246 lines
No EOL
21 KiB
JSON
246 lines
No EOL
21 KiB
JSON
{
|
|
"Event": {
|
|
"analysis": "2",
|
|
"date": "2024-07-19",
|
|
"extends_uuid": "",
|
|
"info": "TR-87 - CrowdStrike Agent causing BSOD loop on Windows - Faulty Update on Falcon Sensor",
|
|
"publish_timestamp": "1721380201",
|
|
"published": true,
|
|
"threat_level_id": "2",
|
|
"timestamp": "1721380187",
|
|
"uuid": "10a54888-bba3-4af5-bc5b-fcda933ac0e2",
|
|
"Orgc": {
|
|
"name": "CIRCL",
|
|
"uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"
|
|
},
|
|
"Tag": [
|
|
{
|
|
"colour": "#004646",
|
|
"local": false,
|
|
"name": "type:OSINT",
|
|
"relationship_type": ""
|
|
},
|
|
{
|
|
"colour": "#0071c3",
|
|
"local": false,
|
|
"name": "osint:lifetime=\"perpetual\"",
|
|
"relationship_type": ""
|
|
},
|
|
{
|
|
"colour": "#ffffff",
|
|
"local": false,
|
|
"name": "tlp:white",
|
|
"relationship_type": ""
|
|
},
|
|
{
|
|
"colour": "#ffffff",
|
|
"local": false,
|
|
"name": "tlp:clear",
|
|
"relationship_type": ""
|
|
},
|
|
{
|
|
"colour": "#7b0059",
|
|
"local": false,
|
|
"name": "smart-airports-threats:system-failures=\"software-bugs\"",
|
|
"relationship_type": ""
|
|
}
|
|
],
|
|
"Object": [
|
|
{
|
|
"comment": "",
|
|
"deleted": false,
|
|
"description": "File object describing a file with meta-information",
|
|
"meta-category": "file",
|
|
"name": "file",
|
|
"template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
|
|
"template_version": "24",
|
|
"timestamp": "1721379960",
|
|
"uuid": "2c00fe95-1d42-49c8-adee-3fb09588be59",
|
|
"Attribute": [
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": true,
|
|
"object_relation": "filename",
|
|
"timestamp": "1721379960",
|
|
"to_ids": true,
|
|
"type": "filename",
|
|
"uuid": "22a24bb5-84c9-458c-ac99-6ab16f6a9c46",
|
|
"value": "ad492bc8b884f9c9a5ce0c96087e722a2732cdb31612e092cdbf4a9555b44362"
|
|
},
|
|
{
|
|
"category": "Other",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": true,
|
|
"object_relation": "size-in-bytes",
|
|
"timestamp": "1721379960",
|
|
"to_ids": false,
|
|
"type": "size-in-bytes",
|
|
"uuid": "a3270073-a940-4cbb-89e0-a355a4e309d8",
|
|
"value": "41004"
|
|
},
|
|
{
|
|
"category": "Other",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": true,
|
|
"object_relation": "entropy",
|
|
"timestamp": "1721379960",
|
|
"to_ids": false,
|
|
"type": "float",
|
|
"uuid": "167a4c9f-4311-49ee-8f73-fd7e40bc8c27",
|
|
"value": "4.5534410358575"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"object_relation": "md5",
