{ "Event": { "analysis": "2", "date": "2013-03-04", "extends_uuid": "", "info": "OSINT In-Depth Look: APT Attack Tools of the Trade blog post by Trend Micro", "publish_timestamp": "1456152088", "published": true, "threat_level_id": "4", "timestamp": "1423152758", "uuid": "54d39595-f1e4-4823-8ad4-4ef2950d210b", "Orgc": { "name": "CthulhuSPRL.be", "uuid": "55f6ea5f-fd34-43b8-ac1d-40cb950d210f" }, "Tag": [ { "colour": "#004646", "local": "0", "name": "type:OSINT", "relationship_type": "" }, { "colour": "#33FF00", "local": "0", "name": "tlp:green", "relationship_type": "" } ], "Attribute": [ { "category": "External analysis", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1423152548", "to_ids": false, "type": "link", "uuid": "54d395a4-dd6c-4a75-bbe5-f543950d210b", "value": "http://blog.trendmicro.com/trendlabs-security-intelligence/in-depth-look-apt-attack-tools-of-the-trade/" }, { "category": "Artifacts dropped", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1423152758", "to_ids": true, "type": "md5", "uuid": "54d39676-30e0-4236-80d8-49a3950d210b", "value": "1281478d409de246777472db99f58751" }, { "category": "Artifacts dropped", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1423152759", "to_ids": true, "type": "md5", "uuid": "54d39677-1c74-434d-94d2-49fb950d210b", "value": "1725e68e574e4b077f7d16f7fa30d984" }, { "category": "Artifacts dropped", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1423152759", "to_ids": true, "type": "md5", "uuid": "54d39677-f1dc-4d9b-92d8-4fea950d210b", "value": "2238453fd8225baff0d52bf64361b4fd" }, { "category": "Artifacts dropped", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1423152759", "to_ids": true, "type": "md5", "uuid": "54d39677-644c-4396-8ddc-40c4950d210b", "value": "286760651edfe6a8b34988004156b894" }, { "category": "Artifacts dropped", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1423152759", "to_ids": true, "type": "md5", "uuid": "54d39677-49f0-48b7-a6d0-4352950d210b", "value": "2edfe2b5238c8f49130f2a2f85e33c18" }, { "category": "Artifacts dropped", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1423152759", "to_ids": true, "type": "md5", "uuid": "54d39677-85e0-44b5-91ac-4757950d210b", "value": "2fdbb3ee0edc5e589ea727bbc2cd6d50" }, { "category": "Artifacts dropped", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1423152759", "to_ids": true, "type": "md5", "uuid": "54d39677-fec8-4f9c-874c-43d3950d210b", "value": "3548ea689e06a2599bdd1bdb909abb75" }, { "category": "Artifacts dropped", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1423152759", "to_ids": true, "type": "md5", "uuid": "54d39677-4a68-4415-92ab-4487950d210b", "value": "5065266fbad9362d5a329c5388627ea5" }, { "category": "Artifacts dropped", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1423152759", "to_ids": true, "type": "md5", "uuid": "54d39677-c128-425d-a16b-4a1f950d210b", "value": "57f222d8fbe0e290b4bf8eaa994ac641" }, { "category": "Artifacts dropped", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1423152759", "to_ids": true, "type": "md5", "uuid": "54d39677-4720-4662-9d9a-406b950d210b", "value": "69f5a988b4f3a3e5d300d489c9707cd6" }, { "category": "Artifacts dropped", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1423152759", "to_ids": true, "type": "md5", "uuid": "54d39677-18b4-4d85-81c2-44af950d210b", "value": "7e3bb01afb4c50da526d142fdf444688" }, { "category": "Artifacts dropped", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1423152759", "to_ids": true, "type": "md5", "uuid": "54d39677-4910-45eb-ac0d-48e6950d210b", "value": "875f3fc948c6534804a26176dcfb6af0" }, { "category": "Artifacts dropped", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1423152760", "to_ids": true, "type": "md5", "uuid": "54d39678-e114-4769-9063-459f950d210b", "value": "8ee24ad5b849877907304de566fb6dc6" }, { "category": "Artifacts dropped", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1423152760", "to_ids": true, "type": "md5", "uuid": "54d39678-66f0-4f58-b0ec-4172950d210b", "value": "9a7b9caae7b8b3a2b5d68e6880b6d0a4" }, { "category": "Artifacts dropped", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1423152760", "to_ids": true, "type": "md5", "uuid": "54d39678-aa5c-442c-9c26-4ec8950d210b", "value": "bd73c74819d8db09c645c738bbd3f5b9" }, { "category": "Artifacts