": "http://blog.trendmicro.com/trendlabs-security-intelligence/in-depth-look-apt-attack-tools-of-the-trade/"
      },
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1423152758",
        "to_ids": true,
        "type": "md5",
        "uuid": "54d39676-30e0-4236-80d8-49a3950d210b",
        "value": "1281478d409de246777472db99f58751"
      },
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1423152759",
        "to_ids": true,
        "type": "md5",
        "uuid": "54d39677-1c74-434d-94d2-49fb950d210b",
        "value": "1725e68e574e4b077f7d16f7fa30d984"
      },
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1423152759",
        "to_ids": true,
        "type": "md5",
        "uuid": "54d39677-f1dc-4d9b-92d8-4fea950d210b",
        "value": "2238453fd8225baff0d52bf64361b4fd"
      },
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1423152759",
        "to_ids": true,
        "type": "md5",
        "uuid": "54d39677-644c-4396-8ddc-40c4950d210b",
        "value": "286760651edfe6a8b34988004156b894"
      },
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1423152759",
        "to_ids": true,
        "type": "md5",
        "uuid": "54d39677-49f0-48b7-a6d0-4352950d210b",
        "value": "2edfe2b5238c8f49130f2a2f85e33c18"
      },
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1423152759",
        "to_ids": true,
        "type": "md5",
        "uuid": "54d39677-85e0-44b5-91ac-4757950d210b",
        "value": "2fdbb3ee0edc5e589ea727bbc2cd6d50"
      },
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1423152759",
        "to_ids": true,
        "type": "md5",
        "uuid": "54d39677-fec8-4f9c-874c-43d3950d210b",
        "value": "3548ea689e06a2599bdd1bdb909abb75"
      },
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1423152759",
        "to_ids": true,
        "type": "md5",
        "uuid": "54d39677-4a68-4415-92ab-4487950d210b",
        "value": "5065266fbad9362d5a329c5388627ea5"
      },
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1423152759",
        "to_ids": true,
        "type": "md5",
        "uuid": "54d39677-c128-425d-a16b-4a1f950d210b",
        "value": "57f222d8fbe0e290b4bf8eaa994ac641"
      },
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1423152759",
        "to_ids": true,
        "type": "md5",
        "uuid": "54d39677-4720-4662-9d9a-406b950d210b",
        "value": "69f5a988b4f3a3e5d300d489c9707cd6"
      },
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1423152759",
        "to_ids": true,
        "type": "md5",
        "uuid": "54d39677-18b4-4d85-81c2-44af950d210b",
        "value": "7e3bb01afb4c50da526d142fdf444688"
      },
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1423152759",
        "to_ids": true,
        "type": "md5",
        "uuid": "54d39677-4910-45eb-ac0d-48e6950d210b",
        "value": "875f3fc948c6534804a26176dcfb6af0"
      },
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1423152760",
        "to_ids": true,
        "type": "md5",
        "uuid": "54d39678-e114-4769-9063-459f950d210b",
        "value": "8ee24ad5b849877907304de566fb6dc6"
      },
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1423152760",
        "to_ids": true,
        "type": "md5",
        "uuid": "54d39678-66f0-4f58-b0ec-4172950d210b",
        "value": "9a7b9caae7b8b3a2b5d68e6880b6d0a4"
      },
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1423152760",
        "to_ids": true,
        "type": "md5",
        "uuid": "54d39678-aa5c-442c-9c26-4ec8950d210b",
        "value": "bd73c74819d8db09c645c738bbd3f5b9"
      },
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1423152760",
        "to_ids": true,
        "type": "md5",
        "uuid": "54d39678-b698-4788-96f3-40e2950d210b",
        "value": "c188ef350f1ee0e5fa6f6ef2e70231bc"
      },
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1423152760",
        "to_ids": true,
        "type": "md5",
        "uuid": "54d39678-10ac-4c17-a095-49e1950d210b",
        "value": "cea66497fa93db4b0dd33438a2a5d6bd"
      },
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1423152760",
        "to_ids": true,
        "type": "md5",
        "uuid": "54d39678-0cdc-4c2f-b40b-424e950d210b",
        "value": "dd2ef0d6487385839bbf7863fe450cc5"
      },
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1423152760",
        "to_ids": true,
        "type": "md5",