|
|
"timestamp": "1721379960",
|
|
"to_ids": true,
|
|
"type": "md5",
|
|
"uuid": "fec7d494-67ea-4a29-aa8e-3721890c379a",
|
|
"value": "1618cd13c5263720ec958c3b24b9d1c8"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"object_relation": "sha1",
|
|
"timestamp": "1721379960",
|
|
"to_ids": true,
|
|
"type": "sha1",
|
|
"uuid": "7d2fe15d-9165-48e2-84d4-05a614de0268",
|
|
"value": "cb8a27c7347d19bc0b23093a99816dfd8240dbc5"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"object_relation": "sha256",
|
|
"timestamp": "1721379960",
|
|
"to_ids": true,
|
|
"type": "sha256",
|
|
"uuid": "c9cb5cdc-f0de-4907-8685-1baaae930cc5",
|
|
"value": "ad492bc8b884f9c9a5ce0c96087e722a2732cdb31612e092cdbf4a9555b44362"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"object_relation": "sha512",
|
|
"timestamp": "1721379960",
|
|
"to_ids": true,
|
|
"type": "sha512",
|
|
"uuid": "1edd933d-f711-4c27-9e32-1a2bac5b7b2c",
|
|
"value": "2702ddd24a4160ba8f65287f71876afed1999f074d1885284ccc610bf412d99d00ae1bbe67bf1789a24a88e798d05c1e91090ae8d9d8c3df4d88cb2e7aa40cd6"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"data": "UEsDBBQACQAIAKJI81g5t0D04SUAACygAAAgABwAMTYxOGNkMTNjNTI2MzcyMGVjOTU4YzNiMjRiOWQxYzhVVAkAA0AsmmZALJpmdXgLAAEEIQAAAAQhAAAA8FQnXr0Sf8CbzqVZJSB16ZM23QC7FgltmMPZ7SxwUfzUw3yMJFOW8gFnzCpqS2/ASBR37sGfLRQW+w+sEUmD4DvI/IHH+CIGsqIRUw8Gtp56AcwmGr67MCyi63O9JPmbNsQ5DgaE22GwKUcbk0Y4UQwDVZs7WmgBcUUsKw0zVP00jZkCMjvKO7oWRoYV21+NwLcK1fLhQBSg7OZtnPzq3ktdhKmTlVhS4XhiKAth7GHexq/v9VMpYSD2/YAM1ZibO3oZDsAUePjZywxl0O2LP5pJEpsNgIxvEaW5/Y7d01e6czeIkoiLNEiLo2LZF2pevv7MfP9JEeVjBICYpxqWw89KKVKH2EF1QxmuOh9CV2tYIwsoylTPj62mUWkvvOGo+rL4bIJ7inr3XRgUrAYfEiYtFMvFntmfCQEgk55RlZ0hqeA6IKkZGyiFPoe9o013xerOsS1wXzmL+vUDG2K2OgVDDtNeqIyIKxWLPFCNL6kx7jdij4yv1BiURqHvk76C0xOlIUdpCDEJXN683mfXOTLfobKRk440yg0utr+ntKbTgoH8YTF3Gy600UfwrZArhGP4zdOOm/xr902qp2Pbjhr8P86ClozOAinbyk/AWSSzllgkQhfNs78q+5RLU3RSAk4AIR2iCgAlFslv6wup/UzwsnRGMTFB+Z2Raq83wwIDeznccieSNQDPueFufJn6+xfGF/Xxbrq1S5CHeUmVJgPQuyEC01OhFBY4L5KiZ31sAwoNah7EzdCrrF8KE4Y8O7e07ZOikjb0txEQ/uixq98n0GvCmzx/6NucaSD4/TM0DJvVq6Gb4ORKW8na9EBeNyDnNXTqXbg1WE+ZFL19zzjTJsnfXX6pLg8hROAgVeB7IoZFCOD6Vdfs+QmN3GFU6LUWZ/74Cjts1tohT6H41P5oka2Klitch7QhHJ7U/eG+iTZKKuOtcSjqrIsYSI/tOGbVHrr8S0hMW7lf3Lj4K6Qhu7uYJCZO2C3Z8B0nFFPM0DKd/U1388HEfu4hWEc7OTGjV/M87h4rBKQM9k/v2VI1TgcgCxR4UG1g/Vs9quAwn6IPbosv6/wqpeOv9bBxms0GWJNYpj1eSIF4JDPKd2x8s19Qe/y9tT2hb2/Wsn5UaNQ8uCiTLDKvo7Y7KNR0vAhzkJdFcc3rnVuM41VU+ODaG6qqANynqDqXgt0tC5x7VNz3lhOwb0tCtIO68zXORp6jaQnj3Vhaoyo4I