dropped", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1423152760", "to_ids": true, "type": "md5", "uuid": "54d39678-b698-4788-96f3-40e2950d210b", "value": "c188ef350f1ee0e5fa6f6ef2e70231bc" }, { "category": "Artifacts dropped", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1423152760", "to_ids": true, "type": "md5", "uuid": "54d39678-10ac-4c17-a095-49e1950d210b", "value": "cea66497fa93db4b0dd33438a2a5d6bd" }, { "category": "Artifacts dropped", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1423152760", "to_ids": true, "type": "md5", "uuid": "54d39678-0cdc-4c2f-b40b-424e950d210b", "value": "dd2ef0d6487385839bbf7863fe450cc5" }, { "category": "Artifacts dropped", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1423152760", "to_ids": true, "type": "md5", "uuid": "54d39678-7d20-4535-aa63-4e00950d210b", "value": "df840ac27051d26555a109cc47d03fe4" }, { "category": "Artifacts dropped", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1423152760", "to_ids": true, "type": "md5", "uuid": "54d39678-53b8-4d51-b3a6-4df2950d210b", "value": "e0c14f98c4d4b995f00d49616bf9ba57" }, { "category": "Artifacts dropped", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1423152760", "to_ids": true, "type": "md5", "uuid": "54d39678-cca8-40e4-9710-4ce4950d210b", "value": "e189b5ce11618bb7880e9b09d53a588f" }, { "category": "Artifacts dropped", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1423152760", "to_ids": true, "type": "md5", "uuid": "54d39678-4ec8-48f3-9f77-47e5950d210b", "value": "eb36a5ef6a807fb7b2e2912e08b4882d" }, { "category": "Artifacts dropped", "comment": "", "deleted": false, "disable_correlation": false, "timestamp": "1423152760", "to_ids": true, "type": "md5", "uuid": "54d39678-fc50-491f-b9a7-4834950d210b", "value": "ede305561db6f7ca1783e0fc75d0db14" }, { "category": "Artifacts dropped", "comment": "Automatically added (via 286760651edfe6a8b34988004156b894)", "deleted": false, "disable_correlation": false, "timestamp": "1455837030", "to_ids": true, "type": "sha1", "uuid": "56c64f66-936c-44c7-8549-59a1950d210f", "value": "5cb1867737815d206a5351294ca7e2857c4b70e2" }, { "category": "Artifacts dropped", "comment": "Automatically added (via 3548ea689e06a2599bdd1bdb909abb75)", "deleted": false, "disable_correlation": false, "timestamp": "1455837032", "to_ids": true, "type": "sha1", "uuid": "56c64f68-913c-47cb-a358-4854950d210f", "value": "d08704b086136e9baaa771495dbaad29da0b8740" }, { "category": "Artifacts dropped", "comment": "Automatically added (via 57f222d8fbe0e290b4bf8eaa994ac641)", "deleted": false, "disable_correlation": false, "timestamp": "1455837035", "to_ids": true, "type": "sha1", "uuid": "56c64f6b-2690-4460-ac2c-599e950d210f", "value": "4dd91591facc744f1f9f56d613cd3f395f97f1a7" }, { "category": "Artifacts dropped", "comment": "Automatically added (via 875f3fc948c6534804a26176dcfb6af0)", "deleted": false, "disable_correlation": false, "timestamp": "1455837038", "to_ids": true, "type": "sha1", "uuid": "56c64f6e-cbc8-4088-b87a-4080950d210f", "value": "6334a139db1b1e8fa6f0ba6c39af8d18e0920c1e" }, { "category": "Artifacts dropped", "comment": "Automatically added (via bd73c74819d8db09c645c738bbd3f5b9)", "deleted": false, "disable_correlation": false, "timestamp": "1455837040", "to_ids": true, "type": "sha1", "uuid": "56c64f70-d63c-445d-bab7-4e13950d210f", "value": "84c76f122d3b983d8b853671df2f3a1b0744aa86" }, { "category": "Artifacts dropped", "comment": "Automatically added (via cea66497fa93db4b0dd33438a2a5d6bd)", "deleted": false, "disable_correlation": false, "timestamp": "1455837042", "to_ids": true, "type": "sha1", "uuid": "56c64f72-8648-4365-94b0-5f51950d210f", "value": "cf0de8ae9069f6ec956cbc3e3c75989f6f766b70" }, { "category": "Artifacts dropped", "comment": "Automatically added (via df840ac27051d26555a109cc47d03fe4)", "deleted": false, "disable_correlation": false, "timestamp": "1455837044", "to_ids": true, "type": "sha1", "uuid": "56c64f74-5634-484e-aa19-c650950d210f", "value": "bbe417463e04008bea15a5fe6d1dd5445a7d093c" }, { "category": "Artifacts dropped", "comment": "Automatically added (via