{
  "Event": {
    "analysis": "2",
    "date": "2021-09-24",
    "extends_uuid": "",
    "info": "OINT - Hunting the LockBit Gang's Exfiltration Infrastructures",
    "publish_timestamp": "1632483238",
    "published": true,
    "threat_level_id": "1",
    "timestamp": "1632483195",
    "uuid": "67a072d6-3d20-4024-a987-e8fdd226a075",
    "Orgc": {
      "name": "CIRCL",
      "uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"
    },
    "Tag": [
      {
        "colour": "#004646",
        "name": "type:OSINT"
      },
      {
        "colour": "#0071c3",
        "name": "osint:lifetime=\"perpetual\""
      },
      {
        "colour": "#0087e8",
        "name": "osint:certainty=\"50\""
      },
      {
        "colour": "#ffffff",
        "name": "tlp:white"
      },
      {
        "colour": "#0088cc",
        "name": "misp-galaxy:malpedia=\"LockBit\""
      },
      {
        "colour": "#0088cc",
        "name": "misp-galaxy:ransomware=\"LockBit\""
      }
    ],
    "Attribute": [
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1632482189",
        "to_ids": true,
        "type": "sha256",
        "uuid": "e39a0bc6-1c17-4140-90e6-fb666a18656a",
        "value": "3407f26b3d69f1dfce76782fee1256274cf92f744c65aa1ff2d3eaaaf61b0b1d"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1632482189",
        "to_ids": true,
        "type": "sha256",
        "uuid": "e0ae17e9-70bd-4658-9081-e574de50c7e3",
        "value": "2f18e61e3d9189f6ff5cc95252396bebaefe0d76596cc51cf0ade6a5156c6f66"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1632482189",
        "to_ids": true,
        "type": "sha256",
        "uuid": "52341d24-db0a-4986-8ae7-e5a41470af42",
        "value": "4db7eeed852946803c16373a085c1bb5f79b60d2122d6fc9a2703714cdd9dac0"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1632482189",
        "to_ids": true,
        "type": "sha256",
        "uuid": "5a132e8b-4c3d-465d-80ae-e0bc6ca58539",
        "value": "07a3dcb8d9b062fb480692fa33d12da05c21f544492cbaf9207956ac647ba9ae"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1632482189",
        "to_ids": true,
        "type": "sha256",
        "uuid": "1216e548-904e-4ecf-a555-7c26c252b1f5",
        "value": "bd14872dd9fdead89fc074fdc5832caea4ceac02983ec41f814278130b3f943e"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1632482189",
        "to_ids": true,
        "type": "sha256",
        "uuid": "74318782-3963-4bf0-a05a-5e1b521848f4",
        "value": "ced3de74196b2fac18e010d2e575335e2af320110d3fdaff09a33165edb43ca2"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1632482189",
        "to_ids": true,
        "type": "sha256",
        "uuid": "2ae99a2e-b481-4ecb-8b60-a17f27074fb2",
        "value": "107d9fce05ff8296d0417a5a830d180cd46aa120ced8360df3ebfd15cb550636"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1632482203",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "eb2d689a-8e74-4fe6-b946-c3f42662991d",
        "value": "139.60.160.200"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1632482203",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "921f22a5-a91b-4f7b-9eb5-257bcdfefabe",
        "value": "168.100.11.72"
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1632482203",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "4f06c42c-5ae6-4784-8800-fdcc4602311c",
        "value": "174.138.62.35"
      }
    ],
    "Object": [
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "24",
        "timestamp": "1632482289",
        "uuid": "8e42a2bd-d045-4637-be61-d977ac772520",
        "ObjectReference": [
          {
            "comment": "",
            "object_uuid": "8e42a2bd-d045-4637-be61-d977ac772520",
            "referenced_uuid": "3bf4d3f5-1fc4-416d-82e7-1256c414d586",
            "relationship_type": "analysed-with",
            "timestamp": "1632482290",
            "uuid": "a132fd2a-efd6-4e0c-806d-cdff3a2723db"
          }
        ],
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1632482189",
            "to_ids": true,
            "type": "md5",
            "uuid": "f607ef92-533c-491d-90d1-540018192806",
            "value": "15a6d62854e3e7221589b9b6e8e395af"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1632482189",
            "to_ids": true,
            "type": "sha1",
            "uuid": "10633461-4cea-4faf-aa16-d64f947a9df4",
            "value": "635e321bcab27f22e0303da26198ac90381608a4"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1632482189",
            "to_ids": true,
            "type": "sha256",
            "uuid": "ef7d9fa4-065a-4a99-93f1-c594504340df",