1UcQICD8ge1WeXamTuqHnWXtj/uiOHljZo5NWOKMEyNvPCvftxYj7gzZ6JYT4jIHnpdVN9mc2lRitpuiyNbCqh6Z8vPm/hGo4xwoXSqMrzgCZB+vF0rSULuUi95RY1JbR6IJVLI8ksPMC41wVzNBf3wfn/q4CBP1HTnwkYV8t9b7lxiozlP/GcjR8LRzSp0AsJ2hZ8XaeAYm/K0vztsJaXzbyAHsbZ4FawVajudOW/ZAxU8abZSJiZIddckHn6PLcBwJzdSAGxBP01DO90mTrv4wu9kRFrJXh2AOCE6PWa8sRZuZExjOzj43TjYgxnpNRkmO/kN+VmWyqkenKiyfxaCIARNMznevwZwTkWPccqq7YCYuLhr9hnJb0s9Q/dqst2zIFb4J0x8J9CpB7jpLCrklaK47KKkxspLpjlPBFNm+B2ngk/237J7BgME8CBUpCdEJufwUDVxUeTIbynPs5xTnhhU2APjfkDq+zImcjW/RaTpvI44KwF3ecCXx1N3IZSnsLA/+Jkkig4wrZTu3RlUGr60KKOMuih/4r/vLadsj/WqUVtcZVZpGLQvmwFg9nmzjPEkBOTKftQlK9MSf/fmtN0rMzLerXsl4LiwTWhsBNolAl/ev6P9Iw/0U56hkqIiysZAi0GX9ywLjKbBt78pAqC8vsBVr+ZqcXRLEt9/ukilvrFzXZ/LUVnw001yloKowAoblysfQxnko2WNtGuGKqKjGBsWXLOpezn9hZAYvihco+bND+I2wqtMQTVNytj2l6HL6sMAfvAGMnNALYbn0VNC+MTW9ib/ceXlBzp2Y8sQH1dJ3X+VLOfPNu+00PL7GO4ytgbFOyph9xn3EPEmJY++5YsrZD8LBZrXc0S5oNlm9dHr5VyUKjJK0d7w+y2vElYKlMNCmtRI3OGyoXkrrvaA3OeICnwqA0otj649uVy9nJK32yqG861FGSBph3a8yaaHkxAHPicCKT2R8DQagCzqCqVD8082pqdzUYnFSWHa6gvACG/AIVCNKo1rWjpuhVGfgHSuV24zRzCtLFmP0hks38bs8ypc/axHeir8We/EUlsfj6Vz/1vbkonaQ9NsJNS88tXlArX4RRWGXoef+zKJIj1I8KHjKJ5TbXx5AVUfsV/qdFsoj1EN1tHXBrla9/pmAY5hQbZ6+4+BoS4D0y3LYZxkH26NdLblunCkiDc2Ac9/PyA1IrwcuUnC0VB/USHbpyqhpO4F8bQ0WxO8eWrv/HinLwpxwqOqcMljlCkd59GbuKaivAYbBCE+xDEMlyfyRcgTjBmOlcjpiRbG38glGjTJj22CwqDuSulioHuPFCusZPpEnaTkBick0K68NPYP3gbKRPENbFQ3FokJt4y4q7xAABy6Zkwx5HacXNlM+Wc1ZFTjZ48vosjZycBSOUwknKknVts/z9Z8fL/jaKfOA9OuxdAI3h/kUlHUprMTgzyPqHhpqkaSXhgVh2JOxkROetuHv1/tU37JcFxgElytIaf39fAR2wL3xvQdVNRtbMzTTVKb+Za3tsKz0B6dcnVJvfnAytjHKc8yEwTSY+OEdBetF1x9wYbnfF42VoJ4Cd6uD7/Njd19RMHOytNMGrtHRRxDlLo92NvK7k2ohA4g6fSXgp7ZA8ucjjr7aZIJepBNJZA2BkBxpkZ8GbbOv8zekO07VGiIoLEFnsgOn68Mx71tLHRIPj0OVRCCAy7/C3ohpkWcgYZ8TgHu8tJutUeQWm8aMJJECDaVZYNnr4YX7hsRlVdByoa/u/L4mLwKQAI1drVGMUmLvUvdoXleci70iOQjZN1+BR9M3fT748MzxlJJ6flQxEfFGzRNeC1kNiamvbFRR2HqtwvG97QhNcbc/VwLGybZRQYwX/PLuvQ0mpmiDV6aERYgpkTaJX+hym7Tn0u41WaKOFwHDnOOEABStraFayCKX59kYdpILeSjysx7JQ+TDZsNHz7A0DUgk1jjcfVhDbGrrdSqebEB+eKkYD3uigQez0f95b84FTFcRtu3qPls3U2QEzPgTI4NKCAAl29PVCunem5BURaoHAuxNRMkRWEf6krfkPS6acObgDj+rPpqEYTv7hhfEuweqdQh/jsULp8O/hGah/d8OnTDy+8HqM7Kv+29sXKFYrainN/Ipwjnv1VtTwhJElVmOpK/NLkqLQet2LxJhNGmPXGV/QY4sQwfS3XtBUVRajxomb7wuwGJ1ODBjYsFGwC0Masf7tnUqukAeDYRXW/PCM1jcr817ez4UMRIlNGbBxCq/thppMDrQ4zccWUkbsVLOKNWcfSKUSvGVyZnb6/Vhw9MmVG5CmVt2ntMpf6tJE9JAX/iZLyWtvXwErs2rr1sWY1RGiKYg2KatSJPMiO3u+5EttsjC/4L2Z1fpy2+eSBDQ7L/SNwE+pkWM/ysNZk5zd5hONQlJqwbruf9Cc7/eT0XPSQUsPmzgypMiCHhrb8Ded4J0qf5/yX2pCGWQQJCgQW33QMChyteOpvZomsZ51rW4b5qPG9GNZliT6iFr3AbuZtMpCLOz+AfAnvuJJ0HaxBn41ELoORmlUnXgM/6nivo3slmEmy22sHMXKyC4cS3N2Qpk/rFUBMm1C6C3lSPCScv1RDQpZlJQ3AdxQNH6RZg9sX9yv4Ivexj9OjAeAZMoE8JY/ooo29pmiWpCmxDsGqylWS8Tqg9GcmirjwtMwbL8MTdK8+/LSd172cLuWhCEackTTE7ZxR5kBmCTnYl/7XI/+asCuFw0ONZDj99rdSFC6MMLENhbqUIKusbH46uEHbILavswViDkjGAoGxqJ0jjIOJDCpiq3ngkfrgG6JPyTA3DTFhgMF5+HibOYVLCMHQY2qck9eBPOr8XE5GeEch+fL1iJGXQG6sfVTMnv1e5jrznuDi0CT/MLppFnxIq8aw9cQ9URLCYypi9f5kM94QPy9QwwDSqfOVFoGtPn7dbeAcooFHcUv5R2GM0VVDWiMqdeMf3ANlZ5smX0bvKqjzBi8puVJ0vUmyH52qJ19vxHCNJEkT75CZy9FxuUATDrNPwu/WQ5Rg8hfN0HRZXu2vjdIfZbc7IjrARFpVaWvFcl7Z9cGt9bAxXPNnqtGYPfRmFxhp0a1tYQup6Njbg7zr2f0BIkVXJEfhwfze4546IjI/rtuQZLncAnEZ8+Su6yIAoODZA459hIhO0DVVmwLHR+SIk/0IMtw48yqBlzpsVQKQviMAdRV7TF/6/52XHGr1y6EbximAOkoTG2ge/pXzDjx9X9z1skczxa8XTUksPN9n0n1i6z5fJWejvSLHiak1/wCA+8wg3nPEoy6L7yZwafxno7S9dLL5VabIPIyzuvg22mBVulRHMJIDY9JI4qeD+R0keZmsvsyxDIzNq6D1LzhlZyuBH4LWJkSp6+dmTKHC7UaKuY9s7o3WjEpRGGrgiV8mwXav5NpdcQyFaXiHS6uyGZK0/ufa30u4gbcHNQcoBm45SpY4nCAoNdqtUGDbRoQJ2cAQ8BbCSIPSr8WuOwFgHKh2/fmEN6kiYVTFebj9dWVx6/SV+Y0C8KB4lcjw9QeomckpQsNBCGyRq5d30Kz/Re6M1a8G9A64rolYb2d2I6D2HqsmIwuQgf/1bS4T0Ny4rA9QqGnPqFEh/R5ptssg1VR2oaD1kzUsnS6/Ql304cvQovfbBdV53cAmjfwOtax70m2sRp+pGQ9FDdI43ay3zYF4nwyyp1V+HVYpk20PRtQGWxyqcga/vw3BoilWf8PLMGr3QekxZ/dW47LvigNvtQlqTjFPjWRx6l796UpcU+rEfXjFYCQ/6KwTBFhz59PfMMkJ9AtAfyWxFPwB6JF1op5K2Os2ttQPqrorMQTl8vJetQUAIlsEfKQng9ekcju/AjbBeiXNB0aKnS5fbEp3bq+4SrpsROYySYdQGtC4b5tK3n2tBrRZGxVH6lj3kfFDXLiHpYa2ySmaNjyv7W9jKoYNoYEedkCCBEggKoCpkyz0Hz3gB3nO2gDwDqm1mkownZKj3OA6oZp2Q6ZMqrlfYpPAn2hrNYjFi8kaOOXJvt1+No0crqchMiW3CoylOsPJ/wOkB/98cZkksH5b6OclBEhbg78otpCgR04k+os79LdlBU/8wrp5dmx7AJ/Jrba7qZzTrU14K14c9QmvYsvdflr7n25xxxlgfHc/c9KHb5cVaFXPYiCwu5EktLFMpe9igNzgwM1jAYQAhs9KYVdmoRKPfsAAQPENHW6Ld3qNHQE8Hym2OQvdUCQXA/sZruPlBvx6tMNEd0RFIZ2Ejv8EcRXbtwaQ9rbEwRbPxtC577xjJKiQJ+Pto9LgJT9vhIuGEP+bXADrTPuLf/PnD9BnlmmIGOpHHjJxL1RuJtCYxGiEmgZxjrn8lLWzXigD8Y8cLrHiBafelOu1chlGiL6A4nVD/wC5EbyeN1YamDJpCKVePEUMnADhfAjfN2Rai+T2zzCgSLXPzagNVMzPg4zLoG9ixvctwpUFUyV5JeR4RJH1cxWHM3e8+hZNxXDV5EgHp47mJ6Qv399UfOB0nqStZO2WALJOaVovNnL3wyg9+J4az1CcMEuXBdlnhhWO0O3vJXuu7/eKB8P+YOZ/hmui4xs1UXNdBOxT0RfDqA0EEUtfkBeWkUpWyakzaGd+z79DGW462ttt4vppsEfxd6rU2N0O18p3DAxcjOL7yhFtAWteSfcdADRoxE1h/O9pHKDB4f6lGuxqaxsT/40VDHQaNw8uLb4KlRdYhFbEVVBEF+DsYZvcMSJEDwBp5t49NoYTtxRcQKgq8EzSBqmRlL0BZAgULGTOqinz29T4GAkH7YOUJrEtB6gc+fQf12Pbh43IGCiQU+2NyHW7v7l+UIIwX93B7TX5n4f4cIoVCue2ts7ACdVcgp/7YdBzXCie0jl2wdqvVIgilVIMEEdGc3+h/OnHoSp2yTezSAffmZhsaxeFdZPNkeMPC1HxjzHm8HrzSn/DDxW7qjb5YD4+90VbRuNg3bfSmErxFqWiL104utwyOWQ/nmlu1bz89dxWRtOW8ZOE5VwDFRqxhGa5JAxt6r59ugLQMEO0AM8SzFBk9JxnW8xWu3hcqrJMWuvain47a587TUGjPTYomucuso0ay8/WyCEMia2sl6VnmT6JVyTZ8IEFH9I//UgrMNEweWvLENCAK3R4wMFd0WijOBunz7Zsr09KWsqU4q27e4ITp1Zri8F6WheoG5UeoLNaxqvCRblLJNTLxd2kfVPRoMNqZKQFTXgifzTa1VV1WI/3+aY0FP4xUIYIXJMdFO7AEBEBT5k+r3LY0KjPsz/CQGHiLCvDhfDqQYzQFCSn8PWJzPIAmSabzDyVBysLgcfMguD+8E+NlHYD9mxTTFhfdjy0K0WVWtJXI6jcUhTyD6LJhTKtRtN+cttVdoV4rJ0BzLsQjc1JbRqfLyI8tFxHWFI0cvdVeQVGGY803hl9yUhdm+eppotXJB5lfUJQFWb2MnzTjH0bHQkW8+RxLgTwOjblE9if+R61jwb4GL3mymfk2Hid9zu+4smhiucftLZKyLT+gMwSwVGIhU1XoPPtZyZwTlBOLrqm/r3c/iwPlliUZMB2rvuRCzoXpuDT2tgQL/Zwx4d+nVHWvCQSIJP4NXalnxUbJgvG7mNBH6XIH+3hzME9jrjRtKOWiw9x9lz5xUb1A9QkEUtuIm1XXY08GJ2BvnZbzsNSdpm1xheD7xZjgX8bgnGCFSnH0SaLQjBsE9QPkZ+Fz728F0xk0GrtixQhp92FCn0SC4Fe3Pgoo7TEK2VCfZ27VezCr/Zf8fbJDTVyMWNNHE+z5QG2mJ6VTWugvbq4OCmH2y6UcaKFWMF03P5G+2R/X29CA9h02T7OVtCtfGGCT14TVVUQ9GBiW17YbxUkex/emeSfHA3xD6D9QsU0RZE3I0tLVtDU+B4/SXS9I7aAgOY8BBZTasAZ7CIBB7yHxcKy9SkP6dYHXheVJGWbt/FS0jVf3L/me9yssYW+PARZ1HFub23PGyKpU8BKq6rqvyrscw448TzXQvC0/+dEr4vGo6wQ2Ulp92i8YS7wOPUYLnnuxtzgxAlnmVKSOZ+Mdi/Czn+wdeZdIZD9WzLGbvcNITVSPwqa0+lcxzZnVS87jYEH1zd36+PzyA2Ol7TrmilKOp/xx+SrAYVh0fqJ4WNhubhj47/41+dyBJJc7iNT/WnmVdAxSzGIE6DwqRBgBj3w/UJrwmnStYK8Z53M58N7i7iObj0xuIX5bfoF16H1vYMOEFW95TcDNBpXFahJ6i2crqQoJ4AUHhdmbIv9QhOuPONq0BhneT9/o9oD8lOAuscvR1k5ljfhstaBFzHELgBDO20XmwwVAYoHaprCzxaAMiYo6cta926GFxEE26wrYid7rcguYKOZJzVD5Jx98SwN1wEnVt7og3yxv1BI62vF/G7x+JH3Ft/ajJ/U1+6dOcAgBRvjapLLopC0ADLAoxWvQ+NQtpvr8roZTmIVbf8aavQNByXx6sgnP4Brx0inPQoDg+j7Q3qAbwpMblgu5iZaavEHYSZu3J7aizw9LeXuf5lZemj5XVATLlkvqnLakkB/lqoXxjwyMe47rxxQxdFcQHuxKQYJqYMjaRKcZS2wu0BEbYXZzST/4ncSsgQOmL71Fn669DH8/AJaNqGV7F8sW23miAOrmXsTRuqIgxWKmN+3Vobd1uo0Qey4JiyrJKLSt3UY3emNCoPyn3yjdaukgVlC1rCUMyllklSgTsQVwjpSNHWo3NRp1Df58wlgJct7K5/g6e8PXvh0k9IjGrKZzDcqcbmv3rlTvVXSDrnEfdHBpsyZHD1tB0eoGXqsP7bhfxuCEd9j8w8hGRVvo95JRJ9J79Su4QFg3+9IgBJzp6S3QGYsQ52QWb25Rzt19BN7oe61E3UnsFOWA6Yi13WUzcP2Zt2JVa/J1rHvSkJq2I9SO6QU2sdgMbeY92juOuZVlqaNG8KHyctFEH5ShTiAHDH1hNakW847VUu8lBWi6DY1NnN6o9Sr4ufsTL/oCyFJld2HRDOHYngDNiwrQZBM+ys/UNrs5bNNpNl+0ZTP0j2UWTA4ReyaS9gumGsVPGyUM3kyc0yrnZRG3eev9UoPsG+m9in79u/vdS+DSp9O0OX0SWed0erDN/OOxNfeyV8do2gCMzKKaA0NVCMYcZYdoL6nLfwhQCTThJ+NwaMro0ElxL+r4nnsguRvMN2FvtlhONmxUtlb/BD0a5DRUTlqiVVKCgbz9HTJufQ5ambWx+3D0er+pM3xv+TkgrgenX9L6CvRJ1RS2QcHmN//C6uwUW0EIaTNv/9dDOUKbiJlZD+VgryXkUGril1Fdgs6Hzh3abycdPo9Pcml2EijM54Aioc3qLHiKzKjvrWqWnfzAiGHLNCADevjeDjahsfyl90R3MPAbd/HgL0bHhVXVQuboU20hVsvV0rrX0bnP1qgEYbdQXp4jJW3d4FywnBtemFi9CfD/kaJu8QwCnn0u8p+0/SGpdHxbBOWjEA3lHv+L8xYQqHbcvdgTl7PYWOV/eVjUHN+wGRyq56HbGatGqymhe1h4b8a6InTY1sg5jsq7tp/lwMnXB+LtDlKE/Ft1NCcDqhjePZ1qiyEVM8Rvd/pfFbojDetcPx0EebvS3iCHaJjyfUGAqmir/EvTmW+HqciBBX3D9w5snSlYg/LN/lWcM8J7uPKONMFf2zZqq0tb7efmHLBFAwwImtw5YSGUMuqZx858WyNiquBSX9ynEE5gcm/s9VsUg7AYNLx18IBtJgn2F0gTLGRDPg5V29oUiWuickiMAcGRNK2jkcZh5nNvasQl85NRgFwEPmbA5A5zCmUDf/eFGgS937RB/t+5v0lY8Qp/zntPaSu2303EMXhfrO3FGSdpxW9iQPMjTmbA/O5J1oFzVB66R6EYDv7syddVcIxH4LqVb+PgPIIinfNSwcFlQkhQsSKaTnP2kS0CxfAdbS+9fdcBj4jcd8RHFkVn44kCTPzz7IoWvwGkmKR3wrbonj+l0hJ/F0xzSiSr558LkUkyE4R7RFRJuTQBKi8o8i70lyc22xWD3zbEMzUZ7Uhw9JzNEE3AXP7rIhQqw7A6ZDm3LkvrWEbcf9In9dqpxVr/TRHqAoKBTILObVHvIKW7w5wJWMANJv5i+5zsKPeh/vCAwysCOos8YVUNmA8eXuFrY9ovD/XYmaD6yKd0IH6SNSdZPVZVk+VXNLg65C6GLXXSElyF/n7oQxurRh61DXZWRrHIAhK2QwG2agW85ht2Y0YjemxJLlcmic3cDhEjqChsyU6tavQxBFBZEHp+3D0EYeWqropkB3zNrOvvEO0tJfFofqeypgX4GHhvLaSQwQE2C0D6NSDFDJR7vo5sQ4hJrS27jJP7RmTrSt6cX8RMHwqc4S/jGIVqlEqy4SYA6u/9/lKyJ+uZc39f7nA4aYCdmU2GkJl78XpbEcdTm602JRQHTNYliVpYZqMnJjAcr2UqVnzNXNIshgdEtph65JSZYSJ7OhvbNj2khM7DKc4HtOfRygWxlo+deRSz9LC6iKIXAs9cMZwnW8yGmjHQwOmoIOpFs0k0zXhi6aKwWvMylqeXwU3Hjz8RuPoiD5UYxf8WnJ65v9kzRCaa9zLaKlFX6oNT28riBo0Ux2uPyGEf43ywpdN/2cKlY0l/7Js09M/eziH8FXD5Nlq5QzdBQic9xXRtkeno4hBZLrlVp3K2fj5EkjKHWYff0lkqWvfEuoBPT0xkRSc7EgfQ1Hk55uMz02S/lWW34C8/wI6CUhkz5adfbkmstK5jtCiEFwpk+j/oTQoYdIkejnMGb4rfr5ay51g26DcvUQ73+1rVmmALMN7ZBBlLb14MnNG+Qw3Nch2SzZx4cemyzyts0y1Juk+fdUt85unC8AIDEjnSgcx9Y/tLv+BqGAtdKeUrbR1yISz1UKklPgc3HlvXhR5qi3KrY1/TuNf8FLELTLbKvzTPuATAboQoZ44IeyMzVwWU2LGpOpNJAuJEtqcVrRE1JE3RL9PSd4wCilWvWCDKugacD7OryTdpJHLnpxImiNzXhVK9Wu0M2nylWmwajzo3Dgy2+zUI+RKVx2vOixBoz+aDHhX5XrMRTxdFaxmVCu71YAPJHkvyW3ZKuEmBdvAmDuBSYpKEBQQd+zuIyFTn9TNb5+dXQ2yFoUg6RjUuvrSxZW6ZX8RGWBVzxgdC04qz/o7Rj9sXiEG2peuH2cVmv+qp9QcdLZVunCSC7jloI1X5Lw2lBGqCRzFfqCLBmfTlIzm7oLEyb+R5iB5Y6PTPibp2DUXayVZ3goS5xnsOa6jXCvZQKx/9EUcrwZFpoQ291lLXAM5Aa6q3C940hZhiGQE5LuAadv4dLcDibGFk6bRH9Iun+qMcZo6Skptmg8NYygaNkDjLHVJ2KVFQzoPRHnXm0jyjrpyAnCOIJBbxCt1b8qjxGtORi05ErIMRT6tIhq23mjQsMQYy4/ATwgdpd/O4+9RmaF/C43sq83P/afki+lYJKUXGedCQgAJhqio2WeB3BDX2KT+0xD7nLvev3HCZAGJJGIThA0Qi6bdvFYzrBFChoQeRSRZmlPwfjKdv2/VENt3UJ4Qj77qsTGKXM2t8XKWsrFsqal3HPypUEPXOEQUb4Se1QLCJUhrzS7sRjT6kX5ms1thLlNGje3wuDw3WcWKY1a7EOcMDRuSYrF9mljsiRLXrA4QL7RkVkk3N9SehPlkcMZORo4kk1DVrqnucM6WzWaly0Btxh9Ga3q5ZolrrHD3cWGQLgCFlDB6wX3pE8KyC8amcN+KKMerr3z31zgoD9TJeB/FlVvUx2bYcWR/1rSBdyi3EqKr9l38diFFN4rfS2jmPAdwtznkcO6reUqHNM3zQn6XfTS643q55mldPFnr9BAKcapHObkKUBGkaAqpA5KrpPtq9L5tUmC5wR5iT+trfduNKZlPmPIuoF4amnmg4gbhkYxEHgYI9P+i/rcOrbDn/rS/scr8VTo/