        "uuid": "54d39678-7d20-4535-aa63-4e00950d210b",
        "value": "df840ac27051d26555a109cc47d03fe4"
      },
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1423152760",
        "to_ids": true,
        "type": "md5",
        "uuid": "54d39678-53b8-4d51-b3a6-4df2950d210b",
        "value": "e0c14f98c4d4b995f00d49616bf9ba57"
      },
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1423152760",
        "to_ids": true,
        "type": "md5",
        "uuid": "54d39678-cca8-40e4-9710-4ce4950d210b",
        "value": "e189b5ce11618bb7880e9b09d53a588f"
      },
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1423152760",
        "to_ids": true,
        "type": "md5",
        "uuid": "54d39678-4ec8-48f3-9f77-47e5950d210b",
        "value": "eb36a5ef6a807fb7b2e2912e08b4882d"
      },
      {
        "category": "Artifacts dropped",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1423152760",
        "to_ids": true,
        "type": "md5",
        "uuid": "54d39678-fc50-491f-b9a7-4834950d210b",
        "value": "ede305561db6f7ca1783e0fc75d0db14"
      },
      {
        "category": "Artifacts dropped",
        "comment": "Automatically added (via 286760651edfe6a8b34988004156b894)",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1455837030",
        "to_ids": true,
        "type": "sha1",
        "uuid": "56c64f66-936c-44c7-8549-59a1950d210f",
        "value": "5cb1867737815d206a5351294ca7e2857c4b70e2"
      },
      {
        "category": "Artifacts dropped",
        "comment": "Automatically added (via 3548ea689e06a2599bdd1bdb909abb75)",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1455837032",
        "to_ids": true,
        "type": "sha1",
        "uuid": "56c64f68-913c-47cb-a358-4854950d210f",
        "value": "d08704b086136e9baaa771495dbaad29da0b8740"
      },
      {
        "category": "Artifacts dropped",
        "comment": "Automatically added (via 57f222d8fbe0e290b4bf8eaa994ac641)",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1455837035",
        "to_ids": true,
        "type": "sha1",
        "uuid": "56c64f6b-2690-4460-ac2c-599e950d210f",
        "value": "4dd91591facc744f1f9f56d613cd3f395f97f1a7"
      },
      {
        "category": "Artifacts dropped",
        "comment": "Automatically added (via 875f3fc948c6534804a26176dcfb6af0)",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1455837038",
        "to_ids": true,
        "type": "sha1",
        "uuid": "56c64f6e-cbc8-4088-b87a-4080950d210f",
        "value": "6334a139db1b1e8fa6f0ba6c39af8d18e0920c1e"
      },
      {
        "category": "Artifacts dropped",
        "comment": "Automatically added (via bd73c74819d8db09c645c738bbd3f5b9)",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1455837040",
        "to_ids": true,
        "type": "sha1",
        "uuid": "56c64f70-d63c-445d-bab7-4e13950d210f",
        "value": "84c76f122d3b983d8b853671df2f3a1b0744aa86"
      },
      {
        "category": "Artifacts dropped",
        "comment": "Automatically added (via cea66497fa93db4b0dd33438a2a5d6bd)",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1455837042",
        "to_ids": true,
        "type": "sha1",
        "uuid": "56c64f72-8648-4365-94b0-5f51950d210f",
        "value": "cf0de8ae9069f6ec956cbc3e3c75989f6f766b70"
      },
      {
        "category": "Artifacts dropped",
        "comment": "Automatically added (via df840ac27051d26555a109cc47d03fe4)",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1455837044",
        "to_ids": true,
        "type": "sha1",
        "uuid": "56c64f74-5634-484e-aa19-c650950d210f",
        "value": "bbe417463e04008bea15a5fe6d1dd5445a7d093c"
      },
      {
        "category": "Artifacts dropped",
        "comment": "Automatically added (via e0c14f98c4d4b995f00d49616bf9ba57)",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1455837045",
        "to_ids": true,
        "type": "sha1",
        "uuid": "56c64f75-3fb8-4726-9563-59a2950d210f",
        "value": "7e65e14529090c71c912e2848713345b4046b0b0"
      },
      {
        "category": "Artifacts dropped",
        "comment": "Automatically added (via e189b5ce11618bb7880e9b09d53a588f)",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1455837048",
        "to_ids": true,
        "type": "sha1",
        "uuid": "56c64f78-22dc-4fbc-9d25-599d950d210f",