            "value": "bd14872dd9fdead89fc074fdc5832caea4ceac02983ec41f814278130b3f943e"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "VirusTotal report",
        "meta-category": "misc",
        "name": "virustotal-report",
        "template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
        "template_version": "4",
        "timestamp": "1632482289",
        "uuid": "3bf4d3f5-1fc4-416d-82e7-1256c414d586",
        "Attribute": [
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "last-submission",
            "timestamp": "1632482189",
            "to_ids": false,
            "type": "datetime",
            "uuid": "2825847a-a8f5-4a69-b14a-6429116fdabd",
            "value": "2021-09-07T15:08:37+00:00"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "permalink",
            "timestamp": "1632482189",
            "to_ids": false,
            "type": "link",
            "uuid": "8558603d-e1fc-425f-ae3a-d8541bcf4c18",
            "value": "https://www.virustotal.com/gui/file/bd14872dd9fdead89fc074fdc5832caea4ceac02983ec41f814278130b3f943e/detection/f-bd14872dd9fdead89fc074fdc5832caea4ceac02983ec41f814278130b3f943e-1631027317"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "detection-ratio",
            "timestamp": "1632482189",
            "to_ids": false,
            "type": "text",
            "uuid": "f97bc646-3448-4f89-93c4-239c8de531f9",
            "value": "50/68"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "24",
        "timestamp": "1632482289",
        "uuid": "14ee13d7-f50b-43c2-bd59-b2cee7da5e0c",
        "ObjectReference": [
          {
            "comment": "",
            "object_uuid": "14ee13d7-f50b-43c2-bd59-b2cee7da5e0c",
            "referenced_uuid": "0cc67ce9-1478-4186-b238-1b0976b5f000",
            "relationship_type": "analysed-with",
            "timestamp": "1632482290",
            "uuid": "1e721d55-91cc-40d7-af0a-321f03ebbec1"
          }
        ],
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1632482189",
            "to_ids": true,
            "type": "md5",
            "uuid": "9ebdf4e0-f15b-43b7-83ea-aa7fd1a90051",
            "value": "9b905a490a98cd8edf2e4b09ac8676ab"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1632482189",
            "to_ids": true,
            "type": "sha1",
            "uuid": "0ef94689-8fdc-4c04-b1b2-eb51e9e8b5c6",
            "value": "63632224f977aaaa1c7d88be65cf16878b4bef56"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1632482189",
            "to_ids": true,
            "type": "sha256",
            "uuid": "cbca350e-e9f5-476f-afd6-d0dab753542e",
            "value": "3407f26b3d69f1dfce76782fee1256274cf92f744c65aa1ff2d3eaaaf61b0b1d"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "VirusTotal report",
        "meta-category": "misc",
        "name": "virustotal-report",
        "template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
        "template_version": "4",
        "timestamp": "1632482289",
        "uuid": "0cc67ce9-1478-4186-b238-1b0976b5f000",
        "Attribute": [
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "last-submission",
            "timestamp": "1632482189",
            "to_ids": false,
            "type": "datetime",
            "uuid": "66961aff-b661-41c1-a48a-deec362f44b5",
            "value": "2021-09-17T07:49:48+00:00"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "permalink",
            "timestamp": "1632482189",
            "to_ids": false,
            "type": "link",
            "uuid": "54a1ca39-a9d2-4ed6-be2d-034814ab9817",
            "value": "https://www.virustotal.com/gui/file/3407f26b3d69f1dfce76782fee1256274cf92f744c65aa1ff2d3eaaaf61b0b1d/detection/f-3407f26b3d69f1dfce76782fee1256274cf92f744c65aa1ff2d3eaaaf61b0b1d-1631864988"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "detection-ratio",
            "timestamp": "1632482189",
            "to_ids": false,
            "type": "text",
            "uuid": "1d36d653-cdd7-430e-a863-3e8901b4cb1e",
            "value": "51/67"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "24",
        "timestamp": "1632482289",
        "uuid": "2a7ba125-5243-4307-832f-ed6f4e151811",
        "ObjectReference": [
          {
            "comment": "",
            "object_uuid": "2a7ba125-5243-4307-832f-ed6f4e151811",
            "referenced_uuid": "c1cb1e2d-f442-44ab-b0cd-0c854425224d",
            "relationship_type": "analysed-with",
            "timestamp": "1632482290",
            "uuid": "118d9f23-cc74-40a2-8f9a-2281efc24ce9"
          }
        ],
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1632482189",
            "to_ids": true,
            "type": "md5",
            "uuid": "487a1301-5377-4082-801c-f516cf2583df",