jkFEyhynsSfkFrH5vZMIlQnFHCdYyqOcr9z9WFkZEEzQIZYsxZe3QJ3kETQ0pQ3CWPDlY/H5d0JuAXNJq8lq1iNIgeL6T89Y3upDSSHStg/+38JeP4hbNyXiUCm3LFLGTFLVCQQU2mAwunn83Nt+v2ov6UevFCGQa0aWA2OQyf+QOtOWzP4FbxqFhw5CSArUlh6sOk6TNPEMrYyubAAv70JdgREH3cMQ9BgKqGufrCNFmR9B2+D/1Aw+SUavLlfhfHL3N7DIn98PysIz7hqePsBLnxu7jJMzGAsZ3O1GZ00AQq9bIyhu5FGeYtg7Z0SFqN57kw8UkirPqJchykpVY9Y+FBQlZy561xnTqFT6lW9C/8KZngB5jQhkt0xCP/9cwz3T+ThSTpeaDP9vpslv51NJuSo//0RZjL7erCOtrztNo7csyLAfgCEJtJt1AWfPxlR1h2Xqr4ms1s51xTp9Soyd9cqKugmf/fEEc1UQD9rqeTyc568RNNLnTqI2YARY+KgG4mAoX9TAPOJpMmZyk9En1GLJhm6b18EvyvQcUZwVbUhNKrFBIsSeKIb1WSqSILTfcIrOUg1TZWh4AuGcgbbm7ESpeMrD1/7FbB1fIYgcrJi20P0UwLlF1iuDv9L7vqy8FzV/M0X7M5k2FRegr7nzB/VzqRjXGMjsJgz9Gj7FY54mKB7F13a2xAf6lBravwm/Qp22MIMInS0K5V7oAGfTuUFPXgcJu4JKekFcrR2mU6Fz98M5tWj9nDMXuNOpuSjwF75P49ci6RSM6u1mjHmhWmX/tCrswU2STpVJrCHRDkiTUwYAK1U9AVb0RnNTsO6WjSo8Vr5//E6q1GK9vXGYXB71LdoxUYtaS3wm6sYotgBjODqXbnZKV2qChxQ+lOiM5Mgdb5vihPzgUd9mMI8o2Z8NKxgLKOsvCvaPSGsTZSWJo/OvQ3yoNK1bwYHWsRTF79KNtxF9iuxzU05OV50fEYQxWU0lliMHHXk45gtLopT9eQpR6E4CSJTCga64cjzN8z8YInt9l08KzP2eBSdkyCHrAtn58zMZ5FDUPq0UMwVRDVfTVmPJyTs5VCxcxwGn0o/PxcBXiZQwiME4bluyFLd5zNcqElAFhxt57qP5VvXhIZDtR+/7RaJq14JSua39nplxSkUn1gUhqa+6RwysSPuJOJ/MNLv7RZ+5FfjztJ4AddO4mOeGmk1ulHFpH5VOW16hCd2fwkxqFlkRXXAwBG80fUG53Mb5lZhRaZsGeX26A0YL7iHj6tR8RTiloiVWKFyjzchXGP2HsDfg7VHTeEj/Z9kfymokru4a/ogY1DHyyWp547MuY2RadF4lxDsFGd3bYTy57Z7eyxmj/WHG8CH/uxTHZKF8CABYpgdu7aKyThGjt4VlT1lP5gHQRibL1BNUrj9ZpRBa55eXU8i7hS3emNjkHCNTOltFoIEGHuQCpazR0JNUEZWCaIprIb8Wl3Zb6ix2cagZYdrTnnxBh5VTxs0inOzWpR4hnDXI4mHRAbz+EYuxb31i1XiSTGcHiK3IjuBdmzyA1wM4DCB6M1FW0KXfzBibzG5Y3lR0wZCOdlafwsyeOLEsx58qSeaYVXVivIHAMsRW8p0CwiDSDfkUopaz+z/xJKFMMuVvFSu0bwCXCEsKa8/r/CUldP3HGEeC4LYMQDRTbyKq6WeGrgEgOSlhOOUF/Kk6DpjLW2lBLBwg5t0D04SUAACygAABQSwMEFAAJAAgAokjzWKgYmT5BAAAAQAAAAC0AHAAxNjE4Y2QxM2M1MjYzNzIwZWM5NThjM2IyNGI5ZDFjOC5maWxlbmFtZS50eHRVVAkAA0AsmmZALJpmdXgLAAEEIQAAAAQhAAAA4H6ptg4sCWpVqsfjZy1dlkxmxUqnp/sxaJuhFbmDREpjxA+3BV/rEuEkbo7hfBrSxUMs1ZjA1J7bgn8jwDnjhVtQSwcIqBiZPkEAAABAAAAAUEsBAh4DFAAJAAgAokjzWDm3QPThJQAALKAAACAAGAAAAAAAAAAAAKSBAAAAADE2MThjZDEzYzUyNjM3MjBlYzk1OGMzYjI0YjlkMWM4VVQFAANALJpmdXgLAAEEIQAAAAQhAAAAUEsBAh4DFAAJAAgAokjzWKgYmT5BAAAAQAAAAC0AGAAAAAAAAQAAAKSBSyYAADE2MThjZDEzYzUyNjM3MjBlYzk1OGMzYjI0YjlkMWM4LmZpbGVuYW1lLnR4dFVUBQADQCyaZnV4CwABBCEAAAAEIQAAAFBLBQYAAAAAAgACANkAAAADJwAAAAA=",
|
|
"deleted": false,
|
|
"disable_correlation": true,
|
|
"object_relation": "malware-sample",
|
|
"timestamp": "1721379960",
|
|
"to_ids": true,
|
|
"type": "malware-sample",
|
|