        "value": "964f7144780aff59d48da184daa56b1704a86968"
      },
      {
        "category": "Artifacts dropped",
        "comment": "Automatically added (via ede305561db6f7ca1783e0fc75d0db14)",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1455837050",
        "to_ids": true,
        "type": "sha1",
        "uuid": "56c64f7a-e0f4-4dfb-bfcd-c652950d210f",
        "value": "ec181f0c537ae8547bd4b6b119c8e81ea0a63dd5"
      },
      {
        "category": "Artifacts dropped",
        "comment": "Automatically added (via 286760651edfe6a8b34988004156b894)",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1455837031",
        "to_ids": true,
        "type": "sha256",
        "uuid": "56c64f67-5840-4767-b90e-c653950d210f",
        "value": "dd707a21deb4620bad38bffe26d61d3612c066fc6a20921acf9405c32ff43f0c"
      },
      {
        "category": "Artifacts dropped",
        "comment": "Automatically added (via 3548ea689e06a2599bdd1bdb909abb75)",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1455837033",
        "to_ids": true,
        "type": "sha256",
        "uuid": "56c64f69-a410-4395-8f11-599c950d210f",
        "value": "8b8bdac5503b7778236294786fe2dc8be315267cfe2d88fd8f7004f22c6485f2"
      },
      {
        "category": "Artifacts dropped",
        "comment": "Automatically added (via 57f222d8fbe0e290b4bf8eaa994ac641)",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1455837037",
        "to_ids": true,
        "type": "sha256",
        "uuid": "56c64f6d-54b4-4d86-9c51-5f51950d210f",
        "value": "94cae63dcbabb71c5dd43f55fd09caeffdcd7628a02a112fb3cba36698ef72bc"
      },
      {
        "category": "Artifacts dropped",
        "comment": "Automatically added (via 875f3fc948c6534804a26176dcfb6af0)",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1455837038",
        "to_ids": true,
        "type": "sha256",
        "uuid": "56c64f6e-c81c-463e-8d51-c651950d210f",
        "value": "fb9e181d3ea6faa9d0e7431bfc8301fd66bcc8c3d66b26cef7036d117ee5fbb1"
      },
      {
        "category": "Artifacts dropped",
        "comment": "Automatically added (via bd73c74819d8db09c645c738bbd3f5b9)",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1455837041",
        "to_ids": true,
        "type": "sha256",
        "uuid": "56c64f71-26cc-4fd6-996a-59a3950d210f",
        "value": "3c0e383a6bb86d566e9af6325f4ebcf8b61f3e750c7f5ef899d49c274063073e"
      },
      {
        "category": "Artifacts dropped",
        "comment": "Automatically added (via cea66497fa93db4b0dd33438a2a5d6bd)",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1455837043",
        "to_ids": true,
        "type": "sha256",
        "uuid": "56c64f73-0400-4fa9-9e71-c652950d210f",
        "value": "8d236f04444f68b5ab136697da8fd79df8e6d50a5f379d63c41eaaeec19e52d5"
      },
      {
        "category": "Artifacts dropped",
        "comment": "Automatically added (via df840ac27051d26555a109cc47d03fe4)",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1455837044",
        "to_ids": true,
        "type": "sha256",
        "uuid": "56c64f74-43cc-466c-87b9-4abd950d210f",
        "value": "0164dc11b05124166f83da841b2cefbf91a8a1ee105820b416d9493263ebd222"
      },
      {
        "category": "Artifacts dropped",
        "comment": "Automatically added (via e0c14f98c4d4b995f00d49616bf9ba57)",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1455837047",
        "to_ids": true,
        "type": "sha256",
        "uuid": "56c64f77-19bc-449f-8464-464c950d210f",
        "value": "ed6ccf5ddf8d444a06206a8d2c8ba0a1dba8beb7e12cee63973ec21f618ae052"
      },
      {
        "category": "Artifacts dropped",
        "comment": "Automatically added (via e189b5ce11618bb7880e9b09d53a588f)",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1455837049",
        "to_ids": true,
        "type": "sha256",
        "uuid": "56c64f79-8d98-4c26-a22f-59a1950d210f",
        "value": "97d27e1225b472a63c88ac9cfb813019b72598b9dd2d70fe93f324f7d034fb95"
      },
      {
        "category": "Artifacts dropped",
        "comment": "Automatically added (via ede305561db6f7ca1783e0fc75d0db14)",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1455837050",
        "to_ids": true,
        "type": "sha256",
        "uuid": "56c64f7a-f244-4b73-b0d4-c654950d210f",
        "value": "0e379344a76a26bd3b12b3e7287a62746c62b380755a21fa3e09017b0bb2ba82"
      }
    ]
  }
}