            "value": "96076497841f73da57d4d69dd9cc2f8a"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1632482189",
            "to_ids": true,
            "type": "sha1",
            "uuid": "feb89778-d0b7-45bb-a03c-333041d81bbd",
            "value": "87a14a0464e55581748d3396881aa36a57383132"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1632482189",
            "to_ids": true,
            "type": "sha256",
            "uuid": "ecccda3c-5eaf-4180-955f-27e55ecd1f31",
            "value": "2f18e61e3d9189f6ff5cc95252396bebaefe0d76596cc51cf0ade6a5156c6f66"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "VirusTotal report",
        "meta-category": "misc",
        "name": "virustotal-report",
        "template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
        "template_version": "4",
        "timestamp": "1632482289",
        "uuid": "c1cb1e2d-f442-44ab-b0cd-0c854425224d",
        "Attribute": [
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "last-submission",
            "timestamp": "1632482189",
            "to_ids": false,
            "type": "datetime",
            "uuid": "f3328bf9-81fe-49c6-b198-33bc0d9c9fc5",
            "value": "2021-08-25T14:22:39+00:00"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "permalink",
            "timestamp": "1632482189",
            "to_ids": false,
            "type": "link",
            "uuid": "53a6ac33-f31b-4ff6-8f3d-5acab324ed6d",
            "value": "https://www.virustotal.com/gui/file/2f18e61e3d9189f6ff5cc95252396bebaefe0d76596cc51cf0ade6a5156c6f66/detection/f-2f18e61e3d9189f6ff5cc95252396bebaefe0d76596cc51cf0ade6a5156c6f66-1629901359"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "detection-ratio",
            "timestamp": "1632482189",
            "to_ids": false,
            "type": "text",
            "uuid": "77974b56-a53c-4985-b12b-fd968dd478a4",
            "value": "46/68"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "24",
        "timestamp": "1632482289",
        "uuid": "7b5ac8f0-84fd-4af7-8675-cf862b9b136d",
        "ObjectReference": [
          {
            "comment": "",
            "object_uuid": "7b5ac8f0-84fd-4af7-8675-cf862b9b136d",
            "referenced_uuid": "22769623-8b09-4ba1-83b7-0bc2a8286bde",
            "relationship_type": "analysed-with",
            "timestamp": "1632482290",
            "uuid": "4849f95c-db52-45e0-9bf0-306ed108201b"
          }
        ],
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1632482189",
            "to_ids": true,
            "type": "md5",
            "uuid": "276cb743-dc77-4384-ae5d-0e8100941c09",
            "value": "b776a331c15131ff66ae7df73968e023"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1632482189",
            "to_ids": true,
            "type": "sha1",
            "uuid": "350fc3fa-ba27-4506-8af5-980b6a9a19d0",
            "value": "419a7631f06ed78a711f18323f5dee882daaa409"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1632482189",
            "to_ids": true,
            "type": "sha256",
            "uuid": "e85be030-a41d-471c-8509-c697f96dbc23",
            "value": "07a3dcb8d9b062fb480692fa33d12da05c21f544492cbaf9207956ac647ba9ae"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "VirusTotal report",
        "meta-category": "misc",
        "name": "virustotal-report",
        "template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
        "template_version": "4",
        "timestamp": "1632482289",
        "uuid": "22769623-8b09-4ba1-83b7-0bc2a8286bde",
        "Attribute": [
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "last-submission",
            "timestamp": "1632482189",
            "to_ids": false,
            "type": "datetime",
            "uuid": "18c0c756-0e9a-4077-84d0-6c95cdd3bcd3",
            "value": "2021-08-25T10:15:50+00:00"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "permalink",
            "timestamp": "1632482189",
            "to_ids": false,
            "type": "link",
            "uuid": "456d8abc-e903-443e-ba6d-4563b72b5f07",
            "value": "https://www.virustotal.com/gui/file/07a3dcb8d9b062fb480692fa33d12da05c21f544492cbaf9207956ac647ba9ae/detection/f-07a3dcb8d9b062fb480692fa33d12da05c21f544492cbaf9207956ac647ba9ae-1629886550"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "detection-ratio",
            "timestamp": "1632482189",
            "to_ids": false,
            "type": "text",
            "uuid": "0836a9ed-fb1b-4074-8cee-2983e9002cce",
            "value": "51/68"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "24",
        "timestamp": "1632482290",
        "uuid": "51d2e58e-0751-46d4-9936-fddc400038a6",