e0c14f98c4d4b995f00d49616bf9ba57)", "deleted": false, "disable_correlation": false, "timestamp": "1455837045", "to_ids": true, "type": "sha1", "uuid": "56c64f75-3fb8-4726-9563-59a2950d210f", "value": "7e65e14529090c71c912e2848713345b4046b0b0" }, { "category": "Artifacts dropped", "comment": "Automatically added (via e189b5ce11618bb7880e9b09d53a588f)", "deleted": false, "disable_correlation": false, "timestamp": "1455837048", "to_ids": true, "type": "sha1", "uuid": "56c64f78-22dc-4fbc-9d25-599d950d210f", "value": "964f7144780aff59d48da184daa56b1704a86968" }, { "category": "Artifacts dropped", "comment": "Automatically added (via ede305561db6f7ca1783e0fc75d0db14)", "deleted": false, "disable_correlation": false, "timestamp": "1455837050", "to_ids": true, "type": "sha1", "uuid": "56c64f7a-e0f4-4dfb-bfcd-c652950d210f", "value": "ec181f0c537ae8547bd4b6b119c8e81ea0a63dd5" }, { "category": "Artifacts dropped", "comment": "Automatically added (via 286760651edfe6a8b34988004156b894)", "deleted": false, "disable_correlation": false, "timestamp": "1455837031", "to_ids": true, "type": "sha256", "uuid": "56c64f67-5840-4767-b90e-c653950d210f", "value": "dd707a21deb4620bad38bffe26d61d3612c066fc6a20921acf9405c32ff43f0c" }, { "category": "Artifacts dropped", "comment": "Automatically added (via 3548ea689e06a2599bdd1bdb909abb75)", "deleted": false, "disable_correlation": false, "timestamp": "1455837033", "to_ids": true, "type": "sha256", "uuid": "56c64f69-a410-4395-8f11-599c950d210f", "value": "8b8bdac5503b7778236294786fe2dc8be315267cfe2d88fd8f7004f22c6485f2" }, { "category": "Artifacts dropped", "comment": "Automatically added (via 57f222d8fbe0e290b4bf8eaa994ac641)", "deleted": false, "disable_correlation": false, "timestamp": "1455837037", "to_ids": true, "type": "sha256", "uuid": "56c64f6d-54b4-4d86-9c51-5f51950d210f", "value": "94cae63dcbabb71c5dd43f55fd09caeffdcd7628a02a112fb3cba36698ef72bc" }, { "category": "Artifacts dropped", "comment": "Automatically added (via 875f3fc948c6534804a26176dcfb6af0)", "deleted": false, "disable_correlation": false, "timestamp": "1455837038", "to_ids": true, "type": "sha256", "uuid": "56c64f6e-c81c-463e-8d51-c651950d210f", "value": "fb9e181d3ea6faa9d0e7431bfc8301fd66bcc8c3d66b26cef7036d117ee5fbb1" }, { "category": "Artifacts dropped", "comment": "Automatically added (via bd73c74819d8db09c645c738bbd3f5b9)", "deleted": false, "disable_correlation": false, "timestamp": "1455837041", "to_ids": true, "type": "sha256", "uuid": "56c64f71-26cc-4fd6-996a-59a3950d210f", "value": "3c0e383a6bb86d566e9af6325f4ebcf8b61f3e750c7f5ef899d49c274063073e" }, { "category": "Artifacts dropped", "comment": "Automatically added (via cea66497fa93db4b0dd33438a2a5d6bd)", "deleted": false, "disable_correlation": false, "timestamp": "1455837043", "to_ids": true, "type": "sha256", "uuid": "56c64f73-0400-4fa9-9e71-c652950d210f", "value": "8d236f04444f68b5ab136697da8fd79df8e6d50a5f379d63c41eaaeec19e52d5" }, { "category": "Artifacts dropped", "comment": "Automatically added (via df840ac27051d26555a109cc47d03fe4)", "deleted": false, "disable_correlation": false, "timestamp": "1455837044", "to_ids": true, "type": "sha256", "uuid": "56c64f74-43cc-466c-87b9-4abd950d210f", "value": "0164dc11b05124166f83da841b2cefbf91a8a1ee105820b416d9493263ebd222" }, { "category": "Artifacts dropped", "comment": "Automatically added (via e0c14f98c4d4b995f00d49616bf9ba57)", "deleted": false, "disable_correlation": false, "timestamp": "1455837047", "to_ids": true, "type": "sha256", "uuid": "56c64f77-19bc-449f-8464-464c950d210f", "value": "ed6ccf5ddf8d444a06206a8d2c8ba0a1dba8beb7e12cee63973ec21f618ae052" }, { "category": "Artifacts dropped", "comment": "Automatically added (via e189b5ce11618bb7880e9b09d53a588f)", "deleted": false, "disable_correlation": false, "timestamp": "1455837049", "to_ids": true, "type": "sha256", "uuid": "56c64f79-8d98-4c26-a22f-59a1950d210f", "value": "97d27e1225b472a63c88ac9cfb813019b72598b9dd2d70fe93f324f7d034fb95" }, { "category": "Artifacts dropped", "comment": "Automatically added (via ede305561db6f7ca1783e0fc75d0db14)", "deleted": false, "disable_correlation": false, "timestamp": "1455837050", "to_ids": true, "type": "sha256", "uuid": "56c64f7a-f244-4b73-b0d4-c654950d210f", "value": "0e379344a76a26bd3b12b3e7287a62746c62b380755a21fa3e09017b0bb2ba82" } ] } }