"uuid": "b6461d8d-3937-4a4c-a242-2b68039081da",
|
|
"value": "ad492bc8b884f9c9a5ce0c96087e722a2732cdb31612e092cdbf4a9555b44362|1618cd13c5263720ec958c3b24b9d1c8"
|
|
},
|
|
{
|
|
"category": "Artifacts dropped",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": true,
|
|
"object_relation": "mimetype",
|
|
"timestamp": "1721379960",
|
|
"to_ids": false,
|
|
"type": "mime-type",
|
|
"uuid": "c4111c05-c61b-4e8e-8fe3-ed0948d9203d",
|
|
"value": "application/octet-stream"
|
|
},
|
|
{
|
|
"category": "Payload delivery",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"object_relation": "ssdeep",
|
|
"timestamp": "1721379960",
|
|
"to_ids": true,
|
|
"type": "ssdeep",
|
|
"uuid": "4f1b353a-51a1-4e16-ad46-b56347b79f9b",
|
|
"value": "384:bIy44Wo45c59r/qQqu1QhSn88MyU64guxkP5O84VLv8xB0+Cn:9495c59rSQBG8CJxfexBl0"
|
|
},
|
|
{
|
|
"category": "Other",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": true,
|
|
"object_relation": "state",
|
|
"timestamp": "1721379960",
|
|
"to_ids": false,
|
|
"type": "text",
|
|
"uuid": "9cc5d373-1c01-4d10-a9e0-f9ad1352b4c1",
|
|
"value": "Trusted"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"comment": "",
|
|
"deleted": false,
|
|
"description": "Report object to describe a report along with its metadata.",
|
|
"meta-category": "misc",
|
|
"name": "report",
|
|
"template_uuid": "70a68471-df22-4e3f-aa1a-5a3be19f82df",
|
|
"template_version": "8",
|
|
"timestamp": "1721380187",
|
|
"uuid": "10555906-70b1-43f3-944b-fa15f6436ea9",
|
|
"Attribute": [
|
|
{
|
|
"category": "External analysis",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"object_relation": "link",
|
|
"timestamp": "1721380187",
|
|
"to_ids": false,
|
|
"type": "link",
|
|
"uuid": "6a620f18-bdee-409a-a412-b52a5c8c0494",
|
|
"value": "https://www.circl.lu/pub/tr-87/"
|
|
},
|
|
{
|
|
"category": "Other",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": false,
|
|
"object_relation": "title",
|
|
"timestamp": "1721380187",
|
|
"to_ids": false,
|
|
"type": "text",
|
|
"uuid": "1be6ed60-b90d-4329-a721-d3620891b736",
|
|
"value": "TR-87 - CrowdStrike Agent causing BSOD loop on Windows - Faulty Update on Falcon Sensor"
|
|
},
|
|
{
|
|
"category": "Other",
|
|
"comment": "",
|
|
"deleted": false,
|
|
"disable_correlation": true,
|
|
"object_relation": "type",
|
|
"timestamp": "1721380187",
|
|
"to_ids": false,
|
|
"type": "text",
|
|
"uuid": "5aabba67-281e-4001-9ba0-f78afa74dfd6",
|
|
"value": "Report"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
} |