        "ObjectReference": [
          {
            "comment": "",
            "object_uuid": "51d2e58e-0751-46d4-9936-fddc400038a6",
            "referenced_uuid": "55a53192-11c2-472a-b67b-d79b60f770df",
            "relationship_type": "analysed-with",
            "timestamp": "1632482290",
            "uuid": "d2a1ba7d-8cb4-481a-8553-7f8de0a0f268"
          }
        ],
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1632482189",
            "to_ids": true,
            "type": "md5",
            "uuid": "7e70c221-2da3-4be7-8c8d-41c91e9e145d",
            "value": "4d7bc02fe04b87e4369f97b3918fff9b"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1632482189",
            "to_ids": true,
            "type": "sha1",
            "uuid": "3b348847-c8d4-40b0-a62e-b66aea95b0db",
            "value": "dfc86741de088efc27b954f62db8a7e53842d179"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1632482189",
            "to_ids": true,
            "type": "sha256",
            "uuid": "34c4c290-e984-4b91-9e1c-c621cb497dff",
            "value": "ced3de74196b2fac18e010d2e575335e2af320110d3fdaff09a33165edb43ca2"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "VirusTotal report",
        "meta-category": "misc",
        "name": "virustotal-report",
        "template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
        "template_version": "4",
        "timestamp": "1632482290",
        "uuid": "55a53192-11c2-472a-b67b-d79b60f770df",
        "Attribute": [
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "last-submission",
            "timestamp": "1632482189",
            "to_ids": false,
            "type": "datetime",
            "uuid": "5c573df6-9cfe-489c-9be4-283dc6b2fa56",
            "value": "2021-08-21T07:19:02+00:00"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "permalink",
            "timestamp": "1632482189",
            "to_ids": false,
            "type": "link",
            "uuid": "f10ab816-ccc4-48cf-b4a2-658f6fbd0a94",
            "value": "https://www.virustotal.com/gui/file/ced3de74196b2fac18e010d2e575335e2af320110d3fdaff09a33165edb43ca2/detection/f-ced3de74196b2fac18e010d2e575335e2af320110d3fdaff09a33165edb43ca2-1629530342"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "detection-ratio",
            "timestamp": "1632482189",
            "to_ids": false,
            "type": "text",
            "uuid": "1742237f-5d1d-4f38-aafb-d5365c3f1709",
            "value": "39/67"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "24",
        "timestamp": "1632482290",
        "uuid": "1982dc46-e555-4570-a843-a60665c080a5",
        "ObjectReference": [
          {
            "comment": "",
            "object_uuid": "1982dc46-e555-4570-a843-a60665c080a5",
            "referenced_uuid": "904afda5-6bce-4a55-831b-2d892d11a9c6",
            "relationship_type": "analysed-with",
            "timestamp": "1632482290",
            "uuid": "a04089cf-c36c-4e41-bbb5-452f8f0224fc"
          }
        ],
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1632482189",
            "to_ids": true,
            "type": "md5",
            "uuid": "f682420e-7101-456e-9d49-34c0d3b2e02d",
            "value": "1e2e2f39ab6988a9f3852f1ec02ab05a"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1632482189",
            "to_ids": true,
            "type": "sha1",
            "uuid": "fd6019e6-798d-4caa-9ebc-ddd1ebd9663e",
            "value": "ed61f731ae7f3d238a28e90ff0b4c7d52cea508e"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1632482189",
            "to_ids": true,
            "type": "sha256",
            "uuid": "015644ed-0e91-46da-b875-11a88877b96d",
            "value": "107d9fce05ff8296d0417a5a830d180cd46aa120ced8360df3ebfd15cb550636"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "VirusTotal report",
        "meta-category": "misc",
        "name": "virustotal-report",
        "template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
        "template_version": "4",
        "timestamp": "1632482290",
        "uuid": "904afda5-6bce-4a55-831b-2d892d11a9c6",
        "Attribute": [
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "last-submission",
            "timestamp": "1632482189",
            "to_ids": false,
            "type": "datetime",
            "uuid": "84ab5968-fe4c-4ffe-b8bd-0391124f57bb",
            "value": "2021-09-09T05:05:25+00:00"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "permalink",
            "timestamp": "1632482189",
            "to_ids": false,
            "type": "link",
            "uuid": "b82d5f68-fe0d-4b05-b647-4183be1c0b92",
            "value": "https://www.virustotal.com/gui/file/107d9fce05ff8296d0417a5a830d180cd46aa120ced8360df3ebfd15cb550636/detection/f-107d9fce05ff8296d0417a5a830d180cd46aa120ced8360df3ebfd15cb550636-1631163925"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "detection-ratio",
            "timestamp": "1632482189",
            "to_ids": false,
            "type": "text",
            "uuid": "5e44ddc0-83fb-472a-b8bc-3230290a9c6d",
            "value": "37/68"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "File object describing a file with meta-information",
        "meta-category": "file",
        "name": "file",
        "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
        "template_version": "24",
        "timestamp": "1632482290",
        "uuid": "7780679f-3c18-489d-b916-97e4a7454d41",
        "ObjectReference": [
          {
            "comment": "",
            "object_uuid": "7780679f-3c18-489d-b916-97e4a7454d41",
            "referenced_uuid": "761f67ec-f15e-4c8c-bada-7c3280b95569",
            "relationship_type": "analysed-with",
            "timestamp": "1632482290",
            "uuid": "137b4fd4-aabb-48f1-96a1-85d9e1907cf0"
          }
        ],
        "Attribute": [
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "md5",
            "timestamp": "1632482189",
            "to_ids": true,
            "type": "md5",
            "uuid": "d5500240-3b52-4706-8e58-d387d41c9661",
            "value": "f05af511670dba679d845e3d477e789d"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha1",
            "timestamp": "1632482189",
            "to_ids": true,
            "type": "sha1",
            "uuid": "70f866bf-54dc-4f7c-9487-2fb8b1e5dd14",
            "value": "199d193f31fd7d117070a66e89c4839dddd513b2"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "sha256",
            "timestamp": "1632482189",
            "to_ids": true,
            "type": "sha256",
            "uuid": "688803de-8f1b-4188-a8f7-c3afccf9be4d",
            "value": "4db7eeed852946803c16373a085c1bb5f79b60d2122d6fc9a2703714cdd9dac0"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "VirusTotal report",
        "meta-category": "misc",
        "name": "virustotal-report",
        "template_uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
        "template_version": "4",
        "timestamp": "1632482290",
        "uuid": "761f67ec-f15e-4c8c-bada-7c3280b95569",
        "Attribute": [
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "last-submission",
            "timestamp": "1632482189",
            "to_ids": false,
            "type": "datetime",
            "uuid": "8bd35604-8b8a-436d-b369-b8f8df90767e",
            "value": "2021-08-19T03:53:10+00:00"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "permalink",
            "timestamp": "1632482189",
            "to_ids": false,
            "type": "link",
            "uuid": "ca5d88be-f595-4578-a53f-3adaf452fdd9",
            "value": "https://www.virustotal.com/gui/file/4db7eeed852946803c16373a085c1bb5f79b60d2122d6fc9a2703714cdd9dac0/detection/f-4db7eeed852946803c16373a085c1bb5f79b60d2122d6fc9a2703714cdd9dac0-1629345190"
          },
          {
            "category": "Payload delivery",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "detection-ratio",
            "timestamp": "1632482189",
            "to_ids": false,
            "type": "text",
            "uuid": "870020b9-0895-469f-a742-371e472f3bc5",
            "value": "42/69"
          }
        ]
      },
      {
        "comment": "",
        "deleted": false,
        "description": "Metadata used to generate an executive level report",
        "meta-category": "misc",
        "name": "report",
        "template_uuid": "70a68471-df22-4e3f-aa1a-5a3be19f82df",
        "template_version": "4",
        "timestamp": "1632482368",
        "uuid": "163dadab-2ccf-4d97-ac79-4663b4cc73be",
        "Attribute": [
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "summary",
            "timestamp": "1632482368",
            "to_ids": false,
            "type": "text",
            "uuid": "479e8059-6d48-420b-b125-97e75d0b6988",
            "value": "Yoroi analyzes the StealBit tool. A malicious tool used by the LockBit gang to exfiltrate data on infected systems."
          },
          {
            "category": "External analysis",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "link",
            "timestamp": "1632482368",
            "to_ids": false,
            "type": "link",
            "uuid": "f83af3e9-1a08-41f3-b463-21c78df93ffd",
            "value": "https://otx.alienvault.com/pulse/614da70c04133b145bebfdb0"
          }
        ]
      }
    ]
  }
}